Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: Q585AH/c5wGFqGHefKlI+OCMVaHvuOmDdAgBAtnogv4=
Subject key identifier: 74:8C:86:80:06:16:87:DB:12:CA:08:AA:BD:AE:2B:92:F9:22:6C:21
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 019E20FEFAF7932D44C338D3808B9A087FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 11:00:41 +0000
Manifest this update: Wed 13 May 2026 11:00:41 +0000
Manifest next update: Thu 14 May 2026 11:00:41 +0000
Files and hashes: 1: Zu8UuGG4D2VbmJDnyhSG0Cawt4M.roa (hash: 0v9+1D6+nPkZSNsJJaK1p3wg2xF1SbrepfZyyi1iP3c=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: 4vPaVTj2/c9F7rQJ3xHG8URqMS388ZF748YMOfK3CTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:fe:fa:f7:93:2d:44:c3:38:d3:80:8b:9a:08:7f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: May 13 11:00:41 2026 GMT
Not After : May 14 11:00:41 2026 GMT
Subject: CN=748c8680061687db12ca08aabdae2b92f9226c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:54:21:09:ae:cb:f5:8b:91:d9:ce:55:c4:
c5:ef:9e:99:df:e0:79:04:7e:96:ea:9b:d3:ff:c7:
cb:08:99:47:2b:ec:20:a4:43:32:d1:87:22:7e:dc:
fd:2d:a6:02:2c:05:fc:0c:e5:31:17:10:61:50:c4:
02:65:83:c0:e0:94:03:6d:6e:b5:a4:a5:68:51:93:
50:a9:30:2a:d1:d7:14:3d:40:dd:a4:b1:11:d6:6c:
7a:06:43:f2:8c:0d:8f:34:b4:d6:07:47:bf:75:3e:
71:d0:d8:be:f0:4f:a8:4a:ec:d5:5f:f9:05:2c:e8:
62:5e:65:1b:82:84:a3:1c:78:cf:80:86:32:92:4c:
64:32:7a:51:1b:43:27:36:82:fe:41:4d:19:ab:10:
56:1a:ce:4a:11:89:2e:cc:6d:0b:13:a5:49:b1:37:
43:66:55:25:47:80:6b:54:b4:80:f5:85:a2:51:5c:
58:9c:7e:85:a2:d4:2c:70:28:7c:4c:26:fd:58:13:
39:ca:5e:83:92:0e:83:02:3d:c8:cd:0f:c4:8b:32:
18:a6:73:3a:b6:e0:32:62:09:8b:6b:a6:1c:29:92:
ac:64:e5:8b:88:69:c8:8c:0c:92:e5:61:eb:cc:13:
66:5d:59:a9:85:47:ad:79:27:49:36:b6:3d:bc:2c:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8C:86:80:06:16:87:DB:12:CA:08:AA:BD:AE:2B:92:F9:22:6C:21
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:23:38:c3:7e:7f:b6:59:88:c0:a0:6a:8a:c3:7f:e8:91:72:
f8:b7:c6:c1:ff:6c:d6:a0:62:7d:42:34:07:32:46:b0:2d:53:
2c:b6:c8:86:fd:02:3e:5f:f9:ac:da:79:b7:0d:89:1a:fc:d6:
25:72:6a:85:67:a1:f5:80:b2:1f:52:8f:93:da:8a:af:43:5a:
7d:3a:f1:c1:7a:01:f5:ef:bd:03:39:7f:19:ee:44:cb:fe:95:
e6:ce:ea:47:d4:24:4b:b2:46:62:33:e8:0f:2b:f1:69:3d:67:
d9:41:e9:ba:f7:56:8a:e4:f4:ff:8d:ac:5d:b3:57:52:56:19:
c0:90:69:c3:0b:3a:41:9d:90:18:6d:b3:28:20:26:8e:9c:d5:
12:05:42:3c:77:0d:63:22:7d:2f:94:24:11:64:44:84:2e:0d:
13:6f:f5:f1:52:f4:30:0b:b1:92:37:fb:dc:41:b8:01:ed:28:
c6:76:1c:74:ee:e9:bb:46:03:e4:be:e2:07:24:cd:68:72:f2:
fd:23:a5:76:8b:bd:f9:57:9e:9d:3a:7d:70:4b:ff:44:89:4c:
60:c5:73:b4:02:24:e1:5b:df:2b:a3:8e:94:14:26:91:d3:f2:
0a:d3:a3:e1:c1:9f:a5:c6:6c:15:9d:3e:fa:08:29:3b:46:69:
0c:dd:09:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:57 2026 by rpki-client