Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: oRyQ1d8ELt8dacL1QZItEmD361szU3OBfkkgtKeJat4=
Subject key identifier: 96:31:37:22:97:73:41:AF:A2:5B:4A:4D:16:D2:28:B7:E2:8A:C6:5C
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 019E1D91361988752588085591BFBE84424F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 0A34
Signing time: Tue 12 May 2026 19:01:56 +0000
Manifest this update: Tue 12 May 2026 19:01:56 +0000
Manifest next update: Wed 13 May 2026 19:01:56 +0000
Files and hashes: 1: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (hash: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: u23rTMkzbfDarndVqlkiGPA0vWLsog4v0kZR0J7EUdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:36:19:88:75:25:88:08:55:91:bf:be:84:42:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: May 12 19:01:56 2026 GMT
Not After : May 13 19:01:56 2026 GMT
Subject: CN=96313722977341afa25b4a4d16d228b7e28ac65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:39:d0:45:e5:89:4d:bc:a0:19:a8:36:7f:
5a:d7:1c:8f:7c:ef:4c:77:4d:e4:83:16:1c:1c:87:
71:d1:e2:75:dc:eb:ba:7f:98:2d:c4:15:9d:89:6f:
28:04:9f:0d:90:1f:33:ee:20:a4:1d:54:aa:35:10:
ae:86:02:54:81:0b:ec:c7:df:45:79:d2:00:9b:ce:
31:0f:65:b5:b4:ca:aa:75:bc:7a:75:71:7a:b1:4e:
20:29:81:0d:5f:c7:03:bd:1d:28:9a:68:7b:d4:64:
71:46:62:03:7b:a7:32:f7:74:1a:5f:63:61:6d:fb:
8f:11:31:79:e7:06:fb:fc:db:3e:75:5a:29:a6:8c:
10:4d:1f:9d:3d:2c:75:d0:06:ac:3e:8c:fc:71:6b:
00:8b:84:dd:05:97:f7:b6:58:e2:64:57:88:27:1d:
4d:77:87:5c:f9:7b:fd:5d:be:74:46:c0:0a:4f:03:
db:71:b3:a6:2a:08:90:96:eb:6e:45:8d:9c:b2:9d:
b1:41:92:ad:fe:78:98:85:be:4f:86:d5:08:04:92:
1c:1c:78:69:40:6f:c8:1a:30:d6:a8:5f:bf:b1:59:
97:c4:9f:0c:b5:cd:75:85:e4:a5:5c:d0:3b:1f:b8:
a9:80:45:4c:6a:8c:7a:66:27:be:f9:7f:bf:30:7f:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:31:37:22:97:73:41:AF:A2:5B:4A:4D:16:D2:28:B7:E2:8A:C6:5C
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:21:44:d8:33:07:59:1b:af:21:51:c9:fb:8d:5f:52:c0:84:
4c:cc:d4:ee:94:98:50:1a:af:d5:66:b1:7f:42:14:e2:5f:14:
93:d5:4b:8a:5b:99:9c:a8:01:15:24:44:b6:5a:18:25:8c:43:
bf:ae:7d:5d:76:52:f7:5d:e6:ca:f3:bc:91:ea:5e:b1:fc:e1:
be:d3:5f:88:fb:94:dc:5e:b5:24:e8:b0:82:78:42:2c:2f:74:
66:aa:03:30:5b:3e:be:dc:27:be:76:ec:c3:ed:de:a1:5c:0d:
a8:95:e7:32:0a:28:fa:d8:ad:fe:98:56:86:f4:54:27:7c:cd:
9a:9c:ed:31:a1:14:bf:ec:76:bf:ec:e5:eb:bd:b9:49:fb:1a:
2b:b5:b9:de:14:a4:65:54:fb:ab:08:9f:87:a6:ae:27:ea:e8:
9b:99:a7:ca:66:5f:9a:e6:ef:9c:b3:74:9b:22:c5:4f:ef:b7:
b1:f3:f8:05:51:1e:1b:1e:6f:bf:ab:55:50:97:e8:3b:05:2e:
61:2f:0f:f8:58:cb:0e:ef:1e:05:16:a9:55:c4:19:6d:f8:de:
a4:f9:c4:8b:bc:4c:5e:c5:f0:70:92:10:ae:be:3e:d4:7e:58:
a1:ca:29:40:2b:21:47:65:f9:27:8a:1e:1d:48:01:09:6e:c3:
ee:27:5a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:20 2026 by rpki-client