Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: 5QEkG/xPBg1wyol3MLdp5wszvelgldAKONxYPbqgOF8=
Subject key identifier: 75:7F:7B:2C:E9:7F:AA:25:34:2F:B6:29:63:FC:EA:5D:4B:B3:D3:6E
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 019E1DFE21A1646E11EA3F087B1A88C01650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 089C
Signing time: Tue 12 May 2026 21:00:54 +0000
Manifest this update: Tue 12 May 2026 21:00:54 +0000
Manifest next update: Wed 13 May 2026 21:00:54 +0000
Files and hashes: 1: VpnFqg4nLkv4hVZvAnrC7KmiNAU.roa (hash: 5iLmKrDX02BNsU1dvSS1ObOgIc5TS34EiCu+Rj74FUw=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: H0ovrfl5k58A9W8YHNec3nz6C8RVKeGoE/U8jfSxaOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:21:a1:64:6e:11:ea:3f:08:7b:1a:88:c0:16:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: May 12 21:00:54 2026 GMT
Not After : May 13 21:00:54 2026 GMT
Subject: CN=757f7b2ce97faa25342fb62963fcea5d4bb3d36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:23:c5:a7:e9:14:5e:5a:4a:de:3d:ed:65:
a2:5c:0b:a2:15:e3:fc:9b:a4:43:85:b8:7f:66:b8:
04:64:33:53:2f:5f:9c:fb:c9:51:5d:74:a8:e3:fb:
06:c9:76:b2:40:c8:64:22:92:e4:81:80:69:26:34:
d6:02:12:68:c1:2a:b2:21:05:de:26:94:69:16:44:
47:89:c0:f3:5b:49:92:12:0a:d7:3c:a0:10:8c:50:
98:4e:d9:fa:f4:1b:cf:22:c6:b4:ff:b2:db:a3:e1:
c2:8c:ca:30:6e:49:06:4c:7c:e2:83:d5:5a:a3:f2:
a4:72:07:c7:79:1d:e6:1b:22:90:ae:6a:d0:61:53:
c7:ba:76:7c:34:af:1c:77:a7:13:fd:f1:8d:70:11:
77:6d:52:ff:26:ad:75:1a:24:c0:13:6b:03:ce:b8:
54:61:98:1f:19:52:88:c0:0b:20:a3:0c:18:df:d0:
6f:dd:bc:e2:4f:73:a5:44:05:78:fb:b0:56:68:c6:
16:91:ad:ba:26:af:46:23:ca:dd:ab:4b:35:d9:bb:
70:77:88:69:19:94:24:e5:41:e8:12:65:e0:07:82:
31:4a:f7:65:ae:b6:c9:00:06:29:0a:8a:d1:e6:18:
9f:3b:ad:bf:dd:64:09:db:9e:15:89:5b:55:0f:b7:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7F:7B:2C:E9:7F:AA:25:34:2F:B6:29:63:FC:EA:5D:4B:B3:D3:6E
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e4:43:c6:a0:35:e1:17:22:30:cf:bf:47:12:4c:ad:ea:5d:
2a:e4:f4:a9:26:64:1d:f5:f1:a9:6d:bd:4a:5b:31:82:83:f1:
dd:47:d4:46:37:40:43:7b:02:36:5a:71:c0:e8:85:c9:7f:7a:
df:33:e0:a1:bc:44:4d:76:36:29:ae:01:78:79:a4:c8:39:55:
60:4c:38:58:4b:89:fe:95:71:96:8c:8d:ec:f4:b0:d7:16:73:
fd:7f:d1:9d:98:3f:23:ec:78:44:24:eb:ab:e0:9f:0d:99:ac:
70:c1:a0:d5:19:57:ba:87:69:89:1d:58:76:62:50:0e:20:34:
cc:e6:6a:f5:d0:d7:61:14:6e:3a:b2:d4:ab:ae:5d:c3:ea:62:
7c:0c:a6:9a:cc:b7:d7:92:0f:f6:92:c8:d5:ab:d5:fb:4e:05:
51:9d:2e:49:bf:20:64:3a:6f:b6:20:c0:5f:12:13:5c:dd:b6:
2f:3c:65:63:11:40:a2:f7:ed:27:79:f0:33:14:83:9a:19:43:
b5:3b:d0:c5:95:0b:f0:a8:46:07:18:32:4e:55:56:bd:2c:41:
a2:ff:f9:69:77:11:bf:27:f5:6f:ed:db:0e:ad:e1:37:f3:55:
39:98:82:6e:e1:f0:e1:d1:e8:0c:06:f1:38:5d:19:c6:7b:2a:
6d:98:fe:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:56 2026 by rpki-client