Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
File: YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json)
Hash identifier: cOr2YOwvJtzuLh8y2VNXvJ3a4CWtUezW469aJZQfVYs=
Subject key identifier: 69:C0:5E:AC:40:C5:2F:0F:0A:FB:4B:5C:78:B2:71:64:C4:3C:F1:B0
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial: 019E1ED9D0D05013669C71575E953DF6E3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
Manifest number: 13D0
Signing time: Wed 13 May 2026 01:00:51 +0000
Manifest this update: Wed 13 May 2026 01:00:51 +0000
Manifest next update: Thu 14 May 2026 01:00:51 +0000
Files and hashes: 1: Jf2ybRPxCJRBz81M0sPHI9fL5Xc.asa (hash: ccXR+qhmYk9GcwGl/n5URNgWvh69G6GfXIkJnkUXeww=)
2: TdzUQghIehxteP-iZtI9mD6S7yM.roa (hash: JMCW44uz3J0EyEDOpMW3IeWpIRHn5nCzZnwcaDitVew=)
3: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: 3DodNHr+m+qJKLJVsT+IYPJC7bAMXwa/LcuywFuj2T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:d0:d0:50:13:66:9c:71:57:5e:95:3d:f6:e3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Validity
Not Before: May 13 01:00:51 2026 GMT
Not After : May 14 01:00:51 2026 GMT
Subject: CN=69c05eac40c52f0f0afb4b5c78b27164c43cf1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:d7:6c:68:d4:d2:56:9c:9c:06:b0:4d:4d:
64:6c:84:11:9f:a3:fe:7f:8d:06:21:60:e0:b4:43:
a2:34:5d:1b:f2:66:6f:06:42:d7:ab:72:34:7b:66:
1a:dc:c2:c2:b4:ce:d9:df:dc:3f:30:d2:52:ef:48:
95:31:50:ee:89:98:78:ab:05:d1:de:b2:95:57:9b:
3e:e2:31:36:dd:5d:2c:54:4c:bb:27:ba:d6:4a:a5:
78:d0:a9:c8:31:d0:0d:cc:b8:5f:ff:e6:bc:56:f3:
2d:31:1c:ee:1f:2f:cc:64:95:a5:ca:c7:58:24:85:
77:fa:45:b4:7f:ff:7e:3d:93:67:2f:f5:1e:92:65:
ad:62:e6:bf:28:f6:9e:e8:7a:37:67:fe:2d:74:f2:
7e:e2:83:5a:d7:65:9f:a7:b8:53:10:bc:c4:d8:5c:
df:67:64:fb:ff:4f:4f:7c:9b:43:be:8e:86:11:66:
16:32:3a:3c:e6:bd:21:e2:d8:21:2c:23:ee:1d:c8:
c7:c9:9c:33:8b:da:eb:36:e8:d7:f1:52:bc:2f:a4:
8c:5a:8e:2f:89:d8:60:87:7a:48:bf:a6:53:d4:db:
97:e0:c4:ec:16:69:a6:e9:1c:6c:de:72:af:2d:bd:
63:ed:a4:f9:fe:12:6a:40:ea:cd:e1:81:64:5d:cd:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C0:5E:AC:40:C5:2F:0F:0A:FB:4B:5C:78:B2:71:64:C4:3C:F1:B0
X509v3 Authority Key Identifier:
keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:42:fc:22:30:38:64:34:dc:fd:f2:7b:d5:01:2f:d6:87:96:
87:f5:a7:75:ef:21:d8:43:69:e8:0d:99:45:67:8e:aa:fa:3a:
8a:8a:ef:c9:ae:4f:5d:ae:97:91:be:d4:db:b8:59:5e:1d:ef:
72:ff:c5:49:59:f1:5d:1a:92:4c:16:88:af:44:82:25:bd:67:
75:61:38:d0:ca:ea:6e:84:3e:49:82:5b:55:c4:e4:3d:5a:dd:
de:1f:ae:7b:f0:3f:22:b0:87:bc:89:52:a5:32:ce:c9:30:97:
a1:3b:4c:44:92:63:20:a7:a9:f0:2f:ed:06:53:f7:75:70:b6:
1d:3f:24:ef:71:5e:b6:80:6a:94:4e:b1:65:8d:e9:d7:e6:57:
df:5f:69:e5:bf:0c:f2:a3:5e:2b:16:7d:3c:49:6a:65:77:41:
6c:a4:e2:68:ee:95:c2:d8:01:cf:ba:08:8b:c9:1a:f9:15:59:
a5:be:fe:46:eb:bd:f6:97:26:80:3e:33:7d:0f:40:f8:2d:03:
27:f6:67:ea:f1:01:cb:e6:19:09:0d:92:f4:43:f9:43:7f:cf:
7a:6c:b2:0d:f6:26:47:ee:f3:50:f8:33:42:bb:92:9c:12:03:
96:18:65:5f:36:44:73:06:41:42:27:f7:f8:1a:5d:ad:1e:fa:
d3:53:66:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:08 2026 by rpki-client