Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: Ns/VBhdWDjtWLhLnWgrdFrCenhGGWTdnDK8hNMevriI=
Subject key identifier: D5:D3:0E:8B:3E:FE:A1:8F:D2:D1:D3:79:AE:B0:C1:89:B7:0B:C4:15
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 019E20C854B87C3998FA75AC11CE2EA81AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 0F41
Signing time: Wed 13 May 2026 10:01:00 +0000
Manifest this update: Wed 13 May 2026 10:01:00 +0000
Manifest next update: Thu 14 May 2026 10:01:00 +0000
Files and hashes: 1: H7NifDoSU6PPqAYGiGzy4_-XfNw.roa (hash: sk5Lex95/S0IAQQhow818tnsCZwdWLab0EALvw3QhYw=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: /xAF9oPer7UjQvJ8cqHpLzjZ1BxP5aVt+PHvs+2Rvt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:54:b8:7c:39:98:fa:75:ac:11:ce:2e:a8:1a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: May 13 10:01:00 2026 GMT
Not After : May 14 10:01:00 2026 GMT
Subject: CN=d5d30e8b3efea18fd2d1d379aeb0c189b70bc415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:31:b6:09:e0:ef:67:39:6a:dd:12:d4:bf:
0d:4b:3b:fc:f5:01:1b:c6:bf:99:8c:27:86:76:ea:
41:0b:b1:b1:65:00:7d:c4:b3:e5:ad:95:77:47:32:
4a:5e:db:c5:30:bb:d5:ce:96:c9:10:1a:9b:60:85:
9b:1a:b5:8c:52:4d:fa:46:f9:9f:e9:cf:e5:ee:9c:
d1:0c:4a:87:6a:9e:64:22:2c:c4:98:da:6c:76:d9:
b0:2d:75:1b:11:33:30:46:26:0a:85:cd:7d:92:fb:
f4:a6:07:9a:1d:40:db:23:b5:3f:c5:30:ad:5d:aa:
9f:0c:e3:d4:f9:19:14:e0:89:7e:d4:29:e6:fe:49:
04:27:f2:d5:68:4a:c5:e7:c5:b9:d4:00:53:53:2f:
e9:47:1d:b9:a7:3a:c2:83:fc:6c:b6:0f:40:1a:46:
c8:80:36:17:9c:39:47:62:4b:cf:59:54:8c:5b:79:
3f:67:e3:88:2d:23:8d:ad:67:dc:4b:20:42:ab:66:
06:7c:31:fc:59:75:b2:d8:03:6d:90:54:13:ff:17:
bd:64:5d:b4:48:d7:bf:d3:53:95:31:52:a5:96:4f:
3f:1f:63:ca:d7:3f:33:a1:46:f6:af:df:8e:25:b8:
85:22:12:63:76:83:10:e0:65:03:10:85:40:20:27:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D3:0E:8B:3E:FE:A1:8F:D2:D1:D3:79:AE:B0:C1:89:B7:0B:C4:15
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e9:d5:93:de:d5:7c:d9:cb:f7:01:b0:4c:56:83:0c:b9:56:
eb:7c:3b:75:c3:57:0b:dc:b3:51:19:8a:57:e2:18:8a:6c:63:
98:71:06:f0:6d:cd:0f:8f:95:b9:64:b0:19:3d:22:a9:57:ca:
34:d7:e5:c2:71:6a:11:b4:57:af:47:5b:e5:97:d4:a2:d8:f1:
d0:bf:ed:14:f6:77:5a:55:62:ae:2c:12:e0:54:a4:46:4b:e8:
d7:d4:16:96:72:a3:7d:28:5e:13:37:6b:99:6d:3d:66:e8:86:
11:2d:0a:c3:f0:05:da:d7:8d:82:94:b8:97:fa:56:cd:70:91:
a2:2c:b9:4d:18:01:bc:fd:82:d6:e5:01:b4:99:f0:ef:58:e0:
4d:0a:5b:97:b8:cf:f0:e4:20:58:d5:9f:01:32:c0:30:9a:32:
54:5b:97:49:36:2f:6e:05:03:7f:b4:d9:10:aa:73:87:33:56:
c0:a7:b5:8d:a9:b7:f3:e5:5a:b9:92:14:63:26:b8:3d:d9:32:
6d:7d:d2:68:01:c5:74:a2:70:d8:9f:9d:31:b2:6a:e4:67:fd:
3b:61:99:dc:ba:80:e8:01:83:74:f3:97:26:04:66:be:9a:91:
d5:75:d5:8c:61:b9:1c:4d:fc:c1:d8:aa:76:c5:f1:93:18:bd:
f0:2e:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:35:24 2026 by rpki-client