Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: axVMtswE9+uw80D3/fQmSzrCKcGpxwi7BEnKiwF/spk=
Subject key identifier: F4:F3:39:52:71:C2:05:DD:2C:85:26:3E:A9:5E:D9:58:C6:24:7B:05
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 019E1E6C6D52A50F11AC38B734D89E5BFA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 0DF9
Signing time: Tue 12 May 2026 23:01:22 +0000
Manifest this update: Tue 12 May 2026 23:01:22 +0000
Manifest next update: Wed 13 May 2026 23:01:22 +0000
Files and hashes: 1: ED9fPzOepDgkuJo-elslIFPUuoE.roa (hash: 6gPQSH/gpSv5/wqic1Y/TmKzEmUsxiYhBSwpI3RrMfE=)
2: xpqqOtgsAXsWWjj58DWw9Ikqzic.roa (hash: XQV7y3FYzj3+Xq+UX0OMewU57UNtc6BiHPtsxX2i26s=)
3: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: 4sh4OavmdNruHnFe4BADtPmvwKNkNTFe9bdU+Ip0qPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:6d:52:a5:0f:11:ac:38:b7:34:d8:9e:5b:fa:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: May 12 23:01:22 2026 GMT
Not After : May 13 23:01:22 2026 GMT
Subject: CN=f4f3395271c205dd2c85263ea95ed958c6247b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:b7:9a:fb:9e:49:cf:81:e6:3a:f1:f1:f2:
74:d8:0c:36:1f:4d:f1:88:49:00:4b:63:61:49:4e:
cf:f3:87:9a:a3:b9:3a:3c:69:1a:f1:af:99:a7:58:
d6:1a:69:cb:2a:28:8e:72:da:9a:4b:ba:d7:c3:66:
d3:b4:8d:5b:f3:ff:f8:44:8c:e5:77:13:c0:d2:91:
9a:c8:7d:d1:0e:a7:59:a2:f7:6a:d3:65:92:32:d1:
35:44:6b:38:d8:f9:fe:0b:43:5d:c3:f5:2d:8e:3e:
52:7d:75:dc:08:e1:e1:bb:91:e8:d6:19:84:27:8f:
1c:88:49:c5:af:2d:d1:1e:5e:f7:fc:7b:22:e6:da:
af:3e:11:04:ed:dd:c7:f3:68:42:b9:dc:99:d0:61:
25:1b:3e:6f:3c:06:2b:3c:29:44:fb:10:14:47:c4:
cd:4e:6c:4b:76:9b:63:7f:83:e8:54:fc:d3:0d:3c:
53:5a:83:49:5a:b9:ca:4b:e6:21:70:95:18:49:b3:
72:13:49:2e:9e:14:ba:2f:60:02:89:12:10:16:e1:
f7:55:23:81:38:7a:e1:df:96:71:88:c1:b2:05:ab:
66:e9:37:00:30:0e:19:9a:39:e3:fe:c6:52:6f:ca:
61:4e:f1:d9:f1:6a:21:46:5e:89:6b:7a:de:da:7c:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F3:39:52:71:C2:05:DD:2C:85:26:3E:A9:5E:D9:58:C6:24:7B:05
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:dd:2a:e8:7d:88:bd:ac:96:4c:62:45:99:07:ee:26:cd:c8:
c6:5f:62:e0:c1:eb:b4:1d:9c:85:50:da:aa:28:96:56:d4:e3:
ba:0e:4c:bc:fe:fb:ab:7f:85:3a:52:28:55:f6:6a:af:dd:e8:
fa:31:eb:b1:76:ce:87:5f:61:5d:da:57:9b:5c:60:20:f7:28:
44:4e:44:ae:24:61:48:85:f9:e0:e1:4e:a0:3b:7e:91:be:6b:
a1:0f:95:7d:53:3c:ed:68:3f:c6:98:d1:06:99:b5:48:07:ad:
89:a7:86:e5:ad:a1:cc:77:32:ff:28:ec:d6:15:12:9c:75:7d:
b2:a5:36:61:f0:3d:81:52:16:87:54:2f:bf:08:23:83:3d:cf:
53:c6:da:2d:d7:10:3d:48:9b:60:e4:94:b4:cb:ad:88:4e:db:
6c:92:a9:7c:70:de:86:c1:d6:7b:d2:98:7e:89:e3:3c:e3:54:
e5:61:26:de:67:c1:02:d8:72:40:80:1b:87:0c:b1:f4:ce:00:
8a:79:4a:88:a2:cc:a2:ec:3c:33:2c:c9:6e:8a:49:de:a9:3a:
8e:df:7e:d2:8b:7f:8d:fd:1d:27:c3:93:f3:39:ae:d3:76:a3:
ce:74:0e:46:70:bf:22:17:16:7f:86:67:b8:33:d1:5f:c1:f1:
bf:7b:16:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:39 2026 by rpki-client