
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: K025agzCsrbrt3jiqFlg+h9MQ36g1dX+9MIQmEJLK4o=
Subject key identifier: B5:0B:88:12:0C:32:8F:45:E2:98:15:BD:82:94:50:58:DE:B7:E3:3A
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 019E1F480E00B534708EAEC5D13327F1B3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 03:01:16 +0000
Manifest this update: Wed 13 May 2026 03:01:16 +0000
Manifest next update: Thu 14 May 2026 03:01:16 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: /5NWi2IlJyZQBC/UC2e0xwXEEXDZ70TuDqrOgKVusHo=)
2: LbD2tYPsPC8uP37pndvidAshgOM.roa (hash: ePxnnXcYkNMYiZIwMvTVXJah+jChUGFP5Kv/37gIREs=)
3: yV2l8jCuUkBjhG1YrGK34ROvjco.roa (hash: OW+ZvGgaMJR1U5WGE2eB0o2w9cCprc/bpgV1/vZl/uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:0e:00:b5:34:70:8e:ae:c5:d1:33:27:f1:b3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: May 13 03:01:16 2026 GMT
Not After : May 14 03:01:16 2026 GMT
Subject: CN=b50b88120c328f45e29815bd82945058deb7e33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:e2:25:a5:ab:0c:a3:3b:cb:7b:63:02:a3:
7b:4b:4e:4d:4d:47:91:5d:3c:78:4f:43:df:8f:bb:
48:99:37:b6:31:7e:8e:4c:f3:be:4c:10:2d:10:38:
b9:27:b9:13:4e:39:37:da:d3:c4:72:8e:23:f1:f6:
1c:8a:5b:bc:e1:5a:03:4c:1c:bb:f8:c3:ba:05:40:
91:9c:68:a4:af:c6:b4:d8:cc:5b:93:33:2e:68:24:
47:c0:ad:5d:0c:c3:27:05:71:76:48:af:6b:bd:61:
b8:af:69:3e:1a:78:5b:28:1b:c0:28:2e:5f:33:24:
82:13:52:f6:a6:84:1e:dd:4a:4d:fd:95:bf:db:34:
96:5d:45:f0:75:16:4b:ae:3f:9f:ac:a3:62:72:53:
1b:1e:02:ba:bf:63:ba:31:b6:a8:f3:04:f3:c1:ec:
2a:9e:9a:cf:9b:ca:02:d6:c0:c7:ea:6f:ff:3c:5f:
da:60:72:90:f5:e3:59:2d:72:2d:f6:fc:c4:70:fc:
4c:61:82:bc:db:4b:55:4c:ec:be:10:1c:3f:09:14:
78:cb:42:ce:94:2c:66:13:8b:83:1a:00:f5:d5:d6:
e5:14:3e:2a:c5:56:c0:ba:74:16:55:3b:04:2d:10:
47:14:a2:f3:f8:10:24:6f:4e:ee:6c:68:d6:7c:aa:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:88:12:0C:32:8F:45:E2:98:15:BD:82:94:50:58:DE:B7:E3:3A
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9f:25:92:41:33:d1:22:af:f4:7c:71:5b:ad:82:45:46:f8:
4c:96:30:61:71:32:d9:6e:fa:b7:eb:f2:3c:3e:5d:e6:8c:ce:
b1:df:aa:27:23:77:fb:d5:65:3e:c4:c3:21:79:c9:36:e5:fa:
bc:3a:98:e7:5e:63:21:ee:76:0e:4e:9b:30:71:22:b0:4c:06:
e6:13:0e:b8:ca:51:71:bc:b1:d1:3a:17:cf:37:3a:9a:8f:31:
0a:43:bc:f9:57:fb:b0:c0:84:68:4c:19:35:cc:5d:73:4e:24:
a5:49:26:3e:e0:49:8e:d1:b1:e5:69:66:bd:c3:79:64:91:00:
c4:e2:46:b9:3e:37:05:76:6d:3a:6b:ee:f3:b5:b0:97:17:2a:
e5:9c:ec:b4:d7:69:32:5f:ba:d3:0e:d8:12:18:f4:b3:fb:5f:
3f:6a:f3:22:59:32:50:64:da:97:77:90:5a:7c:1f:52:a3:d0:
b4:30:80:f9:43:5c:02:60:0c:69:30:3d:ac:f0:26:b3:0c:8f:
a7:66:26:e1:88:9a:b6:93:8e:d7:98:66:52:09:2c:6f:a8:77:
7e:68:81:01:d6:e9:b6:77:77:ed:8b:eb:e0:ce:ae:c2:77:d1:
64:f7:c2:9c:84:bc:b2:81:50:29:7b:2a:7e:db:e8:c2:b6:34:
0e:db:d1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:48:12 2026 by rpki-client