Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: PrXUvkbmAnt+0qI/IDqYTdmdVTdTT7s2hehH9mn9aHM=
Subject key identifier: B9:98:45:37:D1:AC:F0:95:5B:28:98:17:67:77:29:24:1A:57:BD:94
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 019E1CEBC32D2D21A86760F362C1608E0C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 1257
Signing time: Tue 12 May 2026 16:01:13 +0000
Manifest this update: Tue 12 May 2026 16:01:13 +0000
Manifest next update: Wed 13 May 2026 16:01:13 +0000
Files and hashes: 1: WEResR1vKVF1XFqQZFnpiSVDhdQ.roa (hash: nNBq14HUZikLjgzpH3qRgEC7vVQNRFCy0PpayQuzXVc=)
2: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: 88zdg+IjfjNFeLfJBwoHhiiNTZS9G1mvN5eubOsJc5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:c3:2d:2d:21:a8:67:60:f3:62:c1:60:8e:0c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: May 12 16:01:13 2026 GMT
Not After : May 13 16:01:13 2026 GMT
Subject: CN=b9984537d1acf0955b289817677729241a57bd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:04:b9:fb:b0:60:c9:1b:f5:08:c0:7d:cf:
42:1a:c2:b4:6d:3c:e0:14:6d:30:81:8f:b2:29:62:
f9:86:7a:b4:89:b2:eb:1b:26:99:8f:8e:99:50:65:
65:b3:aa:90:e1:9b:b6:b4:0a:26:f1:09:07:c2:6b:
f8:ae:69:96:97:f4:d0:0c:0f:e2:b6:9b:e5:b1:46:
4c:a2:77:13:f1:0d:96:df:11:08:86:a0:f5:d1:d4:
d9:98:85:6b:30:6a:31:73:57:61:65:a0:fd:6f:4f:
44:85:a7:f7:b6:b0:f7:fe:b7:62:af:a8:73:0e:fd:
fa:d8:67:09:77:9e:e3:c3:58:ab:4b:0f:24:91:05:
72:88:45:bf:fd:85:de:97:49:55:50:69:dd:77:db:
5e:cb:7c:2b:d6:ab:8e:d9:08:b9:ce:2d:53:e4:2d:
36:2a:fa:79:e8:db:e7:a4:bf:59:41:11:01:44:03:
a6:7e:e3:03:a9:c7:00:dd:88:f0:36:59:c7:21:b7:
b8:2d:c7:8f:0f:0b:87:9b:80:23:ff:3a:a1:0d:ab:
4e:48:3e:96:f5:d8:46:b3:0a:3f:8e:85:c0:25:8b:
e1:bc:ba:a9:df:7b:c6:23:13:4f:9e:0d:d1:83:f6:
6b:f8:99:e6:7d:2a:6c:ce:86:b5:8e:58:1d:37:6a:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:98:45:37:D1:AC:F0:95:5B:28:98:17:67:77:29:24:1A:57:BD:94
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:66:7a:0f:6d:4e:55:ef:d5:31:d7:5e:e2:37:a4:38:d5:37:
50:ca:15:52:ed:a9:fa:b1:65:eb:a9:4e:cd:46:f6:64:47:7c:
9e:7b:1e:b9:5d:9d:fe:6e:d2:87:28:c1:8a:34:0f:43:20:0f:
43:61:a3:61:f7:25:e7:58:3c:36:d0:45:b3:22:eb:d5:12:21:
de:1f:5c:dd:1a:75:8e:54:af:11:fa:82:a3:09:b9:5e:dc:58:
42:01:47:26:ca:52:db:00:c6:74:27:29:9d:87:6b:47:cf:1b:
73:32:a1:ef:2a:1e:9a:aa:d8:ae:b9:98:fd:8b:8e:94:69:3f:
f6:0d:df:66:a9:c3:66:f5:98:e3:2a:37:cf:5a:49:6c:40:55:
65:60:2b:51:61:fd:a3:32:73:70:61:7d:77:76:de:01:8e:be:
81:b2:74:dc:09:6c:49:7c:24:5d:06:5a:98:ed:a6:5c:1a:30:
95:90:d5:8e:88:23:8e:26:fa:f0:95:6e:ba:94:ec:a8:d1:b1:
8d:27:6c:da:58:53:0b:27:29:35:38:3b:94:f3:8e:f7:12:e9:
12:72:ce:1e:fa:74:69:e0:a4:8e:1f:db:95:de:60:07:6b:55:
e7:5b:5c:a3:3c:61:09:64:4f:eb:0b:30:52:b3:e2:34:70:e0:
55:fa:10:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:56 2026 by rpki-client