Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
File: 1-YUzm9bktvZypnyvdxbuQMFLlWk.mft (raw, json)
Hash identifier: fnL+KVrmq8mFB/A7KhwnhD98bhRy6lUGbju7G1rt6Zg=
Subject key identifier: FB:D6:E9:33:3D:87:58:E6:30:00:B9:A7:95:5D:AD:1E:81:D4:AD:FD
Authority key identifier: F9:85:33:9B:D6:E4:B6:F6:72:A6:7C:AF:77:16:EE:40:C1:4B:95:69
Certificate issuer: /CN=f985339bd6e4b6f672a67caf7716ee40c14b9569
Certificate serial: 019E1EA359D78824AEF665761CC891423496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
Manifest number: C2
Signing time: Wed 13 May 2026 00:01:22 +0000
Manifest this update: Wed 13 May 2026 00:01:22 +0000
Manifest next update: Thu 14 May 2026 00:01:22 +0000
Files and hashes: 1: 1-YUzm9bktvZypnyvdxbuQMFLlWk.crl (hash: JXVDPtcdQ699cA/slYmiQmr/krl2lpIHLsMQHGFFUCg=)
2: vTv6Y9pYzSLa4y30BsFSU3zUkkI.roa (hash: W0KsvSQFE2TKZ3eONDLazVIwQ+vxG34zEx4WZk3Nw8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:59:d7:88:24:ae:f6:65:76:1c:c8:91:42:34:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f985339bd6e4b6f672a67caf7716ee40c14b9569
Validity
Not Before: May 13 00:01:22 2026 GMT
Not After : May 14 00:01:22 2026 GMT
Subject: CN=fbd6e9333d8758e63000b9a7955dad1e81d4adfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:19:07:78:f2:69:db:f6:de:04:14:04:65:
aa:b5:e0:ec:cd:bc:a6:a7:29:83:dc:92:9a:6e:1f:
3d:ef:4e:97:18:5c:dc:eb:51:90:88:ba:29:5d:7f:
95:cb:a0:49:8b:33:f6:b0:79:1b:d5:67:11:48:43:
2f:98:98:b3:e7:98:3c:8c:1f:89:c8:98:42:da:e4:
fd:a9:b0:05:79:af:c5:76:3a:af:54:19:df:29:b9:
1b:4d:30:dd:9d:2c:d1:49:06:a9:1e:2d:23:80:52:
76:84:e0:ea:22:71:9a:5f:f1:b0:c7:3a:47:27:5b:
a7:cf:96:25:9f:fc:6e:6d:12:ac:97:3d:6e:45:fc:
37:b7:2f:b4:99:5a:51:71:14:3d:dc:f7:42:a9:c0:
40:8b:f8:11:4c:6a:0e:64:fc:fb:f8:62:68:46:54:
15:52:dd:96:46:4b:9f:32:aa:e4:28:42:bd:e9:2b:
3d:1a:f3:dc:2f:d5:3c:8a:3f:a5:c8:37:2e:18:fc:
9e:ae:97:e5:78:86:53:56:6e:cf:f1:42:96:55:1d:
9b:de:18:cc:5b:6b:fe:35:90:4c:62:44:78:52:04:
71:51:c0:13:06:08:01:3f:70:df:0d:4e:b9:77:a5:
15:05:30:5d:f2:1b:41:91:b5:1b:c6:49:6d:4e:3f:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D6:E9:33:3D:87:58:E6:30:00:B9:A7:95:5D:AD:1E:81:D4:AD:FD
X509v3 Authority Key Identifier:
keyid:F9:85:33:9B:D6:E4:B6:F6:72:A6:7C:AF:77:16:EE:40:C1:4B:95:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:13:aa:8c:66:1e:42:1f:12:10:b2:04:b6:53:58:65:0f:76:
ea:68:3c:4c:a5:18:cd:6e:ab:1e:68:33:e9:77:33:08:0c:49:
d9:c1:42:26:88:9e:6f:80:f6:c8:1f:29:59:d1:a1:43:6b:c4:
e9:77:a2:a3:10:6c:29:0f:07:4c:03:15:02:ea:e1:ab:f4:51:
ef:89:7d:e4:1a:d2:ac:cc:39:a3:42:9d:26:f5:08:cf:9c:e8:
f9:5a:9b:31:04:4f:e4:18:36:11:27:40:fe:4c:16:51:36:e3:
87:df:d8:e9:57:d7:a1:78:24:2f:41:e4:67:2e:4d:3f:dd:fc:
e2:f3:27:9d:cf:1f:85:0f:e9:b5:b6:ab:6c:fb:e6:b2:e3:cc:
f6:47:2e:e4:09:a4:16:f8:e0:0d:a6:38:80:f3:c6:aa:3c:f7:
37:a9:86:86:ba:b8:64:bf:65:38:0c:d2:fd:55:de:05:da:60:
8e:c4:9e:42:ab:2b:47:3b:e0:72:6b:cb:43:48:8d:a4:02:48:
76:f8:90:71:6e:0e:c9:a9:d9:e5:1d:1a:ca:cd:ce:79:82:94:
cd:59:5b:2a:b4:8b:22:74:9a:65:f8:4a:fd:74:4d:6e:4d:59:
8b:1e:31:13:59:d4:57:a3:1b:2d:9c:7a:2e:5e:5c:9b:85:00:
09:6c:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:06:21 2026 by rpki-client