Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: C2q7O455hChLSMT/agZPZmKdKXQgXjg11BVwgY4G+S0=
Subject key identifier: FB:B2:7E:73:3D:80:D6:24:18:AD:55:DF:50:EF:0F:68:0F:27:EB:F9
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 019E1D59636588AE7A02B1CB53D9899F7BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 03F0
Signing time: Tue 12 May 2026 18:00:57 +0000
Manifest this update: Tue 12 May 2026 18:00:57 +0000
Manifest next update: Wed 13 May 2026 18:00:57 +0000
Files and hashes: 1: E0krjXu009T3jt9cr3fYovQCDpI.roa (hash: IPGdjP1/THS8Y3edpbZ6Sxvb1Cj7DJTCDKtVyiJIZuE=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: bwhaYyC+C5agRaUXt3NtLWCAtTae3bFBz4hdyQHvSWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:63:65:88:ae:7a:02:b1:cb:53:d9:89:9f:7b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: May 12 18:00:57 2026 GMT
Not After : May 13 18:00:57 2026 GMT
Subject: CN=fbb27e733d80d62418ad55df50ef0f680f27ebf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:dd:1e:bc:6d:59:f1:df:56:9a:ee:5f:c7:
ce:1c:46:4c:49:51:31:7e:91:4f:2f:5c:47:bb:1f:
f2:c8:54:ed:c7:fa:7f:91:67:89:a6:60:a2:a0:e5:
88:b1:7d:90:4b:5c:f8:35:87:53:b2:3c:be:da:97:
3b:a7:b3:fe:3d:fd:51:b7:3e:f0:a0:79:5a:c7:58:
b9:72:b5:2a:2a:26:c5:de:c8:e6:d7:e9:36:09:e2:
5c:e4:aa:58:bd:c8:20:02:cf:cf:b5:61:20:70:c8:
d2:90:65:0d:46:59:06:07:09:57:19:bd:b7:e2:c0:
e9:84:99:d1:15:d3:db:56:3e:6f:df:b5:20:69:d7:
b2:e0:49:c1:70:c9:bb:f7:2d:eb:5a:89:8f:5e:80:
9c:8e:cb:0a:11:c6:67:6a:e7:56:f6:97:66:04:e5:
69:10:a1:02:33:1f:f3:5b:9d:93:ee:fc:95:42:ba:
1a:41:d4:ad:a9:a0:2d:f3:69:84:43:9c:68:b3:7b:
5a:0f:79:60:7e:aa:5f:9b:ce:9e:31:52:e5:7d:88:
85:ea:d1:39:f5:12:4b:61:6a:18:cf:fe:60:d1:a0:
90:88:61:cb:9d:06:b0:2a:f4:86:5a:e7:fd:d9:aa:
65:a2:9b:d3:f9:4f:e3:86:79:e1:43:86:4c:ae:eb:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B2:7E:73:3D:80:D6:24:18:AD:55:DF:50:EF:0F:68:0F:27:EB:F9
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:62:6e:48:fa:c7:ed:11:05:87:42:43:31:dc:b4:3d:1a:4b:
33:28:00:9a:2e:0f:cd:ed:df:91:3d:19:cf:9e:85:70:4a:a5:
5e:40:6b:9f:6f:b1:ff:fe:f6:4a:95:50:07:4f:f1:fb:5a:c1:
60:55:57:be:a1:d1:e9:76:75:5c:36:1c:f5:8a:08:87:03:e8:
e2:5e:3a:a0:4a:21:02:c5:dc:20:0b:22:3f:41:68:d3:d4:95:
91:e6:96:56:8e:a5:e0:c7:bf:fa:a1:38:81:ce:5b:c4:2c:cb:
a0:94:86:9d:b7:8f:25:73:5b:71:f4:7d:a2:e9:74:3e:92:d7:
a9:b9:5c:f0:cd:67:31:69:c0:0f:ff:27:35:c4:13:62:47:bb:
0c:d7:68:2e:14:10:b5:85:5d:a4:70:98:6d:06:e1:34:7f:6d:
76:f3:28:1b:15:ad:82:cd:9c:c2:0b:7f:36:63:ff:3c:a6:32:
1b:af:ad:3d:27:36:fa:2e:75:f0:d6:a1:f4:19:84:6c:79:c1:
4b:5b:0e:95:3d:d3:00:1f:26:19:a2:7c:c0:ea:2b:9f:11:2a:
b6:6e:c2:47:af:e8:8f:c8:05:d7:c5:e8:56:bf:9b:33:2e:25:
c3:b2:63:30:e9:4c:92:79:f8:81:5a:04:0c:c1:8a:e8:68:01:
2f:60:96:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:39:13 2026 by rpki-client