Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: ctqZ6xJ6uVqBUQBlF5r6a4CePbeT+u03xbA2nUyhCAI=
Subject key identifier: BB:69:9D:10:62:65:DA:8E:A8:00:7C:03:60:F4:C2:D7:80:E6:BE:66
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 019E1D59529EDEC2558D2137430F0B3C032F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0FEE
Signing time: Tue 12 May 2026 18:00:53 +0000
Manifest this update: Tue 12 May 2026 18:00:53 +0000
Manifest next update: Wed 13 May 2026 18:00:53 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: mtAwt24Jg2L7+qQiGxA+WjCXCbxrw2T15Ue1Njo7Xz4=)
2: XpDHF6qNAfRig2NmPZIIBwNiNAU.roa (hash: 9bFU4KF8zp5CMrxC2WFBFW2SFIScv756NVWyJZFeI1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:52:9e:de:c2:55:8d:21:37:43:0f:0b:3c:03:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: May 12 18:00:53 2026 GMT
Not After : May 13 18:00:53 2026 GMT
Subject: CN=bb699d106265da8ea8007c0360f4c2d780e6be66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:ec:b1:bf:db:07:6e:16:04:fd:f8:64:2f:
34:d3:47:2b:57:27:ae:ed:74:63:f9:f2:64:b0:82:
89:93:6b:2f:2b:16:8e:a0:a2:e1:d8:dd:92:4a:11:
32:8b:de:b0:37:0a:e5:39:fd:60:a6:9a:14:71:43:
42:10:6f:5f:bd:65:93:24:23:d3:ad:8f:9c:01:13:
19:6d:d5:00:35:9f:fe:3d:66:2b:52:b5:b7:e2:88:
a1:f9:3f:0e:a2:03:f7:4c:bc:34:c4:a4:e8:43:02:
93:66:29:58:db:66:52:86:4f:20:50:c1:d6:6b:20:
9b:22:cd:f0:99:8d:14:aa:a8:68:20:aa:68:63:1b:
3c:ca:ad:15:30:04:79:de:d7:df:5d:4a:37:db:d5:
db:bb:34:50:05:52:16:66:b1:91:c0:44:64:41:a3:
28:2a:63:26:0d:89:65:4f:8e:96:5b:42:05:d6:62:
20:54:1d:5f:1d:7c:01:7d:9e:c3:f2:51:97:ad:68:
1d:ca:75:16:c1:b0:fc:22:69:7a:c5:cb:7f:04:37:
d0:0a:d2:af:d0:68:40:5a:dd:de:b0:99:e9:49:be:
4f:e2:0f:eb:b4:d3:c1:2a:2b:a8:cf:62:08:dd:5f:
ea:89:7d:99:f1:1e:68:20:2a:e7:af:d7:c6:56:6d:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:9D:10:62:65:DA:8E:A8:00:7C:03:60:F4:C2:D7:80:E6:BE:66
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:df:3c:0f:11:86:81:f6:5f:22:18:6e:d1:73:64:6a:60:fc:
fe:d7:53:39:d3:2f:8b:04:c0:4e:2a:ac:d9:cd:aa:fc:42:27:
45:fa:f8:a4:28:57:ea:6b:47:f9:87:00:f8:5a:89:82:fd:d4:
92:8d:8f:8f:a1:0f:fa:75:8b:f0:7e:5a:aa:1d:93:8b:49:b1:
d1:ec:99:fe:f9:97:d5:fb:fa:52:e5:22:c1:a3:55:0c:bb:89:
d1:6f:32:09:c6:f7:ff:e5:9f:d7:fe:5c:fd:b7:d1:64:99:0b:
a2:d5:5f:a6:92:36:b6:cf:22:5b:55:1b:76:8a:ed:2e:fa:4d:
10:5d:5f:c4:06:0d:de:03:06:7c:ba:1a:f9:23:30:77:e4:f9:
b8:ee:4a:a0:79:65:bf:ef:cf:3b:bd:56:41:e5:84:00:03:06:
04:27:6e:5e:e1:45:3f:88:f7:f5:06:e3:7b:2e:35:57:c3:ae:
99:37:5b:cc:9f:96:46:80:19:3b:31:f6:7d:74:ee:fe:ad:c9:
0f:9d:10:ea:9a:42:e0:b1:61:ae:41:7a:ce:4c:af:7a:e7:69:
d0:c9:e1:bf:7b:83:13:09:0b:77:66:52:69:bc:00:27:a2:e6:
9b:a8:7e:ed:ed:5e:b3:a7:35:07:57:b4:5f:1e:c0:59:63:e5:
4a:f2:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:26 2026 by rpki-client