Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
File: yxODRz6KqHJwaPx1LgYOPb9j4O8.mft (raw, json)
Hash identifier: i5Bmcqffgrl0BvEd1vpeazLw0pOcpfeMYanbkQ4UO1U=
Subject key identifier: 04:91:9C:E2:DF:FB:0C:B1:51:CF:8A:25:90:3D:5C:12:02:E8:D1:EF
Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
Certificate issuer: /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Certificate serial: 019E1DC7842149CC1A4B5F955ABD0E1D2733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
Manifest number: 0AC2
Signing time: Tue 12 May 2026 20:01:15 +0000
Manifest this update: Tue 12 May 2026 20:01:15 +0000
Manifest next update: Wed 13 May 2026 20:01:15 +0000
Files and hashes: 1: 153fjxVtV5IdmULjsKFsyho7xsA.roa (hash: sMHTNIGNQvUhkdN5VlDx3F2+I4FUHbgADAQUyA3sCa0=)
2: yxODRz6KqHJwaPx1LgYOPb9j4O8.crl (hash: 7HV7XGP3sLcNAH4T1NiB+k2LE0iAeWFqQHkyY/fffS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:84:21:49:cc:1a:4b:5f:95:5a:bd:0e:1d:27:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Validity
Not Before: May 12 20:01:15 2026 GMT
Not After : May 13 20:01:15 2026 GMT
Subject: CN=04919ce2dffb0cb151cf8a25903d5c1202e8d1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:13:a3:e3:1e:c9:d6:d7:22:b9:ef:85:eb:
be:fa:79:3d:e4:da:a0:25:09:72:8e:fb:87:1e:c8:
a7:6f:a4:17:61:bc:07:27:d5:73:ef:86:eb:bf:3d:
94:ef:5f:87:79:89:07:68:cc:f2:cf:ef:ae:3f:54:
1c:88:75:02:99:12:e8:f1:0a:8e:cc:65:95:fe:74:
28:cb:cd:4f:94:ad:73:1c:d2:9d:55:48:f8:d6:f6:
5a:0f:55:e2:a6:8d:f0:b8:98:7d:b0:d6:6b:4e:ef:
8e:8e:72:05:d0:c4:4d:59:05:12:91:84:4f:ce:37:
f3:7f:d0:11:77:d6:52:d3:70:bc:52:ba:6e:ec:68:
a9:1b:df:6f:5a:2e:c5:d9:52:3b:b7:76:39:63:39:
93:dc:af:0f:2b:6b:ce:44:82:0b:0b:25:fe:6b:df:
56:d3:c3:48:ff:4f:88:33:4f:42:3e:25:18:ce:48:
54:bc:c6:6d:e8:78:b0:1a:aa:17:69:54:63:8d:69:
65:7a:b7:a9:06:f2:6d:fd:1d:97:da:c0:d6:94:83:
11:a7:16:f2:84:9f:f1:5e:ff:e1:03:97:bd:ce:5f:
43:e3:e8:29:e6:b1:69:a0:4b:67:9a:50:32:88:07:
3f:47:d1:ec:6f:d9:57:50:68:3f:44:0b:01:a3:45:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:91:9C:E2:DF:FB:0C:B1:51:CF:8A:25:90:3D:5C:12:02:E8:D1:EF
X509v3 Authority Key Identifier:
keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:f3:81:4c:a3:4d:ab:09:a4:09:3d:13:dd:2f:7b:73:f4:ee:
30:5a:18:a9:03:39:dc:52:29:f7:72:16:e8:e6:42:f6:62:7f:
09:7f:59:3d:2c:a7:9f:15:ba:e6:3b:3c:43:bd:d1:ba:92:08:
1c:41:1d:70:39:69:b3:74:c5:07:d9:6b:8a:fd:90:9d:bb:49:
c0:40:86:cd:3e:e2:a9:8f:0e:0f:bb:76:e1:d7:a7:b6:0c:01:
1e:08:c2:20:60:cd:88:14:8c:69:22:da:d4:b2:e7:fb:b4:60:
b4:8a:ed:81:70:da:87:c5:60:b0:a0:68:da:70:ea:69:d2:6d:
cb:fb:39:31:7d:d0:58:b5:03:45:ba:e3:e5:9c:d0:0f:69:93:
49:bd:77:07:57:27:a5:47:29:a8:62:88:d7:5a:cf:36:2b:1f:
5b:d5:7a:46:4f:d2:06:90:7a:2c:67:ed:b1:83:69:97:4e:8c:
27:5b:5f:84:9a:98:fa:95:b0:df:4f:93:e1:ba:f8:0f:bc:f6:
71:5e:a8:ee:c3:12:14:df:2a:4e:62:43:a0:59:82:17:d0:cc:
91:6b:18:9c:f4:3d:06:08:0f:27:a8:88:bb:b3:cb:ab:6e:d3:
cb:d0:62:d9:b7:63:d7:a4:fc:14:10:31:09:4d:dd:6d:09:68:
73:33:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:56 2026 by rpki-client