Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: 81CwP1XuBzifitni5pYA19JgIPTzkRYIe4v/uIzoY98=
Subject key identifier: C1:52:4E:88:97:5D:15:70:5C:6D:A2:62:A5:20:B7:69:BE:A5:D4:B3
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019E1DC7660DA373CBE5A7EABE58D51A3B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 07DF
Signing time: Tue 12 May 2026 20:01:07 +0000
Manifest this update: Tue 12 May 2026 20:01:07 +0000
Manifest next update: Wed 13 May 2026 20:01:07 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: fvNLOChIfSVDVOOmN8fxqn/JOSMUhcfzbvshXv57r70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:66:0d:a3:73:cb:e5:a7:ea:be:58:d5:1a:3b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: May 12 20:01:07 2026 GMT
Not After : May 13 20:01:07 2026 GMT
Subject: CN=c1524e88975d15705c6da262a520b769bea5d4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:81:30:03:58:cb:1f:db:a9:b3:98:39:c8:
96:59:6b:d4:55:80:3b:64:2f:27:d7:12:45:25:40:
cc:bc:4b:35:67:cf:f4:94:b9:fb:01:c2:d3:57:ec:
49:b9:e4:65:20:dd:15:ea:9e:47:bd:33:0d:ac:15:
a7:8f:3b:1e:0a:e2:10:87:d0:66:23:80:6d:2b:c5:
da:3f:0d:ed:ef:59:d4:0e:40:47:5a:5b:34:bb:43:
24:dc:6b:f4:32:b9:89:7e:a7:72:e3:15:eb:28:1d:
a6:08:18:28:ae:76:a5:72:04:20:34:5c:ed:e1:e4:
83:8a:12:f5:ad:f4:c2:d1:fe:6f:f7:e5:58:cb:f7:
f3:0d:da:71:e9:a8:ab:65:d8:0c:40:2c:7f:02:2d:
14:f2:c0:9b:6d:93:e1:7b:09:7b:7d:16:57:8b:54:
fc:1f:e8:0a:f1:86:ca:71:f4:ec:af:61:c6:b7:46:
05:8f:cd:e7:01:6a:59:af:d6:79:14:b8:66:37:6c:
1c:07:84:0a:d7:3f:c9:1d:56:4e:85:01:60:0b:e4:
a9:6a:0a:ab:bf:9e:39:39:62:c6:9f:b2:29:70:fe:
fb:f1:a6:e5:a6:a5:47:db:e4:2d:e3:c4:69:9a:39:
6c:1f:61:fe:d0:35:08:b7:2e:62:cd:7d:32:ea:cb:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:52:4E:88:97:5D:15:70:5C:6D:A2:62:A5:20:B7:69:BE:A5:D4:B3
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:92:51:4b:94:c2:bd:ec:24:df:eb:63:3a:db:93:52:d9:3a:
a2:4a:b3:ee:5e:8e:c0:11:f0:f3:86:cb:80:d1:95:5c:e3:2d:
a9:0b:d2:3e:15:b9:b9:76:ad:f0:ef:fc:15:97:71:fc:bf:d5:
a5:03:4e:10:ea:c3:e7:94:66:9e:f7:37:f4:d6:cb:07:8f:eb:
f3:b7:8f:61:70:83:2e:ab:06:d8:7c:72:39:e6:b3:f0:0f:f0:
7d:15:e7:c6:49:9d:9b:53:e7:84:1c:c9:8b:fb:e1:b1:fd:3a:
f1:c7:21:7a:3e:1c:55:bb:5e:db:79:25:70:1c:c6:98:15:a5:
88:2c:2a:7e:79:36:f1:8e:3b:3b:01:70:4f:68:6a:70:16:ae:
ce:cc:b3:21:79:d6:46:b1:bf:21:58:6e:13:cc:53:1b:77:3a:
36:3d:71:95:1d:f7:da:aa:d5:07:d5:c9:08:6a:18:24:96:a0:
d3:2c:4c:98:ae:b9:f7:a0:63:55:46:01:3d:be:2a:f8:d2:23:
07:da:9f:8a:bb:9a:e0:5d:e5:41:f9:d1:58:4f:30:2d:c2:c1:
b9:18:07:56:53:a2:0f:be:49:19:62:c3:ae:51:d6:c8:3e:d7:
c1:2e:14:3d:56:a5:92:b9:80:ac:35:b3:81:90:a3:f3:6c:7c:
90:c0:8d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:33 2026 by rpki-client