Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: MNJmF4Rl0zHBY5DjqlYF+KMmwMQgicj/TgTXbR4crUE=
Subject key identifier: F0:43:3C:DA:DC:4A:B1:33:4C:52:FD:FC:4E:3E:B3:69:EA:C3:14:8D
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 019E205AAFA58564D3C13CE6EB3AD3C393AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 13A5
Signing time: Wed 13 May 2026 08:01:14 +0000
Manifest this update: Wed 13 May 2026 08:01:14 +0000
Manifest next update: Thu 14 May 2026 08:01:14 +0000
Files and hashes: 1: Qt8hBCMlNLI8nIk_LiMf9y2OnJw.roa (hash: GjRUGfRDG86hd7K9wU5XQ1rme8zCmD1Q06yAXGf5F6Q=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: VDKgkr0tUUcsxtTXZB592g0nKLaq/ItCIk41/S766qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:af:a5:85:64:d3:c1:3c:e6:eb:3a:d3:c3:93:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: May 13 08:01:14 2026 GMT
Not After : May 14 08:01:14 2026 GMT
Subject: CN=f0433cdadc4ab1334c52fdfc4e3eb369eac3148d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:21:6c:69:d5:e0:62:54:94:60:bd:44:d8:a9:
19:3c:66:04:54:70:77:9b:c4:5e:a6:0b:b2:61:83:
1d:bf:50:31:36:db:a7:d7:30:80:b6:25:22:82:5d:
fb:3b:41:61:fe:63:13:91:f3:33:5d:d5:82:88:68:
8b:b0:51:b4:c3:c7:f6:9b:78:35:73:89:fe:12:62:
33:d0:4b:cc:55:3a:57:69:15:2f:3e:c8:c4:de:d5:
44:f5:5d:a3:aa:e5:46:e8:f6:24:31:3b:99:f2:10:
4d:a0:2d:7e:85:bf:cc:96:7f:93:8d:3b:57:3c:a3:
64:63:6d:0b:34:ff:88:84:82:28:ca:11:86:f8:fe:
9e:39:9e:8a:9e:0d:2e:3c:c5:b3:1f:ca:3d:01:aa:
3c:d3:a6:a7:08:69:30:ba:5b:3d:8f:77:48:61:6f:
87:b5:d6:8f:82:e6:e3:39:ee:81:4b:ee:40:cd:ca:
03:15:3e:46:bf:29:4a:ce:49:e9:05:db:b8:11:6b:
96:c8:37:0a:7e:5b:25:c8:b3:59:33:b9:87:3d:45:
91:b8:94:d6:b1:9e:ef:8d:21:a1:fb:9f:e7:c6:d2:
f8:dd:99:1d:89:bb:43:d1:20:62:65:3e:0b:80:e5:
ae:32:ef:74:8a:45:42:66:4b:d9:06:d6:36:4a:6e:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:43:3C:DA:DC:4A:B1:33:4C:52:FD:FC:4E:3E:B3:69:EA:C3:14:8D
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:24:d0:bb:f7:3d:25:0a:f1:2c:3b:af:a2:98:02:8e:02:7a:
6e:19:ea:32:51:74:bb:06:83:57:d6:0d:0d:fc:c4:03:25:6b:
e5:8f:cc:09:d5:92:7b:25:f0:f2:66:d8:31:5a:7f:c9:53:d6:
4f:11:d1:bb:cb:30:61:a4:70:30:55:2e:e3:68:87:17:8e:e8:
ee:09:aa:7a:a1:6c:66:9b:bf:78:35:18:76:ce:12:1b:b5:16:
ce:78:c4:aa:ca:74:f5:4b:9e:86:d4:b7:0f:48:99:3d:23:19:
c5:0a:37:0d:ac:de:83:de:7f:f2:4a:15:b1:e5:ce:bb:58:9f:
e4:39:f4:b2:cb:2d:ac:06:85:4b:2a:ab:b9:b9:c5:40:bc:46:
4e:be:f6:14:28:49:f8:35:57:3c:0a:dd:cf:98:3d:b6:8b:7f:
d1:f8:f4:cc:8e:40:fb:72:58:b9:29:e0:84:ff:03:72:c2:24:
da:38:c1:be:7a:cf:4b:13:92:04:04:49:52:82:46:1f:e7:f9:
48:da:08:cb:2a:44:da:19:70:5f:00:9a:44:cc:82:12:f9:bd:
7d:88:ea:99:24:db:28:2e:6f:b9:2a:04:d5:2f:d8:50:db:75:
e2:f8:84:6d:b0:20:31:d3:9c:ce:5d:9a:fd:9e:17:a1:c2:7a:
1a:c5:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:49:55 2026 by rpki-client