Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
File: y38v-zmqLfIAS3yhVz0RMXqPt0o.mft (raw, json)
Hash identifier: W7PaGnhG15GShpetc2Pgi4hn7uz77NfkUkHoB66hiqo=
Subject key identifier: 81:2E:63:0D:1B:84:63:68:47:97:C5:DB:27:7D:31:C2:E8:B5:AD:41
Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
Certificate issuer: /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Certificate serial: 019E1D904EB58BA6F607655E47F73C7C1AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
Manifest number: 011E
Signing time: Tue 12 May 2026 19:00:57 +0000
Manifest this update: Tue 12 May 2026 19:00:57 +0000
Manifest next update: Wed 13 May 2026 19:00:57 +0000
Files and hashes: 1: 6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa (hash: z05GfLGcIJ87A3P7XPgnZqPOo0sEQDgBgR5Fwhr1K/M=)
2: vBFUgAPrb_za250_sAWNgAKVaak.asa (hash: b0gKI4/m0v9gKs9clAAyF8VJb5SwiSpATYcLJDL8KGc=)
3: y38v-zmqLfIAS3yhVz0RMXqPt0o.crl (hash: sJJMMwscJ+BFpsgMeP0WQGJPpy6lkseja9qs3saXqCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:4e:b5:8b:a6:f6:07:65:5e:47:f7:3c:7c:1a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Validity
Not Before: May 12 19:00:57 2026 GMT
Not After : May 13 19:00:57 2026 GMT
Subject: CN=812e630d1b8463684797c5db277d31c2e8b5ad41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:97:4b:60:1d:1a:7b:52:c7:47:c1:3a:d9:
57:fd:f4:6e:4c:d4:ee:27:c5:c6:16:b6:be:18:49:
e5:4d:13:c8:1b:8b:8e:c8:b3:24:7a:7a:c0:10:1a:
04:66:3a:f8:d3:ab:a0:f7:5f:e1:8c:e6:46:ba:69:
f8:d2:4d:26:f4:6d:c0:8c:74:ac:3c:41:87:21:56:
d5:88:ba:40:77:91:56:03:05:b2:89:39:f7:c9:b5:
eb:41:91:4a:3c:f8:d3:f5:7d:e6:67:94:24:0b:1d:
53:6e:91:25:02:b2:fd:84:3d:fb:73:d1:e8:6d:27:
d2:3c:19:c7:a3:65:d5:af:ab:28:f1:d4:90:fd:e7:
fd:20:4f:b1:9f:3c:02:c8:1d:5d:8d:b0:42:54:05:
ba:22:fb:3e:ac:c7:71:86:16:1e:0e:d3:b4:98:19:
45:8d:0f:e1:6b:1e:eb:91:c1:fd:5b:db:38:77:31:
d2:79:22:67:1a:57:bc:31:ec:43:27:37:86:61:27:
b6:14:09:13:9c:c4:0e:3a:21:d6:d4:e7:fb:70:0c:
a3:74:e0:08:5c:f3:48:4b:47:68:9b:d1:4b:d1:16:
1c:03:cd:71:fa:d1:97:ad:8c:b3:ee:3d:03:f3:6f:
e5:b9:b8:8d:0b:6a:22:e0:3c:1b:a5:f9:1d:16:58:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2E:63:0D:1B:84:63:68:47:97:C5:DB:27:7D:31:C2:E8:B5:AD:41
X509v3 Authority Key Identifier:
keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:42:a2:bf:8e:86:c7:dd:11:ea:a6:a2:c8:c1:12:fc:0b:4b:
2c:68:ed:a6:9e:59:ac:34:26:c2:a9:d3:15:1f:6c:6a:fe:33:
01:4e:36:dc:66:bb:3c:62:2a:8c:9c:5d:65:95:68:4b:9c:4a:
b8:7d:d7:6f:b4:ee:67:da:9f:f6:b4:f4:28:47:90:12:3e:ef:
5d:5b:04:38:62:4c:0e:4e:f5:80:d3:56:7e:9d:38:e2:e7:ce:
b7:7b:64:bd:54:a6:08:58:c2:44:c0:b1:33:77:a6:50:63:22:
70:3b:a0:4b:52:90:f5:fe:0e:33:d7:4b:8a:30:78:59:f4:4c:
82:78:71:09:0e:be:c4:13:cb:17:b5:a8:15:de:a0:4b:67:c2:
92:b0:24:6e:e0:0c:7e:1b:7d:74:cf:3a:4c:ea:51:5e:d9:de:
08:8f:77:0c:fe:cd:59:06:c6:39:9b:8d:9b:93:19:23:c1:2c:
62:b9:44:dd:fb:03:b9:3b:a2:d6:7f:4a:72:2a:50:a2:ed:2c:
0a:db:24:f2:e3:56:0c:d8:70:d3:71:0f:aa:e4:ae:c5:f5:9c:
c7:3b:46:45:fa:4a:ce:92:2e:55:15:d1:1d:d8:e3:a8:7f:a0:
d2:60:0a:08:8b:3a:21:70:e9:ff:55:d5:b8:fd:57:83:c7:dd:
73:67:7f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:18 2026 by rpki-client