Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: 4fDygrfr1AkKvcTj8V8a7HPIpq9yqXyEtgHMfzv6ako=
Subject key identifier: E3:E7:27:76:90:C9:3A:54:3C:B9:86:A0:66:0A:2F:57:59:3B:CB:2A
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 019E1F477E9D5A1519AF8324650489B78EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 0A3F
Signing time: Wed 13 May 2026 03:00:39 +0000
Manifest this update: Wed 13 May 2026 03:00:39 +0000
Manifest next update: Thu 14 May 2026 03:00:39 +0000
Files and hashes: 1: aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa (hash: q1ah2hweQU+cFtZrhhXan7MxnsmHv01bYbCdDje0NNY=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: A15pbzCGraY9181dI9SCKikObBxu3PvAO4TtmvUZnBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:7e:9d:5a:15:19:af:83:24:65:04:89:b7:8e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: May 13 03:00:39 2026 GMT
Not After : May 14 03:00:39 2026 GMT
Subject: CN=e3e7277690c93a543cb986a0660a2f57593bcb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6f:09:22:38:a8:da:09:01:5c:d0:66:e9:e5:
2d:28:7b:82:90:7d:88:6d:6c:f3:18:81:cb:a9:28:
8f:c4:0c:2c:ab:f0:68:d7:0e:e8:04:e3:20:56:2f:
8a:a8:4b:d1:37:ae:9d:20:95:1d:99:03:7b:57:5f:
31:0d:86:43:6c:9e:39:ed:53:67:25:9c:0c:bc:38:
41:16:17:f0:dd:f1:9f:c4:66:d0:cd:0a:02:80:fb:
28:55:dc:6b:0c:8b:0a:00:6e:c7:4f:83:44:64:42:
f5:d0:7a:17:50:bb:41:76:d3:58:91:73:e8:cf:18:
6a:db:59:6d:c3:ba:0c:fd:8a:3c:d7:81:5a:85:25:
ff:de:35:85:03:73:2e:bb:41:90:33:56:a5:57:e5:
fe:58:d4:07:33:4a:81:f9:39:a7:7c:5a:95:82:54:
f5:7c:3d:d6:75:35:fc:de:ed:3c:9d:de:c8:fa:08:
14:40:b9:48:7f:59:15:06:2e:58:76:85:69:da:67:
40:a8:e8:df:b6:ca:51:e7:21:b6:8d:9f:63:77:37:
02:c5:d4:54:6e:e4:20:53:4b:32:eb:14:b0:3d:9b:
9b:5d:9c:1b:d9:7a:6d:44:fd:93:9f:08:c1:b3:9d:
6c:c8:b5:3a:e0:2a:4d:f4:e8:56:38:f3:89:7f:01:
90:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E7:27:76:90:C9:3A:54:3C:B9:86:A0:66:0A:2F:57:59:3B:CB:2A
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:33:0f:2e:ec:3a:15:a7:84:2c:4f:f7:f4:a8:3b:67:50:00:
6c:69:aa:9b:5f:21:de:3c:00:6b:2a:16:37:29:18:c1:f9:d5:
31:36:8d:15:57:5a:ec:aa:22:a0:e8:de:b7:9c:42:5a:af:83:
ed:b1:1f:50:93:72:cc:a6:ff:36:a5:66:4a:15:22:52:26:d3:
27:f7:f3:9d:c0:e6:e2:da:17:ac:77:67:80:8d:11:05:a5:69:
13:80:c7:4d:af:ec:42:2c:2c:15:ee:76:15:6d:8e:e9:11:60:
3c:dd:b7:8e:07:52:6b:2f:fe:bf:74:03:c0:a3:e5:64:32:02:
82:55:41:21:82:cb:e0:97:cd:b1:4b:21:9d:0f:3e:80:23:50:
f2:bf:dc:cf:e2:c1:c4:ff:0a:1c:c8:0c:38:a1:6c:ff:b6:0a:
1e:3f:0a:f1:dd:90:63:9f:87:fa:0f:8a:c5:7a:a0:94:61:1d:
a4:17:74:39:90:f9:f2:3a:63:20:dc:06:ab:7c:59:6b:ff:3d:
d6:e5:0c:1b:81:46:41:02:35:3f:90:fe:a2:51:c2:3b:0d:3f:
2d:53:26:fe:2b:e9:f7:5a:61:70:02:a5:a2:12:18:1b:f1:7c:
3f:54:97:1f:73:e1:28:87:c3:8e:0d:b1:4b:25:44:a3:4f:16:
98:49:23:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:14 2026 by rpki-client