Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier: sT+rQEiH7VKNnUK+yBAsZBfWr8NONIM7xKrqgob4w7U=
Subject key identifier: E7:7A:1E:8F:1D:47:1E:74:68:4B:33:6F:80:84:C3:40:08:9A:35:60
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 019E1FECDD924DAE471B79FBDB8DE72F0051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number: 0EEA
Signing time: Wed 13 May 2026 06:01:17 +0000
Manifest this update: Wed 13 May 2026 06:01:17 +0000
Manifest next update: Thu 14 May 2026 06:01:17 +0000
Files and hashes: 1: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: pIsPFlDfPRWDdBZYeq2pUw6PaVvPbX4ttxiwNVohnT0=)
2: aRuatR-K8nQ9ZXL9FpjwSLceO4A.roa (hash: Vt5YWGyW9wbAPKP7kNgM97gFfWqXrRoxA2e6gMj6LNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:dd:92:4d:ae:47:1b:79:fb:db:8d:e7:2f:00:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: May 13 06:01:17 2026 GMT
Not After : May 14 06:01:17 2026 GMT
Subject: CN=e77a1e8f1d471e74684b336f8084c340089a3560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:c2:14:e4:c0:80:f8:cb:53:52:19:72:46:
af:76:f4:cd:d8:e4:93:90:af:f8:e9:03:2f:c3:dd:
45:00:33:f9:84:0d:df:d5:b7:26:a9:14:68:9b:24:
14:91:ea:8f:75:7a:46:8e:04:9e:71:b6:c3:83:b9:
a9:49:fb:aa:52:2d:01:ff:67:b0:81:b5:30:1b:91:
d3:b6:3c:9e:f5:e5:5d:45:30:8d:63:b3:9c:26:28:
2b:71:9f:66:ff:e6:cf:1f:d9:c5:54:e1:a5:9d:d7:
44:ad:a9:3d:59:e8:5f:80:b1:af:b3:8f:83:39:3f:
b5:b6:b9:fe:f1:d6:a7:89:56:93:e9:42:16:5a:5b:
81:f8:ca:4a:69:92:06:22:aa:73:3c:d2:d0:c0:92:
ed:d8:6f:43:70:01:07:a0:17:5e:34:bb:db:ba:e4:
60:18:3d:7e:61:43:9f:10:f3:44:9f:f2:a9:a7:bb:
ad:a6:50:ba:d4:80:3a:ab:b5:ad:34:06:28:25:20:
22:1f:95:4d:c9:76:ed:b3:23:97:30:24:09:e3:6a:
63:1d:b8:20:af:c3:4a:de:12:21:d2:bb:87:30:50:
9b:1f:9c:b1:58:50:13:52:44:2e:70:48:d0:26:6b:
d5:76:b1:5b:73:b2:91:a1:1f:47:ec:02:fb:1d:df:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7A:1E:8F:1D:47:1E:74:68:4B:33:6F:80:84:C3:40:08:9A:35:60
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:23:0d:ed:c4:64:45:6a:46:02:36:f7:6a:74:fb:d9:74:b8:
67:de:4b:07:ce:c9:bc:d2:e4:8e:1e:fc:4e:4b:d5:75:49:e2:
c5:39:b2:7e:a5:ec:b6:c3:6b:d7:9d:3d:85:d8:4e:47:e8:8a:
e6:fe:72:2b:2b:26:f8:c9:ad:e6:c3:91:1a:1f:2e:73:72:95:
57:5e:d1:80:48:f8:e6:4f:a1:6c:62:fe:2b:0f:b5:b8:3e:b4:
72:6d:1e:9c:8d:f5:83:55:81:41:9f:91:a4:b2:d9:86:c0:df:
5d:95:69:c9:4f:7a:a0:78:b0:1a:e2:17:21:c1:41:b1:e9:a0:
56:b2:c5:4d:a1:f5:4c:1b:9f:c9:d1:87:a2:53:ef:b4:d2:59:
6e:d9:e2:24:8d:de:64:1c:5f:15:0c:9a:e3:5a:36:f9:95:81:
43:00:03:90:ea:73:6b:ad:a0:22:73:fc:ea:67:e9:9f:f8:dc:
83:f4:91:2d:51:52:22:4b:16:bd:22:88:2b:6e:11:80:f9:bd:
bd:94:80:8b:4a:28:cc:7b:ac:02:eb:17:18:a6:3d:f7:82:c0:
67:31:03:af:9d:1d:be:67:af:76:4b:0f:12:85:21:b4:e2:67:
92:9b:7e:3d:60:1c:3a:bb:40:6a:19:8b:67:02:a3:e8:9a:ba:
38:30:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:47:28 2026 by rpki-client