Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
File: _y4WckY7fxXxKyL4uWcEsEpdvpU.mft (raw, json)
Hash identifier: ZbKSYyukuw25OI92JVjJTDOEnbZ47lNX5bBup6HAtT8=
Subject key identifier: 86:13:A5:21:09:D5:CD:29:9D:3E:82:CF:F0:C0:FF:14:64:64:40:E3
Authority key identifier: FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
Certificate issuer: /CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Certificate serial: 019E1ED9DE7CA50F144575AE8CE0295C70CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
Manifest number: C2
Signing time: Wed 13 May 2026 01:00:55 +0000
Manifest this update: Wed 13 May 2026 01:00:55 +0000
Manifest next update: Thu 14 May 2026 01:00:55 +0000
Files and hashes: 1: ORD0ibB7Qbi2VAqjn7de--YwbBw.roa (hash: EySJQ7PIleQkWh762AOp7DMGiFBRJZ4vqqitqSVoVfU=)
2: _y4WckY7fxXxKyL4uWcEsEpdvpU.crl (hash: kMLUyc8qwlzAD56up+aMkeNfIqRFFxT2UaoUHrbZN8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:de:7c:a5:0f:14:45:75:ae:8c:e0:29:5c:70:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Validity
Not Before: May 13 01:00:55 2026 GMT
Not After : May 14 01:00:55 2026 GMT
Subject: CN=8613a52109d5cd299d3e82cff0c0ff14646440e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:b8:e9:26:a7:84:a6:a4:4f:bb:71:00:68:
9c:0d:f6:ac:5d:0d:9e:40:b3:69:5d:23:f7:8c:0f:
29:dd:41:ff:9e:b9:f2:e3:e4:88:bd:62:6f:18:1f:
a3:56:50:bc:77:39:44:23:54:9f:75:f6:d1:80:48:
59:00:3f:59:64:8c:d1:fb:fb:47:9c:93:b0:65:f0:
33:f5:cf:9f:b2:35:ee:a2:c0:c5:48:4a:32:f0:33:
3b:1d:30:f9:d0:2a:84:33:7d:c7:37:eb:33:07:ab:
86:46:27:b9:92:a8:ae:77:0b:9b:0b:a4:1a:84:5c:
3d:4b:cc:8f:f0:6b:31:4f:a5:34:21:f6:7c:e9:ac:
90:06:9d:75:38:95:6c:f8:66:21:e1:13:13:4b:a9:
91:1f:f0:df:f8:4c:42:74:ca:2c:e4:54:03:c7:8a:
57:87:4f:fc:69:57:5e:b8:fb:34:b2:ef:d3:7c:88:
a9:46:15:10:8d:8e:00:ef:ea:2c:15:a5:76:da:d8:
d6:10:42:bf:62:93:58:47:80:65:66:84:0f:2e:8b:
97:4d:53:7b:b7:ce:8b:8e:f6:9a:82:27:f7:87:b3:
5c:d1:eb:f7:5f:74:ee:08:d8:09:c5:20:b9:25:37:
a5:44:ca:cf:a7:c4:62:49:8d:ea:4d:b4:f8:10:24:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:13:A5:21:09:D5:CD:29:9D:3E:82:CF:F0:C0:FF:14:64:64:40:E3
X509v3 Authority Key Identifier:
keyid:FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4c:ce:25:4b:04:ac:ba:cf:36:fd:d3:74:a6:30:11:1e:6c:
cc:60:ab:ce:d4:5d:96:5b:c9:ee:4f:41:1d:9e:37:e5:5a:92:
2e:59:50:06:4d:06:8a:36:96:2d:e8:17:60:ba:ef:ff:b7:41:
d0:f7:c9:ef:e2:ef:0b:ed:88:27:e4:0f:d8:f4:e2:38:68:65:
43:cc:02:21:3e:42:01:41:04:f1:55:ff:b9:98:4b:4e:5e:4a:
49:3c:02:4c:8b:33:99:43:80:23:15:e1:ae:dc:c6:b9:62:60:
f6:01:b5:82:0b:68:61:87:8c:66:34:3b:a6:94:83:3c:30:42:
87:cd:c9:80:1d:8b:0e:a2:82:b2:cc:37:9b:13:6b:89:e4:e0:
ab:a7:3b:d1:26:7e:64:82:a9:c6:6e:11:cf:cc:74:d1:8a:6a:
ee:1c:e9:5f:29:69:5e:e3:47:2a:26:79:1c:00:62:9a:ac:82:
86:4e:d1:ca:de:c3:8c:fe:f7:08:60:1c:b1:d4:58:c5:a7:16:
0d:6c:df:b7:52:68:2b:18:a5:22:87:3d:95:3b:b5:e9:05:fa:
c0:65:48:41:f8:48:e7:3d:d0:db:74:93:b4:0f:10:da:79:f6:
e2:9d:4e:b6:e0:59:c8:7f:55:1b:1e:dc:52:31:06:23:83:eb:
4b:ae:7f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:37 2026 by rpki-client