
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: u6orEkfNGLfr/1pqepsCi96iW0qGQSKI+oUGcd6H9ZY=
Subject key identifier: BB:C7:33:CB:0A:16:2F:BB:83:CB:23:4D:97:F2:9A:DD:E7:DF:EB:33
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 019E216D3EF096321C293128E04C989384C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 0D40
Signing time: Wed 13 May 2026 13:01:08 +0000
Manifest this update: Wed 13 May 2026 13:01:08 +0000
Manifest next update: Thu 14 May 2026 13:01:08 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: 8UDoKBAGnQTmlBTr+DMvslX5/syjLLUi0gU52mGdONs=)
2: loy4dq4keQGVVjd_GZNqzZEFuGk.roa (hash: xIPUz5Sh2e4Af6AHs7cOizEtdk/KROc6aaXyJduVd/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:3e:f0:96:32:1c:29:31:28:e0:4c:98:93:84:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: May 13 13:01:08 2026 GMT
Not After : May 14 13:01:08 2026 GMT
Subject: CN=bbc733cb0a162fbb83cb234d97f29adde7dfeb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:cc:ac:63:1c:8f:b8:93:62:df:3d:47:f7:dd:
0d:d9:82:d1:24:1c:3d:e2:b1:a8:63:34:d6:c6:9a:
38:b8:57:f2:50:6d:e4:c5:a0:67:c2:34:d7:33:e2:
f7:8d:6f:b3:a4:21:77:06:d1:4b:97:58:29:5a:c0:
b3:cd:c1:ae:a6:42:02:12:6b:67:70:5a:49:a5:d8:
54:6b:a0:63:da:f9:33:97:a4:15:43:43:61:11:66:
f4:aa:78:f4:0a:fc:e4:1b:c2:7d:34:3e:60:28:12:
89:88:41:3d:20:37:da:7b:93:7d:07:f2:7c:91:ab:
5a:98:da:40:4a:64:04:3e:ea:4b:44:04:be:65:67:
24:be:d4:9b:93:13:05:d2:78:dc:ac:1c:60:4c:38:
97:b0:94:25:a4:67:7e:a7:12:f8:10:b5:58:94:be:
ed:cd:72:8c:84:24:67:aa:ab:4d:34:09:9b:5c:81:
64:4c:a9:a7:a0:c2:cb:b7:33:7c:74:cf:9b:91:8b:
a0:1e:cf:8a:74:dd:26:d0:10:fe:b3:62:f1:ef:2e:
30:e5:b8:db:b6:c5:ec:cb:f5:41:8a:9e:a6:82:18:
7f:77:f8:42:2c:41:ad:a1:ea:80:0d:ab:48:b1:d8:
48:51:d4:c0:a4:f9:d3:47:16:aa:18:fd:3d:ed:b6:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C7:33:CB:0A:16:2F:BB:83:CB:23:4D:97:F2:9A:DD:E7:DF:EB:33
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cf:8c:94:6e:62:b2:52:61:3d:b7:8e:33:d2:f1:a7:a2:1d:
c3:0a:e4:29:e7:05:c2:c7:8f:0d:98:9d:00:0f:e1:cd:dc:15:
01:89:b7:bd:49:69:11:c2:90:b3:06:79:17:e8:78:75:b4:57:
10:1e:58:37:81:f9:6c:c7:55:ad:81:b8:2c:c7:29:97:07:44:
e0:17:6c:c6:87:56:d2:43:09:42:53:7c:d5:ae:4d:86:ea:ef:
e5:f3:b3:56:df:59:8b:2c:bb:ee:12:a3:6c:f7:1c:a1:37:1f:
bc:bd:e2:d2:8c:c1:f0:fe:92:b5:68:f3:6a:8a:3f:f7:a2:37:
cf:9b:43:dd:95:d4:69:dc:b9:d8:3a:89:bd:87:14:fa:c8:73:
56:50:7d:59:eb:de:2d:c6:06:81:44:52:23:1d:8a:83:13:b4:
01:da:4a:3b:48:81:c6:5b:27:85:fd:11:ca:6a:f8:a8:b8:c9:
b4:92:63:6e:ae:30:06:da:54:d8:90:d7:a6:5f:81:4b:d7:35:
59:76:c9:b9:03:d8:62:df:75:d8:fc:56:c1:e0:1d:71:05:29:
48:f1:59:f6:6c:90:87:a2:ab:83:3a:1c:72:b7:76:9b:66:c3:
34:80:9a:65:aa:cd:77:0d:7e:2e:53:81:ac:c5:c6:d4:7a:f9:
f2:f8:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:12:58 2026 by rpki-client