Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: psuT94D480hbyDo868+V4XWqBxPO1VR5m8cPqjWg02w=
Subject key identifier: F2:DB:84:60:24:D6:96:3B:98:F9:49:D2:8D:8D:8F:12:4E:CE:59:AB
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019E1D5969610C94A609DDAC30E3301DBA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0F8A
Signing time: Tue 12 May 2026 18:00:59 +0000
Manifest this update: Tue 12 May 2026 18:00:59 +0000
Manifest next update: Wed 13 May 2026 18:00:59 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: qLlsEMcLRNDhBoUanXobZhzJoJNeED26fBicEDjvobM=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:69:61:0c:94:a6:09:dd:ac:30:e3:30:1d:ba:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: May 12 18:00:59 2026 GMT
Not After : May 13 18:00:59 2026 GMT
Subject: CN=f2db846024d6963b98f949d28d8d8f124ece59ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:96:da:e1:ca:dd:e3:d5:41:15:cd:86:27:
e0:e4:e5:b2:07:14:ac:61:6e:66:fc:c1:cb:8b:b4:
36:db:10:8c:1b:46:94:08:0e:1e:8d:5e:37:ea:4d:
14:3d:99:06:7d:44:33:0c:ac:58:44:55:84:61:73:
a9:3f:bf:79:28:25:c2:0a:c4:12:30:58:2f:99:46:
2a:7c:c7:61:d5:39:78:19:61:e0:e8:42:be:51:b5:
79:87:5f:b2:42:bd:2b:6d:95:db:8c:46:91:d2:0c:
65:6d:29:b8:93:87:fe:e2:68:6b:b6:57:58:af:1c:
dc:b8:bf:cb:03:5c:0c:e2:0f:af:3e:9d:72:78:25:
f9:c3:e1:52:3d:83:2b:5f:b9:e0:cd:28:24:12:d9:
45:0f:e5:ed:cc:38:9f:ff:75:2b:5a:51:d2:be:97:
57:4e:5d:32:84:dd:29:72:4a:a3:a7:8a:36:54:bf:
1c:42:fc:01:49:3f:16:99:c4:9c:fc:db:4c:5f:c6:
0a:a1:85:a0:6a:e7:7b:4d:a6:de:88:83:6c:a1:4f:
07:3f:82:58:83:ca:03:7f:07:4b:db:9b:21:80:c6:
9d:13:ce:b1:15:8f:8d:5d:36:80:9e:94:74:26:2d:
8a:9e:ac:00:58:cb:aa:b4:59:16:82:3f:cd:68:9e:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DB:84:60:24:D6:96:3B:98:F9:49:D2:8D:8D:8F:12:4E:CE:59:AB
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9b:3e:60:95:db:8e:c4:a3:31:ff:04:47:03:e6:3c:86:af:
3e:00:58:a9:08:da:2d:38:e0:cc:14:31:95:4a:2c:d0:c6:ac:
c2:7d:00:03:30:7a:f3:7f:29:20:2e:ed:23:89:a9:cb:41:fd:
69:c5:1e:d7:77:29:06:5a:a2:6a:ad:61:3c:62:c8:c2:18:8a:
4b:1e:0a:99:1f:ed:7e:cd:65:b1:ac:54:cb:ef:cb:cc:85:58:
dd:3f:2f:89:66:93:4f:e2:8d:94:50:50:4c:d9:b4:f3:f1:a6:
38:aa:4e:5c:f5:da:f6:b1:16:8c:b5:af:c0:03:f5:71:b7:45:
99:62:4b:91:f3:f7:33:32:02:8b:d1:f0:ff:6d:13:6b:c7:90:
7f:cd:7a:9c:ca:32:3d:60:1d:ac:45:4c:7d:b4:96:fc:4d:d9:
f5:ff:4a:8f:34:48:c4:5a:36:85:d6:44:6c:cc:65:52:f3:0c:
90:7f:50:bc:03:4d:3b:76:49:29:fc:76:ad:98:d7:f0:73:cf:
10:4d:3c:dc:81:d0:32:2d:6f:38:a0:35:26:d1:4d:0b:58:4f:
7b:77:e2:94:d6:46:73:67:79:26:f7:55:3f:b5:f3:39:5c:b2:
a9:65:15:37:ac:f9:44:f2:3d:26:74:13:fb:71:8f:57:34:c2:
9a:97:6e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:27 2026 by rpki-client