Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier: 3f8ls5crgqNf0ctfG6nW6M0hGht3r8K7vgITHwdy3t0=
Subject key identifier: 6A:73:7B:6F:DC:BF:74:51:F9:21:EC:FD:48:04:CE:59:E1:BC:17:02
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 019E1F7F7DEABDB0FC240DC7AAE36491C21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number: 0DB0
Signing time: Wed 13 May 2026 04:01:49 +0000
Manifest this update: Wed 13 May 2026 04:01:49 +0000
Manifest next update: Thu 14 May 2026 04:01:49 +0000
Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: wVM/0TFnWrmvtXPb2jS02dvv5JfjHQ4iYL5OkVf+YlU=)
2: e2fLwwNnC7_gQ85Q33UfXuK3PBc.roa (hash: GaXv8AkKDgccbaFAmhisldDeR5nblYKbBIpd1n6r6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:7d:ea:bd:b0:fc:24:0d:c7:aa:e3:64:91:c2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: May 13 04:01:49 2026 GMT
Not After : May 14 04:01:49 2026 GMT
Subject: CN=6a737b6fdcbf7451f921ecfd4804ce59e1bc1702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:07:65:08:78:37:4d:59:08:8f:76:1a:90:
15:7f:af:d9:63:42:77:1c:cd:17:d4:a1:45:51:45:
be:93:50:04:d3:a0:b7:96:a7:4e:e0:a8:d5:f2:c5:
a7:f4:a2:0b:a7:c5:47:f3:08:38:88:eb:03:59:ca:
b5:f1:97:aa:33:4f:e9:17:cd:80:11:f5:53:d9:8a:
27:67:7d:59:ec:98:03:17:7c:40:5e:01:53:02:d6:
87:9b:9e:7f:6d:19:5c:21:65:a9:cc:24:0a:1d:b3:
06:2d:cd:b2:97:9c:d8:bd:d1:ba:8c:d7:9e:27:53:
1f:9b:c0:e4:ab:ad:0b:b5:87:d2:3f:3c:4c:05:1e:
51:f0:12:22:94:9c:4a:8d:b4:a1:3d:69:8a:f0:73:
0d:79:8c:d7:00:fe:b8:42:61:a9:eb:c0:03:38:67:
c3:5e:ae:ef:56:36:84:be:9c:04:a5:22:a6:35:3d:
b7:b0:4d:2d:1f:fa:90:89:37:fe:78:e4:cc:4a:d6:
63:de:a0:18:94:91:60:90:7f:f4:92:90:b8:ad:f6:
ab:7f:3f:f5:f5:88:9e:18:9a:38:78:e8:bf:d6:75:
e0:04:51:e2:e7:1a:d4:ec:f1:61:ea:f5:50:61:53:
e2:66:80:76:a7:b5:ba:ce:f2:ba:f9:91:85:7a:b0:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:73:7B:6F:DC:BF:74:51:F9:21:EC:FD:48:04:CE:59:E1:BC:17:02
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5e:5e:48:55:87:6f:a8:0d:67:5a:78:6f:09:65:0e:e9:35:
6a:86:2d:79:dd:a6:b0:f6:98:1b:b6:27:ed:b6:88:08:2a:e1:
d4:b3:37:a6:0a:95:8f:be:a4:6a:19:d1:60:68:d3:63:d2:d9:
44:ad:c4:71:ee:bb:cb:90:3b:bf:52:d6:26:7d:81:6c:43:24:
d4:65:e6:bf:09:c0:b8:a6:50:95:7c:be:65:e1:19:bf:f7:47:
04:e9:40:33:a2:eb:b4:dd:6b:7b:f9:24:03:a7:41:7f:ff:80:
ef:8c:bd:ae:6b:f8:38:59:b0:5d:7c:ff:ba:0b:5f:cf:77:f7:
98:43:63:aa:f9:fd:60:7b:e7:1e:a4:ed:81:9b:51:41:2f:fc:
54:be:81:c0:99:27:dd:60:6d:3e:fb:bc:28:b1:ad:64:f4:2b:
17:98:73:72:b7:06:28:c6:a6:ea:5d:a9:e4:ad:09:66:77:8b:
3c:bd:48:e8:3f:6a:65:f4:e1:24:16:c0:45:ca:ac:b9:94:63:
d2:28:d1:8b:36:4d:bb:68:b9:a0:7b:32:ec:94:a2:b9:b1:d2:
a1:bb:26:24:0a:a6:a6:9d:b1:c6:8a:c6:31:4f:49:20:a3:e1:
65:e6:67:2f:3e:06:c0:a5:cb:fb:79:88:6c:5c:07:af:1c:43:
05:a0:a8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:18:34 2026 by rpki-client