Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: CHA7ywF4BBF4S8AYPed3TFMCoJhwYw9ncuJDmKroy44=
Subject key identifier: D9:67:50:D9:B1:4C:FB:5A:6D:80:12:7E:2C:DB:2C:F8:BC:7B:95:37
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 019E1F7EA9152EC18E34C3C9EA382C155C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 04:00:54 +0000
Manifest this update: Wed 13 May 2026 04:00:54 +0000
Manifest next update: Thu 14 May 2026 04:00:54 +0000
Files and hashes: 1: 1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa (hash: JQmankrBVBlqdCQ8Vwvu+tFNWtJX5/kU02hONf99fCo=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: 9qXeQItGFCuABNYNSdutk1Tgho1kZyP5OqdrcYXRPi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:a9:15:2e:c1:8e:34:c3:c9:ea:38:2c:15:5c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: May 13 04:00:54 2026 GMT
Not After : May 14 04:00:54 2026 GMT
Subject: CN=d96750d9b14cfb5a6d80127e2cdb2cf8bc7b9537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:89:59:f9:13:0b:99:44:38:2c:f8:b9:c0:
23:f9:37:52:9d:d5:4f:bb:4a:6b:a7:8f:80:32:e1:
63:18:df:49:4f:48:3c:e7:1c:27:40:79:f6:fd:60:
03:90:75:d1:eb:5c:95:86:03:0c:d9:17:b4:e8:da:
8c:3a:31:36:7f:ad:83:77:49:26:38:1f:d3:dd:4b:
20:2b:16:d5:f1:5f:89:79:cf:57:a7:da:6c:8f:bc:
d8:6a:d7:7d:35:9e:06:ff:85:bd:3a:44:9a:43:44:
0f:a0:f9:8e:41:c2:08:4b:c3:59:6e:5c:c4:9c:69:
79:b9:83:fb:9c:6d:b7:89:df:4b:db:31:37:4f:27:
11:ae:ea:1e:ea:92:10:9b:23:6a:b6:2f:2c:bb:62:
4e:db:4b:ec:a3:f2:8b:4f:4c:98:b4:7d:be:b6:6c:
0a:b1:ea:4c:2d:35:d7:1f:7e:08:75:1a:c9:a9:70:
76:82:22:95:6d:fc:13:10:87:be:51:ee:77:76:cf:
56:fb:fb:ea:17:75:ad:fe:7b:b6:e6:64:55:ae:b1:
d2:fb:c0:86:83:ba:a9:63:c9:ed:ee:ab:aa:51:38:
bf:65:e0:d5:6f:c2:20:c0:c8:95:09:ba:af:0b:d6:
01:82:69:d7:6e:a6:44:8e:9c:2e:d7:54:33:13:47:
d1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:67:50:D9:B1:4C:FB:5A:6D:80:12:7E:2C:DB:2C:F8:BC:7B:95:37
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:61:83:97:b0:5e:5b:e7:28:18:71:93:1d:50:80:76:65:36:
0f:14:93:44:46:95:17:02:38:a7:1c:65:3f:6c:17:dc:e8:86:
00:2c:69:63:c8:4a:d8:9b:c8:42:40:55:cc:7c:46:17:7f:88:
07:d0:14:98:7e:ce:39:df:11:33:88:2e:6a:b9:4f:39:a4:51:
b4:aa:5c:d0:69:45:d2:73:92:84:c1:e1:61:8c:f8:ee:d9:91:
74:bf:72:76:a4:64:50:f9:cc:05:3d:a3:67:16:b9:d4:d8:10:
5a:b3:7f:f5:fc:d0:4a:1e:1b:9e:49:c4:82:c1:4e:98:4e:ba:
34:cd:24:0c:66:f5:1f:ee:8d:d5:61:60:3a:7e:97:0a:bc:e9:
7d:02:ca:e3:25:6e:0b:0d:7b:1a:0d:0a:db:39:a7:30:00:a9:
a1:b9:74:e8:a2:ee:e9:9e:1e:7e:9f:41:8e:d7:43:4e:db:c2:
c3:95:48:6c:90:61:c3:49:b1:b2:d4:b7:0b:ac:c9:f8:94:03:
e1:a7:28:a9:44:e5:c8:55:a3:e4:64:45:33:bf:71:24:e1:13:
7e:8d:1a:e5:11:31:58:fd:ee:70:78:b8:57:20:0a:e7:8e:04:
a5:f7:1d:2d:98:a0:ec:ff:03:f7:5d:f6:02:41:d0:69:cd:70:
2a:82:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:47 2026 by rpki-client