Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: 5WUedySHDCRuY8tTV7VI6rvJVj1NJBf8yCrG3bFP/X0=
Subject key identifier: 65:32:43:79:04:A4:CE:AE:16:3D:37:8D:08:6E:72:68:C1:4E:D9:87
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 019E1EDA585FF90DD81FCBF6DED3E9B816AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0CC3
Signing time: Wed 13 May 2026 01:01:26 +0000
Manifest this update: Wed 13 May 2026 01:01:26 +0000
Manifest next update: Thu 14 May 2026 01:01:26 +0000
Files and hashes: 1: 6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (hash: 2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: jYQF6AmThwF+6vcljv0nOsBkzphGdRGU3vyNKp51i0Y=)
3: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (hash: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:58:5f:f9:0d:d8:1f:cb:f6:de:d3:e9:b8:16:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: May 13 01:01:26 2026 GMT
Not After : May 14 01:01:26 2026 GMT
Subject: CN=6532437904a4ceae163d378d086e7268c14ed987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c6:68:3a:3e:40:c0:04:78:d1:82:b8:5a:06:
ed:30:66:8c:5a:25:2b:a4:c3:24:f4:c0:b1:b2:a4:
f9:82:bb:d6:42:11:61:bf:8e:3b:02:f2:a8:64:f0:
02:aa:71:61:d9:e4:37:f7:47:af:d7:a3:c1:0c:0e:
e5:cb:7e:89:f4:7f:c7:24:5a:31:85:14:fe:cb:24:
f0:b9:36:67:c8:4f:29:b4:cf:a9:3f:2b:cd:16:29:
f7:aa:ba:5a:8a:a0:69:82:d3:d2:3a:8b:69:09:ce:
b8:c0:b3:80:c9:70:2d:80:9b:10:d0:2f:1d:62:5c:
a6:d9:47:fe:d2:02:5b:3f:a1:ae:d4:ae:c3:a0:b7:
9d:6c:ab:3e:e3:82:e4:47:51:54:ce:3f:8a:c6:af:
75:15:dc:75:9e:7c:7c:74:af:12:69:e4:d1:b6:8f:
ef:4f:5d:79:2b:f5:20:49:5d:e4:86:1d:6c:15:de:
8e:e9:28:0c:8c:fc:2c:99:c0:72:9b:2b:f7:d6:3c:
d4:59:a3:29:b4:0d:dd:df:07:3d:b7:42:62:be:9f:
f4:4e:eb:10:8b:f2:b6:24:91:d3:99:f1:8a:fc:4a:
08:05:d0:7d:cb:ee:b8:70:27:fe:a9:0b:57:f7:fd:
9a:9e:fb:fc:09:e1:3a:54:14:6c:aa:08:39:31:12:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:43:79:04:A4:CE:AE:16:3D:37:8D:08:6E:72:68:C1:4E:D9:87
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:34:62:3f:8d:fb:89:1a:3e:78:eb:9f:e0:93:e1:d2:97:d4:
12:d4:9a:b6:91:70:4b:ab:7f:f3:5c:4d:54:55:4f:e6:f9:e8:
a4:bd:76:32:a8:93:fb:0d:52:fc:d4:29:22:dd:12:84:a7:7f:
3a:96:2c:99:7b:8c:da:6c:a0:e0:4e:bd:16:19:3d:8d:f6:19:
0d:db:cd:56:11:8f:7f:0b:44:8f:ac:68:c6:c3:1a:84:b5:07:
a6:45:ca:c9:3d:e6:9e:c5:e4:ca:79:41:4e:d7:af:b0:25:11:
66:8d:e2:81:11:20:fb:7e:d3:21:f3:f9:d7:c2:22:a3:24:33:
9b:82:09:3a:e7:31:69:1a:5f:c8:5c:8e:56:b7:a8:88:3d:9c:
09:87:7c:24:af:1b:d5:30:91:8b:2d:d7:72:a4:2f:74:e9:63:
fa:6a:1f:bc:95:c7:80:00:40:10:ae:ca:18:18:59:ed:52:87:
fb:cf:87:33:af:cc:0a:23:40:11:43:94:98:80:c0:4f:3a:10:
5e:f1:cc:82:b2:16:eb:d8:60:54:5a:57:c1:25:65:cf:fb:8b:
ae:e6:0d:61:bd:e1:6e:2e:6a:f6:88:1a:9a:82:85:23:92:55:
e8:bc:b6:9b:6b:71:f9:de:87:2d:d8:1a:3c:c6:5a:28:d7:56:
a2:69:6d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:34 2026 by rpki-client