Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: CiCYBO9UrcS120yZPP38lTg5y0Q8Nk+wtetMcF4JmNY=
Subject key identifier: 7F:F6:67:0E:D8:E5:07:A7:D8:C8:19:EE:BE:6F:14:E8:5F:43:A8:93
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 019E1CB48B7007B6902A49E91694305D1C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 0478
Signing time: Tue 12 May 2026 15:00:54 +0000
Manifest this update: Tue 12 May 2026 15:00:54 +0000
Manifest next update: Wed 13 May 2026 15:00:54 +0000
Files and hashes: 1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: sFcdtSSQJ7zFcDhYugdp9c1AS0Kg9Rrv9PlpHzxJGHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:8b:70:07:b6:90:2a:49:e9:16:94:30:5d:1c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: May 12 15:00:54 2026 GMT
Not After : May 13 15:00:54 2026 GMT
Subject: CN=7ff6670ed8e507a7d8c819eebe6f14e85f43a893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:bd:01:5e:7c:ca:16:27:43:52:27:64:64:
a1:57:0f:96:af:21:b9:4f:98:83:35:d0:6d:a8:d3:
9f:9b:eb:32:a3:22:3e:e9:c5:1d:ad:6c:5d:82:5a:
f7:38:2d:b4:75:7c:6a:73:99:2f:5c:47:2e:40:f9:
4f:f1:86:0c:58:6e:61:f1:d4:95:79:25:58:ac:c9:
69:0d:ef:d1:80:0a:ca:fe:6c:22:3c:a0:eb:99:b4:
a0:4f:d3:27:62:2d:dc:00:28:2c:83:5f:a8:9c:59:
92:c4:34:54:97:0d:e6:e6:19:1a:91:76:65:cb:83:
96:e0:e6:92:91:68:32:f1:ec:73:32:d1:52:2c:d3:
fa:a4:a4:59:44:f0:04:b7:b6:da:08:89:8c:fa:10:
7c:1d:55:19:19:9f:63:62:85:3e:84:32:24:29:15:
a8:1b:8c:4f:57:50:2c:04:88:59:f3:17:0d:9e:5d:
b1:d0:e8:e2:78:56:3b:f0:eb:aa:92:09:a1:30:4e:
af:c1:b8:6b:b3:99:24:46:ce:f4:b4:07:d5:e5:92:
25:ff:f4:de:c0:7b:67:61:be:c1:14:6e:9b:b1:47:
35:54:f3:3c:52:e9:31:6d:5c:23:f9:1b:70:be:d4:
fb:e8:ad:8c:53:28:09:13:b0:01:de:4a:ea:4b:23:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F6:67:0E:D8:E5:07:A7:D8:C8:19:EE:BE:6F:14:E8:5F:43:A8:93
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e5:5f:5d:67:28:93:b3:e2:0f:75:ad:fa:ed:6a:db:ea:5d:
60:74:ac:f7:3a:d1:58:8e:57:7d:44:f1:81:2f:d8:67:1f:a9:
e3:ae:f0:1f:2a:10:f1:28:7d:da:d0:f9:1b:29:dc:c7:23:26:
f7:c8:76:15:ab:0f:18:da:29:16:4d:9e:b8:18:38:4d:d7:ce:
f3:7c:01:44:75:69:dc:52:ee:0a:a3:e0:2d:4f:66:07:59:66:
bc:10:af:a7:4b:e8:a1:d9:de:a9:16:a5:ab:19:53:a7:2c:7b:
8f:6f:54:48:f0:7e:6f:dc:1e:ab:d3:7a:dd:9b:01:5a:d2:b0:
36:2f:a8:d6:fc:dc:70:21:1d:4d:da:65:6a:d9:44:86:4c:ae:
46:82:fd:b6:bb:d1:6d:56:4d:1e:d9:e7:99:e9:b2:a5:b2:43:
0d:da:83:d0:bc:65:d1:6b:60:02:31:71:48:37:86:86:8b:07:
e0:6d:fc:0a:96:15:52:1b:e7:9e:14:4a:b1:14:a1:13:57:66:
28:c6:7e:37:d0:08:44:1e:7f:79:3c:56:f8:47:5c:ba:59:b9:
40:cc:4b:da:9b:2e:92:45:a2:50:79:07:95:da:ec:cd:cc:c3:
05:96:5c:51:12:d0:e1:74:14:b3:2e:e6:6b:51:96:c1:0d:5b:
da:a1:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:15:51 2026 by rpki-client