Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: 4B4lKcLac6Q43pnLnwUqIqR7SI98MgN2hE9Yi3yVQiU=
Subject key identifier: FB:D0:1A:37:E9:25:20:BA:0E:A7:46:04:F9:C9:94:E8:E5:5B:E0:E0
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 019E20C8D25D23E1E358D193D6CAC63A48DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 04BB
Signing time: Wed 13 May 2026 10:01:32 +0000
Manifest this update: Wed 13 May 2026 10:01:32 +0000
Manifest next update: Thu 14 May 2026 10:01:32 +0000
Files and hashes: 1: ILxA1XEGj58DPvCJ70R3V0QUW0o.roa (hash: 2pgTad0+RDSMUqb1cSCzcPHq0QPOVvclokToC+rjLTI=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: M/tJcRX+C4Rv4ZIBlYeeUUMhWRJROf8sq0jJufOEgrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:d2:5d:23:e1:e3:58:d1:93:d6:ca:c6:3a:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: May 13 10:01:32 2026 GMT
Not After : May 14 10:01:32 2026 GMT
Subject: CN=fbd01a37e92520ba0ea74604f9c994e8e55be0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:dc:d4:a8:b6:3c:0f:a1:1c:38:9e:b9:f9:
85:c2:20:b2:0f:e1:12:84:5c:14:1d:65:36:56:74:
ae:bb:b6:ce:de:b0:17:b2:36:43:78:c5:37:c9:45:
8d:f3:d3:9d:79:1f:ce:57:8e:a9:7d:7a:34:5a:ab:
cf:d3:4d:4c:77:62:16:fb:5d:31:9b:0f:f6:b4:f1:
0f:c3:53:f6:66:c0:cb:d4:c8:93:95:49:1c:ef:42:
df:2b:9d:e4:19:a8:27:ce:02:03:2a:c7:81:2f:dd:
4d:15:4b:bd:cb:6c:12:d7:8a:cd:24:8a:b1:90:fd:
c1:b0:fd:10:35:fd:dd:8a:7f:7c:34:78:51:08:4e:
69:92:6e:27:4e:8d:8f:86:a0:a2:34:df:28:49:af:
d4:7f:95:90:08:91:89:84:1f:08:2e:9b:31:aa:c9:
eb:76:ba:da:d8:07:f7:5b:de:30:60:c5:cb:f5:3c:
db:33:7c:d7:0a:47:63:e8:5a:3a:92:d0:a0:9d:d5:
92:dd:1d:f6:bb:34:3b:0d:ba:be:81:46:34:51:a6:
3f:bb:6d:57:03:09:d1:08:6e:cd:04:66:7d:f0:f5:
31:47:fc:00:59:0e:1c:d6:64:0b:de:50:66:84:82:
06:6c:f3:73:5a:dc:57:0e:77:13:73:1a:0d:53:42:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D0:1A:37:E9:25:20:BA:0E:A7:46:04:F9:C9:94:E8:E5:5B:E0:E0
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8f:19:2c:17:2e:50:e2:08:2c:7f:af:50:99:ca:e9:27:c2:
89:28:f6:53:fa:2e:9d:6e:3d:72:fe:29:88:72:53:95:93:e7:
20:0a:94:ab:38:68:92:d5:2d:eb:43:4a:bf:a6:00:35:0b:4c:
51:2c:45:dc:0a:73:83:1f:c0:6c:ec:df:f5:a7:70:a6:54:8b:
0a:9e:f4:78:f7:06:d6:4a:7d:d0:17:e8:68:bb:ed:a4:2b:3f:
54:11:7c:bf:aa:e5:2b:2c:44:b4:a8:f8:d6:37:73:48:d7:03:
f4:b7:01:07:82:29:9c:d1:83:a8:81:98:52:31:14:99:a5:f8:
e9:46:f5:d5:dc:cc:68:57:80:41:a9:1a:c7:75:c2:d7:36:1d:
03:d4:27:af:7e:dc:f7:1a:44:bb:74:57:3d:d5:d3:3b:4a:ff:
a4:23:81:2d:04:1b:23:3d:e7:2c:7c:1f:36:45:82:af:99:53:
dc:6d:6f:7f:58:88:fd:7e:6d:da:4f:56:41:c9:3c:e7:2f:67:
e5:11:ab:5b:8d:df:e8:5f:c6:14:d8:e9:84:38:6c:00:3a:5f:
20:8c:49:dc:d7:1e:ac:4c:3a:bc:7f:ae:e5:b2:71:42:31:7b:
fc:58:56:5b:1b:20:38:f0:a5:0a:62:97:8a:b3:7d:cd:e6:83:
0d:e0:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:40 2026 by rpki-client