Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File: bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier: X/J9oL8p0G0zrXNv7Japld0vJHOrkj9vRdigMg4v8Ss=
Subject key identifier: CF:B7:0B:97:57:74:82:CC:E6:CD:B6:7E:F3:72:91:07:47:FE:A0:33
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial: 019E21DB1A79D97EF94ACB4C0ED7DD90B809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number: 10D3
Signing time: Wed 13 May 2026 15:01:07 +0000
Manifest this update: Wed 13 May 2026 15:01:07 +0000
Manifest next update: Thu 14 May 2026 15:01:07 +0000
Files and hashes: 1: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: /rcJS0ZBxBkEB7e5bi/UVWXwqWv+2eC93U852VQjo+Q=)
2: iNHmZBm96p22r1v1NNf0vUA5CNU.roa (hash: W3eGIa/whnFHaDnHwnO2+GYR1xjT6RdNQB1XA+AY4TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:db:1a:79:d9:7e:f9:4a:cb:4c:0e:d7:dd:90:b8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Validity
Not Before: May 13 15:01:07 2026 GMT
Not After : May 14 15:01:07 2026 GMT
Subject: CN=cfb70b97577482cce6cdb67ef372910747fea033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:27:6d:af:4c:44:b2:c1:d9:fc:12:51:1f:
c9:5f:84:22:9e:72:f5:32:b4:f8:42:0a:a8:34:01:
48:3d:91:c7:28:42:c4:4a:3d:48:0c:04:79:ee:00:
58:0b:3e:57:55:5c:de:72:63:26:ea:e3:68:49:24:
f2:48:da:17:46:f7:d1:b5:78:6d:3d:a9:4b:39:85:
c4:fe:ff:98:99:c9:a4:ea:da:ca:5c:4a:50:15:dd:
1c:c0:2d:cf:21:e0:3c:55:9a:8e:b8:9e:e4:22:02:
f5:9b:86:72:da:e5:fa:b4:7f:51:9e:84:ce:94:a0:
17:bf:64:5d:56:cd:90:cd:6f:f0:2d:ff:ad:e3:bd:
8b:1e:a2:b2:da:b0:af:73:a0:c8:01:31:71:b5:da:
de:07:6a:a7:9d:5e:95:e2:47:f1:9f:44:7c:0b:5f:
92:a3:2e:80:5e:5f:4a:c7:c9:a6:50:9c:31:49:25:
3a:8b:0f:68:20:a7:cd:55:19:e9:23:6c:93:13:50:
f9:a1:f5:fb:59:f6:90:11:9e:78:68:4b:92:7b:80:
c5:6e:d9:7f:b1:06:ba:95:6a:b2:4d:6b:d6:77:9f:
0a:8a:20:38:d6:83:d4:0f:35:a0:06:c8:d4:91:1b:
a8:16:24:b3:c9:12:4d:7f:7e:9b:c6:e5:18:a2:e7:
cd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B7:0B:97:57:74:82:CC:E6:CD:B6:7E:F3:72:91:07:47:FE:A0:33
X509v3 Authority Key Identifier:
keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:be:5f:97:ca:97:30:1f:40:86:45:b8:2a:3f:f2:8c:99:91:
b6:14:b2:0d:35:1a:a2:95:9a:4a:ab:db:18:73:b1:b7:41:91:
c6:f7:6f:f8:16:96:75:cd:be:ee:aa:16:7a:1c:ef:d1:8a:80:
13:fe:83:4a:73:70:c9:71:30:d6:57:74:c9:47:b2:43:13:01:
37:38:67:c0:cf:f9:4d:99:1b:26:71:85:bb:93:4a:e9:bd:29:
ed:db:f0:8b:41:c7:d0:ca:3a:9e:ac:ee:01:5a:62:4d:36:f5:
24:a1:cf:b2:a6:28:4a:64:92:93:2e:ba:21:56:39:02:45:ec:
55:8a:ce:06:9b:65:09:0e:a7:d4:44:35:07:24:fd:f3:97:f9:
a1:39:47:7b:3c:07:89:9e:36:d5:81:ae:ae:25:cd:e9:29:45:
58:e6:40:58:b6:09:b9:70:17:7a:cf:34:a3:ff:0a:36:1b:0a:
79:7b:2d:1c:4b:88:75:90:e1:9d:c5:fe:04:9b:8b:c9:a1:64:
65:61:48:84:9f:57:1a:01:d6:5d:7d:68:84:80:ba:5d:10:d0:
cc:2f:a9:85:48:fd:11:92:40:fa:27:5b:11:e5:ba:31:90:d0:
5d:ac:42:b6:f6:e5:5b:1f:10:17:b7:26:60:91:c2:d9:05:68:
a0:64:d9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:45:53 2026 by rpki-client