Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier: 1C//91J01H8zs+H+6EmtxrlLnUitMfdOLFPuNPatEDo=
Subject key identifier: 4F:B5:BF:21:69:65:E0:8F:6D:94:2F:13:14:08:8E:20:1F:43:BB:7F
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial: 019E20243C00B256495907CA0F218CEF3FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number: 10CC
Signing time: Wed 13 May 2026 07:01:45 +0000
Manifest this update: Wed 13 May 2026 07:01:45 +0000
Manifest next update: Thu 14 May 2026 07:01:45 +0000
Files and hashes: 1: 7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa (hash: Ku59KYA/bpOTiSrNCRzEUdSrtiwxD1BQ8G4rzI5+xwk=)
2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: tut3w4PSyV1q2nsczGiCaXid1T1HfoKovVmM2Nh1MZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:3c:00:b2:56:49:59:07:ca:0f:21:8c:ef:3f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Validity
Not Before: May 13 07:01:45 2026 GMT
Not After : May 14 07:01:45 2026 GMT
Subject: CN=4fb5bf216965e08f6d942f1314088e201f43bb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:23:2b:53:1b:48:50:07:4f:c1:25:b1:4e:
49:9b:95:f1:ce:85:d1:84:2e:14:d1:c7:4c:42:16:
d8:59:b7:c9:f6:c3:c0:3a:5e:96:61:97:5a:90:f2:
28:2a:c0:22:ab:63:77:a6:8d:84:f9:60:fd:2e:9e:
85:ff:ff:39:1e:46:04:08:30:d4:58:76:96:17:ba:
ec:19:0c:0f:ed:91:42:fd:12:59:40:28:16:da:88:
92:67:fa:33:b9:f3:5e:b1:71:dc:b9:b8:fa:3e:6d:
db:0f:83:23:de:8a:47:b7:13:6c:9b:53:e6:e9:4f:
8f:00:3a:bd:a8:0b:29:bb:19:b9:75:c6:f4:df:1c:
d7:e7:f2:f7:6e:c7:a4:6b:76:34:18:be:5a:de:46:
f7:73:c9:3d:e5:ec:7c:e5:e2:b8:02:d2:7c:16:2a:
5b:a4:96:d4:fa:1a:42:e8:a8:1d:11:7f:d9:90:ef:
1e:ba:c1:2f:5e:10:6a:b4:fb:1a:48:1c:14:eb:2f:
62:47:f9:37:f5:6b:52:c5:37:24:d1:d3:d5:72:90:
6b:35:70:9a:37:d0:6e:ca:9f:37:97:7e:14:3c:2b:
e6:3b:f5:ee:a0:89:8d:d0:e9:e6:ae:bb:bf:b9:45:
46:60:5b:97:92:d4:88:7a:b7:a4:40:99:8d:70:61:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B5:BF:21:69:65:E0:8F:6D:94:2F:13:14:08:8E:20:1F:43:BB:7F
X509v3 Authority Key Identifier:
keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f2:7a:64:f1:b0:ad:81:42:53:06:78:37:c7:dc:40:df:c9:
37:3a:e2:50:9a:a6:38:3c:91:b2:29:b1:ff:1f:ec:96:eb:cf:
0e:c8:71:4b:cc:2f:73:80:61:e8:ad:2d:61:fc:b7:23:0f:77:
9c:cd:95:a1:42:bd:86:6f:4c:19:79:b7:65:7c:e1:9b:3f:f1:
5a:a6:b4:aa:3a:8a:ba:7a:f8:f7:cf:a1:b4:3b:cb:92:59:a7:
7c:68:e8:7e:a4:5c:fa:e9:48:9e:70:f9:60:ed:92:64:9c:08:
24:6a:7c:64:cd:90:13:eb:ef:3c:11:c3:94:01:3e:78:fe:bd:
3a:f7:18:42:01:45:16:37:b4:a8:15:ce:04:cc:5b:48:12:70:
e7:20:73:38:29:e0:5d:b7:87:08:7c:72:ca:d4:7c:0e:55:14:
d9:2d:46:a8:a4:3a:61:55:eb:30:01:5c:62:70:6f:47:d3:2c:
94:64:5d:69:c9:ce:63:82:7c:72:55:eb:05:65:8f:f6:d3:66:
4d:5e:8e:bf:fc:16:b0:1b:48:54:81:e0:c3:da:de:de:f2:2a:
ce:44:cb:73:7f:50:94:f8:72:94:4a:52:9f:69:ef:81:3d:ee:
6f:27:2e:87:4f:b7:f4:f7:2a:aa:47:d3:ba:1e:95:68:82:5f:
4a:c7:22:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:11 2026 by rpki-client