Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: PWW67zi9BlvHWCcRd88dDqviCAMe8fHWBRz4HBI+Zbg=
Subject key identifier: 57:EC:CA:7B:C9:7D:E1:65:93:00:6A:E6:F4:F3:30:9C:71:AD:3A:23
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 019E1D22B70C4DA0F549936B728F97CC8524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0C99
Signing time: Tue 12 May 2026 17:01:14 +0000
Manifest this update: Tue 12 May 2026 17:01:14 +0000
Manifest next update: Wed 13 May 2026 17:01:14 +0000
Files and hashes: 1: 1JivGUDnbvvAALdPLWmN3LnRPUU.roa (hash: CFdTUCMz6IqAjDVASJIEHVZNQPU5MvWCKn0J2DxXzcY=)
2: mDQRP_41vCpTv8zEQtwrpsMlm6o.roa (hash: wP6wE0fEKqnHP4YtC1NM+FHDVJbGLAERsWmmC8DpUK8=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: JT5e1+s9ThJghh34n6QIu7BL+pb/boUxfkPPnte2tgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:b7:0c:4d:a0:f5:49:93:6b:72:8f:97:cc:85:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: May 12 17:01:14 2026 GMT
Not After : May 13 17:01:14 2026 GMT
Subject: CN=57ecca7bc97de16593006ae6f4f3309c71ad3a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:fc:10:9c:4c:d0:65:6c:09:92:f6:61:20:
4b:04:7b:64:0f:36:25:37:88:63:3c:fc:4d:63:17:
42:d4:7f:a6:1f:7d:b1:ba:a0:db:15:16:e0:40:15:
18:75:60:2e:90:50:d2:88:c6:1c:29:78:9d:79:7a:
4f:4b:76:d3:33:08:ba:5f:f0:6d:2b:21:63:df:25:
1d:d6:0b:2c:4f:39:99:b9:6e:c3:af:6a:6b:61:5c:
c0:e3:98:42:82:3a:f5:2d:02:8b:f1:ae:62:d8:fd:
43:c2:f3:90:ab:c4:3b:34:d6:94:8f:d6:61:5a:54:
01:98:14:85:d4:c5:c9:05:2e:ff:d5:f2:16:a1:eb:
13:03:38:7d:16:c7:16:8c:f6:15:c1:70:a6:df:b8:
ab:12:39:44:f6:59:95:ba:67:d0:c2:75:a3:3d:e2:
67:8a:b5:e1:62:5f:d0:fb:4e:2d:34:eb:a1:25:b9:
f7:21:1f:97:b1:88:d7:76:8f:9d:b1:5a:f4:a5:7e:
27:5b:ab:f3:5a:0e:18:e4:c1:b6:c0:28:19:c0:9a:
94:de:04:0b:82:ff:fd:e0:1e:73:ca:cd:3d:27:ef:
0d:97:c8:77:8e:56:d9:8c:c6:27:58:43:51:15:71:
03:e5:76:f1:c8:b0:ab:01:b8:09:a4:6b:c1:be:c0:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EC:CA:7B:C9:7D:E1:65:93:00:6A:E6:F4:F3:30:9C:71:AD:3A:23
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c1:1a:e1:00:9a:7c:78:86:c7:02:ae:9b:42:9a:f4:e2:bc:
f9:70:18:df:13:02:67:60:32:fa:fb:b8:74:2d:64:94:64:4f:
c2:ec:1b:75:2f:ff:e2:d9:bd:5e:02:f2:1d:59:b5:e7:89:e6:
59:85:60:09:8d:82:80:b8:8b:b4:32:4d:a9:25:83:67:84:ad:
9a:5a:15:f4:1f:20:65:8c:a6:a0:60:ad:b8:63:45:42:f1:01:
c5:ec:d7:7a:0f:06:a9:09:4a:15:85:f0:90:1e:39:68:7c:89:
fa:61:f5:3d:85:de:1e:35:fa:5f:68:15:6b:d5:ec:87:4d:12:
5b:6f:d8:9c:0b:0d:81:df:26:71:63:13:fc:22:f9:b8:d0:16:
b4:cc:9f:06:67:71:37:61:c2:57:64:9b:6d:70:32:95:40:95:
b8:db:5b:0d:24:c9:d1:30:ae:62:2e:3d:78:4b:20:7c:4b:f7:
6e:4a:8f:4a:7e:3a:1a:5f:f4:12:9a:d9:6b:51:73:e4:cd:9d:
9e:06:25:0c:db:02:00:2d:9b:f5:a5:42:12:d3:29:88:b2:c9:
fa:c2:af:10:27:af:2a:00:a9:27:83:5f:6f:55:cb:90:68:85:
54:5b:75:95:71:a0:68:a8:11:26:83:69:48:50:95:4c:25:e8:
8c:61:23:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:46:20 2026 by rpki-client