Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
File: y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json)
Hash identifier: ZqYeSEKe3lf0q2JX5CdYznzphwK/NOXC7dqfGqBOrsY=
Subject key identifier: 29:0A:1F:C4:13:2A:68:75:99:A9:A0:D3:3A:5B:0D:47:13:BE:6A:D8
Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Certificate serial: 019E1E6C1BCBA81BD51BFE8BA135F18710DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
Manifest number: 1613
Signing time: Tue 12 May 2026 23:01:01 +0000
Manifest this update: Tue 12 May 2026 23:01:01 +0000
Manifest next update: Wed 13 May 2026 23:01:01 +0000
Files and hashes: 1: UxOjp8XUs-Ky59G3Ao0aGxBbUxk.roa (hash: IG/Uj+pARjcg7xsZwOswZLWfcj4Zeh91EtnXY1KelO4=)
2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: FSmoqNnG3NMMIMGyBRAh/ho+Q8YO+z48qnxd/CfSr3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:1b:cb:a8:1b:d5:1b:fe:8b:a1:35:f1:87:10:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Validity
Not Before: May 12 23:01:01 2026 GMT
Not After : May 13 23:01:01 2026 GMT
Subject: CN=290a1fc4132a687599a9a0d33a5b0d4713be6ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:27:bf:60:05:a8:e7:4d:f6:37:32:9b:d7:7f:
4e:97:2a:c0:8d:0b:b3:03:67:60:02:0f:f8:e5:6e:
90:a3:20:3e:e8:20:da:65:dc:e6:3b:6b:71:68:4d:
d8:01:52:5c:22:7c:07:f0:3c:29:27:30:0b:30:6a:
ad:d2:fd:8d:e4:ec:d8:9e:fb:a9:61:00:1b:c0:c5:
d0:02:fb:ae:c8:fa:54:68:36:27:c4:f4:b1:24:3a:
c8:80:c7:dc:20:61:58:cc:c8:a6:88:6c:3c:b0:78:
d2:78:f8:e2:db:2c:30:1a:a8:87:e0:2e:97:29:77:
f3:0c:40:2d:a7:57:bd:4e:0d:8e:c8:48:cc:55:2c:
ac:9e:fb:40:d3:b1:9f:42:f0:ff:bd:a7:e4:81:db:
e0:fd:37:2a:88:a0:be:ad:2c:82:95:6d:08:f2:47:
bd:6c:2e:28:b6:82:c7:1e:3e:72:47:0e:86:a7:fd:
14:6c:7d:83:96:f2:3c:d6:3e:91:ae:40:9b:8b:19:
e1:24:d9:04:5f:3e:ee:8b:71:a8:d6:e3:4d:a4:6a:
f7:8a:6d:93:b3:0e:85:11:16:e0:b6:60:04:a1:21:
f7:7b:a0:bd:ed:23:f5:c5:cb:a3:b7:07:a7:c4:97:
62:43:51:37:bd:3a:f3:31:ec:49:13:de:5c:10:0c:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0A:1F:C4:13:2A:68:75:99:A9:A0:D3:3A:5B:0D:47:13:BE:6A:D8
X509v3 Authority Key Identifier:
keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:58:0d:bb:97:1c:55:98:3d:4e:59:ca:07:a5:46:f8:7a:d8:
ef:3e:1e:19:86:73:29:74:ca:9d:04:de:83:6e:00:25:d3:88:
dd:fb:9f:bb:c8:3e:a5:a9:55:db:bf:35:1c:62:34:24:2c:46:
d1:b3:4e:db:62:c3:00:92:15:d8:c2:f0:85:90:00:57:10:33:
de:60:29:bd:e1:d4:95:03:1c:67:12:e3:fc:79:cb:7e:64:d2:
67:22:ee:d4:5d:2e:53:d6:ff:e4:70:4f:6d:8d:fb:8d:c2:91:
09:5e:1c:73:13:71:02:74:c6:8e:6d:7e:e9:44:20:73:5c:c4:
57:dd:36:00:b4:a3:af:0f:83:43:e3:63:40:58:b1:79:50:71:
0f:35:90:5b:8e:24:86:d0:49:4a:e8:c8:07:65:3d:87:15:18:
ec:08:05:c2:60:cd:e9:f1:59:0f:09:d3:34:b8:48:da:3f:d2:
a4:ce:83:84:d9:9d:61:05:28:2a:62:7c:aa:2b:20:88:2b:80:
0a:99:57:a6:8a:c7:a4:d1:d9:e4:fc:b6:20:1c:11:23:d5:cb:
42:c9:00:a4:a4:0f:01:49:89:c6:01:e2:eb:bb:6b:1e:a6:28:
16:3e:5c:fc:81:a9:1f:ae:68:90:28:67:6a:21:73:46:08:d2:
6a:4c:b9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:56 2026 by rpki-client