Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
File: yPV2sjbj7l0fmZnD27fBbEUfnh8.mft (raw, json)
Hash identifier: WaAGdy0BTt4MTluKi08WjhURu13DIE6RMcNWpcy/9p8=
Subject key identifier: 8C:13:E4:FC:F3:78:81:13:CF:1E:6A:CD:A3:AA:FD:74:0E:DF:4A:98
Authority key identifier: C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
Certificate issuer: /CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Certificate serial: 019E1DFEBE07235E6142DF995E95253981DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
Manifest number: 0123
Signing time: Tue 12 May 2026 21:01:34 +0000
Manifest this update: Tue 12 May 2026 21:01:34 +0000
Manifest next update: Wed 13 May 2026 21:01:34 +0000
Files and hashes: 1: CP7XAwVQiMz2Q6ounln3ad2WPSs.asa (hash: dHCmJ8L0c4EENwwKULgdmd0i+CmSQXVp+UAKeU6FrFw=)
2: d4-TFbz-oqeLLp6bwikLyk7BouY.roa (hash: X7KhtR+I1OQBZN8LT6vTNUjdXPKB17DVohSBLz6YYbs=)
3: yPV2sjbj7l0fmZnD27fBbEUfnh8.crl (hash: EBSZFuorWK64JV81Hv7JyyAbcQQ7Nzu6pjoCPMkuvnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:be:07:23:5e:61:42:df:99:5e:95:25:39:81:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Validity
Not Before: May 12 21:01:34 2026 GMT
Not After : May 13 21:01:34 2026 GMT
Subject: CN=8c13e4fcf3788113cf1e6acda3aafd740edf4a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:c5:5a:6f:63:ed:7c:63:be:cc:37:a1:53:
64:3a:d1:76:c5:19:88:87:34:54:19:89:bd:84:0b:
db:59:01:94:40:a7:1b:3f:49:cf:1f:ef:4b:d6:68:
aa:68:e5:72:01:96:53:d2:44:a4:46:fe:cf:1d:2a:
ea:6d:28:78:27:19:43:2e:a9:02:ee:c5:9b:18:39:
70:04:20:ee:90:e9:b1:54:a2:8e:19:bd:29:25:21:
06:6f:5d:24:eb:fa:ab:06:2a:70:30:4a:d8:af:29:
29:19:7e:2f:f1:2a:c0:09:2f:a0:5b:90:04:b0:e9:
6e:83:e9:ea:2d:1b:03:e9:43:41:5e:7a:ea:93:01:
e0:f0:2b:f0:89:10:85:dd:88:3c:58:35:a1:84:02:
b6:0d:99:bb:e7:ec:59:68:04:23:78:67:e4:f2:08:
8c:ee:bd:36:d9:43:26:6e:7d:a3:70:96:44:03:cb:
f8:8a:5f:d1:61:c9:3f:fd:41:49:af:bf:12:0c:f2:
3e:c9:15:2a:78:97:16:ad:55:91:14:73:3d:43:d3:
0d:a7:c4:95:0d:02:6e:91:da:14:09:ba:00:17:59:
df:11:6b:72:fd:18:95:7b:4c:cc:fd:47:00:dc:1d:
01:6b:72:95:71:b8:dd:33:21:e8:2d:19:c4:f8:88:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:13:E4:FC:F3:78:81:13:CF:1E:6A:CD:A3:AA:FD:74:0E:DF:4A:98
X509v3 Authority Key Identifier:
keyid:C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e4:eb:0f:7a:bf:a8:58:15:45:51:da:29:f8:c6:16:52:0f:
dc:f5:ca:da:ba:33:a8:f7:1a:d1:5c:c0:87:4c:58:14:92:87:
b7:44:18:d3:2c:67:f2:0d:84:0b:b3:4f:4e:6a:9c:11:cb:df:
7f:1f:a4:0e:55:3d:bf:94:6f:9b:14:a2:89:86:a2:2e:68:f0:
99:32:8b:4a:36:ee:dd:f5:4d:92:19:c4:dd:ae:46:c4:58:4d:
b5:81:11:da:1c:19:07:32:04:b0:9e:0a:5b:7e:11:a4:c3:32:
a8:e2:ad:66:30:62:d4:a1:b1:57:49:26:44:e5:1d:f0:38:53:
03:01:bc:10:1a:12:43:52:58:dd:bf:39:4e:9e:b7:d0:bf:94:
ad:51:58:c0:80:06:26:e1:ce:97:4f:09:90:69:61:ae:ff:34:
94:97:d7:81:3c:31:43:e5:30:a4:3d:2b:1e:a2:65:a7:48:e1:
19:ba:68:f2:e6:28:d4:0d:5f:10:87:9a:22:ac:ab:7a:2a:04:
75:66:6d:d8:6d:a6:07:be:7e:7c:a5:b7:39:17:5c:33:7f:8f:
f1:83:72:43:26:17:ce:9f:f4:d7:84:fa:88:f8:c9:47:6a:46:
df:07:68:5b:c9:83:67:53:6e:ff:c2:8f:f3:41:23:f0:91:4a:
0d:42:49:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:12:33 2026 by rpki-client