Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: 7GPU68UGjeX670TbjamBFgiekKPRNPqDvCSeFf8arcU=
Subject key identifier: CD:5F:A6:D9:E6:C5:17:29:04:14:BA:E2:04:ED:AC:E0:5C:1D:7E:71
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 019E1DC6FE0E6EDA5401E78BE03404A7985C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 0B08
Signing time: Tue 12 May 2026 20:00:40 +0000
Manifest this update: Tue 12 May 2026 20:00:40 +0000
Manifest next update: Wed 13 May 2026 20:00:40 +0000
Files and hashes: 1: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: MSAoxmEX8s/YDcvwoIlqA6Hu7/dzcfzNiyrdQvMzJXo=)
2: vvXDEA3-oSwvWKl3m20Q9UrS6wI.roa (hash: mQvtqYD2eC+84hVmHavb+1UIl2NHrV+2/J+tCnR9oyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c6:fe:0e:6e:da:54:01:e7:8b:e0:34:04:a7:98:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: May 12 20:00:40 2026 GMT
Not After : May 13 20:00:40 2026 GMT
Subject: CN=cd5fa6d9e6c517290414bae204edace05c1d7e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:3f:cf:e6:35:ad:31:ce:fa:c0:bb:46:dd:
d8:e7:1b:74:7a:f9:73:4d:3f:2b:0e:29:85:24:a3:
4d:00:ea:b9:77:01:58:23:72:24:79:dd:e4:c1:80:
03:fc:7c:e2:a5:9f:c4:21:74:33:c1:36:9e:9a:b0:
4c:8a:c3:88:82:a6:3c:1a:7d:0f:68:6c:69:04:b0:
55:f6:79:ea:c5:2a:41:ff:1f:cb:7b:68:e6:cd:7c:
fe:e8:7b:aa:dc:5f:43:83:6a:1d:e0:9a:12:ad:31:
2e:a2:a1:b7:ca:d6:be:a8:d0:7b:ec:e4:8b:46:e9:
ee:8f:34:bc:da:7b:7e:4b:f9:95:65:80:fc:f6:4d:
a0:80:0b:c7:87:56:4f:43:cc:43:6e:76:b5:02:0b:
8f:ba:0b:ac:4d:3a:37:de:1b:33:58:3d:7d:3b:46:
4b:51:30:f0:14:b8:6a:a6:2b:4e:d2:37:e2:f6:f4:
a3:85:a9:2c:c0:78:a6:63:0f:04:0c:6f:85:b7:9a:
3e:dc:1c:41:ff:2a:17:9d:ad:ad:9d:72:04:1c:88:
4a:dd:63:7f:23:2f:6a:37:de:e8:94:58:05:89:a6:
72:b1:8a:fa:70:92:60:00:37:47:24:2c:3c:61:4c:
b3:e9:3b:b5:d8:6f:b6:e0:9f:a0:92:d9:c6:83:1b:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5F:A6:D9:E6:C5:17:29:04:14:BA:E2:04:ED:AC:E0:5C:1D:7E:71
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4b:d9:bd:a8:72:a8:6f:9e:48:b4:ae:c2:39:3b:82:01:90:
38:07:35:7d:6f:d4:4c:56:4a:bc:c5:9e:d0:61:38:1c:38:af:
71:bb:15:86:2c:3b:b3:4e:29:99:a6:b6:f9:aa:49:65:5e:83:
5f:5a:ab:99:a7:4c:1a:56:fa:2c:45:ca:5a:21:4b:c8:b9:b0:
22:ae:45:14:23:a9:66:c9:b0:34:71:cb:2d:c8:e9:ca:72:59:
48:57:ea:9e:49:aa:57:df:c2:1b:02:f4:e2:f7:d0:90:e2:90:
c9:a4:91:55:d3:4b:58:66:ff:7b:4a:37:36:40:7a:06:69:2a:
b3:16:0d:f7:ca:93:f5:85:95:b6:2c:92:51:9d:0a:3e:52:c7:
f2:40:fe:82:19:c9:5e:78:f3:2c:65:a0:3f:4f:80:06:c5:a5:
0e:80:ce:75:00:c1:8f:0c:7e:18:51:07:9e:19:cb:2a:85:2a:
95:e7:91:48:4a:ce:a4:f1:08:6b:78:de:db:d7:1f:88:9d:2e:
3e:78:42:2a:31:f9:21:0a:6e:cd:ec:a8:32:a8:94:c2:a8:78:
97:63:4b:46:8b:9a:ed:ca:40:7e:ad:b2:f8:0a:97:da:26:04:
36:93:ca:dc:e1:15:e1:71:5a:46:62:19:1c:9c:68:f4:a0:be:
e7:97:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:13:34 2026 by rpki-client