Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: sm/3OaXSgdCO/O2Ju3nbVTNF+yxkHTR8/PbfP5kSzP8=
Subject key identifier: FE:B0:58:D4:FF:CA:6F:98:E0:E0:43:52:D1:51:EA:F9:7C:B1:93:A4
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 01A1DD951A55544262ABF6B2855F09CF3EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 09D0
Signing time: Sun 15 Nov 2026 05:01:38 +0000
Manifest this update: Sun 15 Nov 2026 05:01:38 +0000
Manifest next update: Mon 16 Nov 2026 05:01:38 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: PJHr/LwE5KP9c73K2UqHSVQMtgfK+oLhidF5NHceqFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:1a:55:54:42:62:ab:f6:b2:85:5f:09:cf:3e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Nov 15 05:01:38 2026 GMT
Not After : Nov 16 05:01:38 2026 GMT
Subject: CN=feb058d4ffca6f98e0e04352d151eaf97cb193a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:16:05:36:d8:7b:47:64:2b:d1:ee:c9:6b:
f7:5d:5a:94:f6:c6:3a:9e:60:df:5c:9c:02:b8:f2:
42:5e:44:2d:ee:15:2a:60:b4:4a:01:52:ca:ca:67:
7b:03:a5:7e:69:e1:a1:5d:4f:d0:ac:77:34:76:c6:
49:f6:0d:61:6e:f5:d4:ea:ad:27:a1:e9:cc:cd:39:
7a:e7:30:cc:a2:ae:02:b1:72:7c:37:97:f9:9b:42:
ac:e4:a5:68:60:12:ad:07:1c:eb:72:38:d1:83:78:
c5:0b:83:20:b4:a0:52:47:d6:a3:7e:e6:1a:89:79:
00:18:51:ed:2b:3e:64:d2:76:92:4e:b9:3b:3d:6c:
d8:43:ad:4e:3c:d1:7e:47:d4:31:64:a1:8c:05:f1:
52:51:70:ef:a0:ce:9f:0c:d8:5c:31:b7:0b:15:f2:
6d:b4:a9:3c:1f:bc:1c:22:96:a2:82:ff:8f:88:42:
be:a6:d2:53:09:45:e3:8b:68:b3:68:1f:28:a9:df:
4e:a8:72:76:3b:4c:8a:d2:43:23:7c:55:50:30:c1:
90:e1:ba:43:cd:e5:ed:e9:96:86:97:2c:19:0b:1a:
ce:79:cd:28:b3:93:c0:f3:c9:05:6b:72:99:62:e0:
f2:f4:73:01:2f:f6:f0:e3:3e:f5:4c:81:05:da:3d:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B0:58:D4:FF:CA:6F:98:E0:E0:43:52:D1:51:EA:F9:7C:B1:93:A4
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c4:21:04:e2:42:ef:11:bd:de:8b:05:99:c2:98:5d:4b:5e:
00:a8:20:eb:a0:cf:bf:52:ea:9f:9a:bd:cf:94:d8:66:1c:9d:
7f:1b:93:f9:57:c8:19:c8:5a:c2:f2:26:3c:97:e2:6b:f6:28:
77:93:2b:51:cb:34:ab:dd:e0:50:81:3e:54:75:65:9f:1e:80:
50:71:dd:b1:52:d9:9f:5e:98:49:db:dc:f7:73:9a:f1:5a:82:
af:62:30:be:d5:7c:ef:63:a0:fa:b3:b7:bb:48:c2:9f:5a:0b:
e0:97:7a:37:eb:46:11:52:4b:49:ce:39:7f:5b:8c:6c:8a:1a:
d1:b5:7a:80:a9:7f:7d:e4:6c:93:e6:09:cd:14:56:0a:9a:a0:
5f:c3:6d:9e:fc:b2:db:93:72:99:19:8d:0f:41:80:31:4b:b7:
fa:9b:7e:46:aa:ed:03:3e:3c:82:1d:82:bf:9b:d0:6a:ec:3f:
d8:17:af:91:21:7c:ee:21:f9:c6:11:e7:77:33:24:9f:69:05:
77:80:b1:d2:0b:83:fb:3c:e1:aa:11:49:91:52:34:3c:af:2b:
c1:22:de:37:88:cc:52:53:1b:29:6d:4c:d8:7b:43:97:f6:2a:
51:e3:48:9a:88:20:19:9e:aa:c2:06:ba:7f:6d:02:dc:0d:4e:
3e:ce:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:51:55 2026 by rpki-client