Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
File: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft (raw, json)
Hash identifier: 3ImKJxNUvLTBIUdtCTQOtQ0/xpdXsBjWpEIJIsCr66Y=
Subject key identifier: 2A:0A:31:27:E3:03:27:B9:4F:62:22:70:EA:4D:B9:0B:0E:69:BA:81
Authority key identifier: CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
Certificate issuer: /CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Certificate serial: 019E1DFE68BB8B29C6B76B4A34AF86DC55D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
Manifest number: 05BA
Signing time: Tue 12 May 2026 21:01:12 +0000
Manifest this update: Tue 12 May 2026 21:01:12 +0000
Manifest next update: Wed 13 May 2026 21:01:12 +0000
Files and hashes: 1: mQ0ACAyJhS24Ge7JfejryYjhrr4.roa (hash: vb4PW+qjvJj8W9hO5gMvw1SrDAuFxyDok45TJihaRuk=)
2: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl (hash: PoERjhhN1t3kWy3hglHWHaaPJyK5UiQx+ljG2OuIKpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:68:bb:8b:29:c6:b7:6b:4a:34:af:86:dc:55:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Validity
Not Before: May 12 21:01:12 2026 GMT
Not After : May 13 21:01:12 2026 GMT
Subject: CN=2a0a3127e30327b94f622270ea4db90b0e69ba81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:b6:3d:3f:7f:b9:54:38:11:f9:f1:8d:34:
d2:f2:cb:af:c9:39:24:d7:d8:ab:55:0a:b7:e4:8c:
31:6c:de:c5:ca:95:61:2e:a5:eb:0f:e5:30:0b:60:
63:6b:9f:c9:8d:77:8b:a8:c1:4a:1f:a3:3f:59:c7:
d6:13:3e:ec:48:f7:77:27:86:6a:2b:3d:67:62:60:
d4:76:ad:db:ea:36:9d:78:97:a5:5b:05:39:c6:83:
a1:97:46:83:39:91:c8:96:30:93:f6:06:f2:43:97:
be:dc:95:4d:26:ba:bf:47:81:1e:7b:dc:79:64:85:
de:a6:27:05:40:e0:d8:67:ea:88:71:58:f2:a3:e3:
a0:29:99:e2:47:fb:66:63:a6:d6:bb:3f:06:50:93:
04:99:04:2c:7e:14:a1:a9:8d:09:0f:97:71:e4:c2:
97:bd:09:93:19:1e:56:1f:e1:8e:2c:b1:45:0f:dd:
5f:83:e6:c7:e2:d8:9c:27:d6:7c:cc:7a:24:02:3e:
93:da:4d:eb:18:72:5a:01:63:a3:46:c9:3e:4a:f2:
0a:2b:fd:b7:d6:4f:9b:89:37:37:a8:26:c8:18:83:
d3:2a:f5:23:6c:8b:5c:07:97:73:19:55:97:15:0a:
fd:63:a3:a8:7c:18:3e:db:57:7a:bb:2a:43:ac:96:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0A:31:27:E3:03:27:B9:4F:62:22:70:EA:4D:B9:0B:0E:69:BA:81
X509v3 Authority Key Identifier:
keyid:CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:49:71:6d:ca:57:4c:34:fc:c7:b5:5e:4b:8d:d7:df:cb:8e:
da:15:83:e4:19:ca:70:5b:82:f1:c2:d8:0a:fc:ef:72:69:64:
77:90:e3:df:65:ea:4e:87:9b:08:52:ce:eb:c1:99:45:92:91:
11:ec:e0:d4:a2:60:71:74:51:97:97:30:00:73:6a:0e:e9:85:
b9:79:da:06:f7:83:c0:90:4b:be:5f:9f:21:b8:3d:5b:76:da:
61:39:db:16:74:28:ad:ed:1c:4c:8a:ac:47:6a:08:2c:52:44:
1f:ab:d5:8b:6e:f1:1e:2b:be:64:21:5b:95:25:23:2b:43:36:
69:8f:18:05:f4:3e:08:7c:f1:84:27:5e:9c:a9:21:9d:ad:8f:
d5:a8:fe:ec:65:c4:e7:09:18:fc:ed:fb:22:52:ed:3b:66:44:
f6:1e:37:69:8e:c9:d3:7b:88:a5:79:4d:d4:2b:fc:42:73:9b:
c9:8e:db:da:58:dd:57:a6:ac:83:60:9a:69:5b:41:c0:02:3e:
ae:31:4a:5e:98:ff:99:29:61:5a:0f:7c:fe:be:6a:e2:36:53:
68:fe:c3:6e:a9:6b:3c:29:17:5d:5d:80:2e:91:3a:96:77:0c:
f5:6d:08:8f:76:81:5a:b1:2b:d9:e7:26:3b:28:5e:80:85:05:
d7:c6:83:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:37 2026 by rpki-client