Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
File: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft (raw, json)
Hash identifier: dSELdtM/y9GeyGOBa57YkcJKIuv4n9siD7MbHtH2KUc=
Subject key identifier: 37:D4:58:79:D1:0B:67:A4:E8:F3:C4:A1:DD:51:0C:5A:AB:0A:60:64
Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
Certificate issuer: /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Certificate serial: 019E1DC7782F050CFDF37029A9A26AD34605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
Manifest number: 0D68
Signing time: Tue 12 May 2026 20:01:12 +0000
Manifest this update: Tue 12 May 2026 20:01:12 +0000
Manifest next update: Wed 13 May 2026 20:01:12 +0000
Files and hashes: 1: NncLDck5QCsXoP-zdGMzAoehMpc.asa (hash: Ct9G108vU2K9LuYOAFXT37wdYPmx9qzQzjeMUoqKDE8=)
2: jp2UFYGcsehDO-4gfejiaCOzrJw.asa (hash: fxeg6hVvgjfs2m8eyuQiBn+zKpG0DqwOznKeAA9KOJE=)
3: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl (hash: SNipAEvaby5FJKHTTXO/MBjPrxCe3TF0RUwDuG6M68g=)
4: xSbXTvUREzkzc7-l2JL6Gfg8LbE.roa (hash: /FjGi3zucL1NzNe41iFvx0RHmpavP7RfeWxzQfA6e5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:78:2f:05:0c:fd:f3:70:29:a9:a2:6a:d3:46:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Validity
Not Before: May 12 20:01:12 2026 GMT
Not After : May 13 20:01:12 2026 GMT
Subject: CN=37d45879d10b67a4e8f3c4a1dd510c5aab0a6064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:e8:76:69:20:25:b5:a0:51:8d:79:53:8b:
1f:d7:ad:e8:d6:2b:b1:ef:1f:d3:1c:a4:65:e4:b5:
4b:e7:a5:16:2b:46:28:c2:d0:3d:ec:ad:cd:23:1a:
5b:3f:6f:fd:15:f1:e7:5e:b9:a7:7c:4a:f7:48:42:
74:b1:ae:32:fd:c4:3d:a6:72:52:e6:b1:6c:e7:25:
75:72:77:18:89:e3:7d:de:69:b3:a4:e8:2d:73:3c:
ca:a3:4a:1a:0d:94:7a:50:db:8d:80:5e:7a:b4:be:
3e:e6:5c:64:ab:5e:e8:a3:04:7a:db:4c:87:43:8d:
0a:53:15:ce:b1:3f:07:eb:f3:e1:c4:f2:bf:26:9c:
42:c1:60:6a:0d:8b:e4:0b:7b:2a:ed:f0:43:11:1f:
db:a6:e6:b1:fe:44:83:d9:6a:f6:31:9d:87:87:80:
22:a5:04:58:6b:60:83:19:92:b8:55:6e:86:7a:5b:
3c:ec:f6:a6:f6:fa:26:45:e1:c8:ff:7d:aa:fa:5f:
75:5d:7a:40:72:5b:4c:69:f2:7a:28:7a:e0:76:a7:
8c:f5:1b:51:1f:ec:52:92:40:ea:8e:57:4a:53:b2:
bb:fd:0e:35:62:ff:cd:c9:f5:e5:97:ac:95:0e:4e:
1e:c8:e0:85:ea:c8:88:ac:35:ab:f0:83:84:50:9d:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D4:58:79:D1:0B:67:A4:E8:F3:C4:A1:DD:51:0C:5A:AB:0A:60:64
X509v3 Authority Key Identifier:
keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d8:93:e4:ff:b4:18:1c:c8:68:3f:2a:03:b3:0a:48:12:55:
e4:b6:f6:36:2c:9b:a3:56:2c:2a:9e:06:27:9e:3f:8d:17:fd:
f5:e6:a9:fb:b9:2b:76:d0:fb:3e:0d:0c:1e:3a:0c:a3:d7:f4:
fc:0f:f6:62:f0:d4:a5:94:b0:41:8a:50:91:b7:7f:1a:77:fc:
0d:03:d0:b0:74:d1:c0:83:3b:e6:b7:23:ea:00:8c:cc:92:c9:
be:66:29:48:a0:af:c2:61:71:6d:31:f3:68:d0:0a:29:80:ff:
17:f4:fc:04:45:4d:89:25:f1:cd:fa:8d:e5:ef:b6:d8:c5:8a:
1d:60:3c:2f:4d:40:9d:d3:a6:1c:5e:8a:3c:1b:31:5e:e4:70:
14:2a:a2:a1:2c:59:f8:7d:dc:dd:6b:c6:06:0b:17:03:48:bd:
a4:fb:f1:ec:d4:35:e2:ea:bb:07:48:9d:0c:66:b8:4a:62:a0:
2f:ee:8b:f8:6e:a0:30:6c:60:45:a4:9e:2f:df:ae:84:cc:b8:
ed:1c:a4:48:af:9f:11:1b:ee:2d:5a:96:cf:08:3a:8d:64:a4:
9a:66:77:ee:7e:f5:96:48:07:e8:4c:ea:a8:75:c2:b3:e9:80:
a8:70:04:71:48:6b:df:cf:d9:20:5c:15:7d:6a:72:b3:bb:50:
2a:83:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:27:18 2026 by rpki-client