Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier: EfEGs57Ep/YiDC+1SP/CUxMVkVyX8cPe9TjxJ186bKA=
Subject key identifier: 47:7E:3B:86:A2:AD:28:9A:B4:C4:09:1F:DF:DA:20:93:E5:02:9B:73
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 019E205AAEB03ABC7AA066B4B1A2BA4794AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number: 0E29
Signing time: Wed 13 May 2026 08:01:14 +0000
Manifest this update: Wed 13 May 2026 08:01:14 +0000
Manifest next update: Thu 14 May 2026 08:01:14 +0000
Files and hashes: 1: 4NkVvtcGrZVKXcIHUXN3aX5aR-U.roa (hash: uUV3NRxzmHCDo1hNed6mKPC9qoNr+1AXHF3xP4nPhT8=)
2: CsyMHLJsqJsWQMS5RZVl3HT44Ig.roa (hash: eTv1DPwyjyPAv2oxMpOhG4oCNxnU96J8zTE8wkeBsrA=)
3: VX7ZDp6l2UyCZjm0hRN6nGJk9i8.roa (hash: B+CJtwt+tc0wqY8DQhcHcXdy6r3buq290Njel11LhmU=)
4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: +kSzkG4nx4tg9+qQz1aGP2iRhF+DkmWNhaQRYWWDIOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:ae:b0:3a:bc:7a:a0:66:b4:b1:a2:ba:47:94:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: May 13 08:01:14 2026 GMT
Not After : May 14 08:01:14 2026 GMT
Subject: CN=477e3b86a2ad289ab4c4091fdfda2093e5029b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:73:85:57:ae:24:bd:01:48:b7:eb:e8:0d:
55:48:13:ff:6f:4d:66:12:8a:16:2c:c3:bf:70:31:
5f:ce:36:6b:03:3d:78:ba:05:cd:3f:bc:2c:e5:d5:
4d:05:10:36:4d:e5:f2:74:17:6b:f4:31:ea:b0:81:
f9:37:dc:e1:6a:12:18:28:8f:de:cd:f3:5b:33:8e:
34:01:75:a9:f2:a1:4d:6d:5d:21:16:13:51:17:7b:
88:7f:7b:f0:48:83:7e:9b:c2:e8:64:ce:55:81:47:
92:84:9f:73:ee:62:c4:40:bc:af:6d:03:fe:8d:93:
a9:f1:f6:78:2a:b4:fa:88:c2:6a:09:1b:d5:b1:cc:
e0:56:bb:5f:76:a5:50:08:3c:cd:e9:bf:e8:ac:2d:
df:41:ae:3d:7e:dc:90:86:dc:0c:b3:a1:9f:b5:79:
5c:49:c2:16:b6:62:5b:f1:a4:3f:8c:4e:1b:d4:01:
01:01:b0:d5:d4:c6:25:f6:db:b3:12:6f:ea:f4:89:
59:f1:5a:87:0a:ad:86:66:aa:99:04:79:12:90:d5:
20:63:d5:bb:56:33:74:68:1f:e4:65:1e:dd:0d:7a:
04:76:43:16:3e:98:66:61:ca:b8:a4:ce:79:e7:e4:
c6:b3:05:1b:fb:3f:5d:2c:d5:4b:f3:bb:9f:f3:f6:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7E:3B:86:A2:AD:28:9A:B4:C4:09:1F:DF:DA:20:93:E5:02:9B:73
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6e:31:85:27:05:56:e2:ba:7e:4b:82:c0:f0:df:0b:0b:45:
25:3e:df:03:76:bd:e5:62:b2:63:34:2d:c7:76:a5:d1:1a:cd:
67:cb:45:90:08:54:a1:d4:1e:1c:79:6c:8f:cf:84:ef:d8:40:
f4:73:dc:b9:9d:54:c2:4c:5e:a6:05:86:67:a3:29:fc:e0:84:
ee:61:4d:23:02:16:90:84:24:b8:52:58:0b:38:d3:1e:08:6f:
3c:48:66:c3:e0:4d:e7:52:b3:7d:21:28:4e:16:35:1a:15:5b:
78:cd:c1:7b:6c:0f:06:70:f7:89:21:d9:0f:77:8a:fe:65:d1:
b3:43:4b:8d:a5:eb:74:76:1a:3c:ec:63:bd:4d:db:c7:b6:b0:
fe:b5:ac:1b:68:f0:bc:87:fb:9a:23:79:8f:64:fc:a5:4a:df:
4a:ac:9f:ce:55:9f:3e:ac:e4:6b:de:73:b9:e2:d4:4a:2b:d2:
ca:17:43:0d:46:df:3d:2c:af:a2:7e:a8:cb:9b:db:d9:ba:b7:
a0:2d:84:18:0b:7f:92:3d:0c:ed:5b:99:f0:91:6e:87:fa:63:
26:2d:39:7b:8d:af:73:a0:66:d3:b4:7f:a6:86:09:d0:13:14:
53:67:49:4e:15:06:76:67:3b:10:8e:65:ed:f7:41:92:35:62:
5c:a6:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:23 2026 by rpki-client