Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: 1891+EKR3HmzTQ9HuxkFs9QmmfKhreRYAl7kuL2Dl44=
Subject key identifier: 3C:00:A7:79:C3:42:60:C1:18:31:82:EA:3C:C1:C2:11:9D:B0:42:6F
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 019E1FED070D42EB5C9FC81D666E33473F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0C77
Signing time: Wed 13 May 2026 06:01:28 +0000
Manifest this update: Wed 13 May 2026 06:01:28 +0000
Manifest next update: Thu 14 May 2026 06:01:28 +0000
Files and hashes: 1: im_vhLMibVudnZg4kJ52SUS3c-w.roa (hash: jWyQDspkXiHiDQkhSK+ARTtEFmL2PYL0z1g2F7GJj5E=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: bh6qbUUtALL42RE6mGn2J4IEZFaZsPvLE/McEvhGPwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:07:0d:42:eb:5c:9f:c8:1d:66:6e:33:47:3f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: May 13 06:01:28 2026 GMT
Not After : May 14 06:01:28 2026 GMT
Subject: CN=3c00a779c34260c1183182ea3cc1c2119db0426f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5c:66:b2:b8:e8:da:a9:e8:35:a6:1b:29:33:
b0:4e:16:18:c8:f3:b6:c2:ad:3c:e0:eb:e0:d9:a4:
96:50:47:16:25:54:35:3e:7f:2b:36:fd:14:0b:c1:
6e:8d:f5:9d:cf:28:63:8b:1e:3a:3e:a1:01:36:75:
76:d2:a5:91:8b:71:d0:be:a7:14:e3:01:13:23:c3:
84:59:19:1c:d4:23:fb:ca:00:7f:f3:a2:93:60:8c:
07:9b:ee:f6:16:bc:39:be:f1:93:c8:60:5e:2a:90:
f4:40:29:1d:b0:72:eb:56:56:50:b0:25:6c:2b:57:
27:ca:de:8f:d6:c8:a0:28:fa:08:06:8d:29:75:2e:
c3:4b:aa:15:3b:19:7e:d7:08:e2:d8:11:41:ed:74:
54:8a:ca:1e:91:0b:41:59:cc:ca:4a:af:6a:fe:54:
46:94:9f:3d:b0:52:ee:0d:06:0f:a3:d0:3c:46:8f:
6e:da:5b:3d:f4:20:75:10:a6:85:4b:f2:ff:82:8a:
5d:22:36:d4:f2:80:28:74:68:86:f5:bd:e6:94:d7:
35:77:1c:9b:8e:32:b4:69:e6:41:d2:ee:d0:cb:18:
3a:e6:34:df:4b:92:b6:00:01:8a:a0:1d:8c:78:78:
be:8a:51:8a:e7:f2:ea:93:07:c7:9a:58:f3:98:f1:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:00:A7:79:C3:42:60:C1:18:31:82:EA:3C:C1:C2:11:9D:B0:42:6F
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:75:97:21:c2:a9:05:1a:2e:f4:52:60:d2:cf:82:54:96:cf:
bf:18:0b:5d:64:9c:2c:42:06:70:8b:a5:bd:cf:74:3d:0a:cf:
a2:44:8a:83:25:a6:70:e8:18:a0:51:87:d1:a7:97:21:b9:72:
b5:78:0b:97:6e:7f:2e:38:4f:08:18:e1:6d:5f:aa:04:61:70:
b2:b8:60:f3:8e:d3:28:54:e7:2f:6d:0a:ad:69:70:73:3d:b1:
6e:76:d5:e7:3e:69:91:e2:9b:9a:e7:99:ed:73:e6:40:db:f5:
3f:84:d3:05:05:9b:91:d1:ff:c1:e9:cb:87:01:28:d8:2c:18:
48:2b:bf:5b:b8:c4:18:74:0f:5d:f5:c7:17:37:cc:77:39:13:
0e:f1:fd:ea:f4:e5:a7:f2:05:a1:34:14:37:ba:8d:16:33:a3:
9e:28:62:8f:27:f8:34:e4:1f:e3:63:a6:d0:1c:b6:08:58:d7:
87:4b:b4:b2:e9:43:c2:5d:99:97:88:98:c6:e7:ec:16:40:4e:
7c:b4:c4:93:b8:b7:49:5a:bf:b6:5a:fa:77:06:49:2e:93:a0:
02:57:35:e2:95:97:a4:cf:aa:8f:47:4f:2a:f2:91:c3:a7:0f:
a1:4d:17:d8:0c:25:ab:0c:18:84:c4:1a:30:58:83:1e:09:54:
e6:b3:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:57 2026 by rpki-client