Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: 2WvLGNory8ZIcSwBBAQJWSev8nuIUrv/6JBZDGh6n08=
Subject key identifier: 45:F8:C2:3D:6F:F2:08:2A:2C:AB:12:18:DA:1D:70:06:38:27:BC:AE
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 019E1FB560C286326EE50E71D94C8DFBCE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: 02D4
Signing time: Wed 13 May 2026 05:00:40 +0000
Manifest this update: Wed 13 May 2026 05:00:40 +0000
Manifest next update: Thu 14 May 2026 05:00:40 +0000
Files and hashes: 1: e0bzE7I798JyP17GLDFXPRJiVH0.roa (hash: Yhotc+UtqlhBqu0SRVQeqH+Q/Mp28/ftrNlXHzifKKU=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: S/aRT5shqlsI3xn3mpyyVVdGV9vcHV/oBav/hFyl8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:60:c2:86:32:6e:e5:0e:71:d9:4c:8d:fb:ce:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: May 13 05:00:40 2026 GMT
Not After : May 14 05:00:40 2026 GMT
Subject: CN=45f8c23d6ff2082a2cab1218da1d70063827bcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:f2:5d:7b:ba:a2:76:11:c4:80:35:63:c6:
01:43:f0:03:e6:3c:97:68:30:12:b5:fc:f5:51:13:
7b:aa:cf:8c:42:23:98:9f:03:52:75:b5:2d:fb:66:
5b:16:9b:03:fa:b6:75:6c:1d:46:ad:02:43:56:f2:
1f:96:01:ab:c1:c4:7c:ff:85:93:78:d1:20:0f:7b:
45:ad:98:97:26:91:ae:a8:db:72:e3:47:ca:63:b5:
35:7a:0b:dd:ee:88:07:ba:b2:c5:6a:99:27:ab:70:
85:f7:cc:f2:22:7b:d6:f2:db:e0:63:28:b7:69:51:
1b:1e:d9:b3:ad:6d:5e:bc:3a:f4:b0:98:ff:33:db:
37:89:9d:79:4f:57:00:45:39:d8:05:5e:3f:81:ea:
5a:5f:00:a9:c1:52:b9:97:9c:4c:6c:6b:43:e9:ec:
62:a4:00:e9:e4:b8:ec:c7:d8:06:68:68:c9:1a:c3:
4d:23:34:3b:5a:22:06:b1:56:1d:a8:3c:6a:6c:f0:
0d:5d:3b:b4:19:73:f0:6a:63:fc:64:8d:df:b5:be:
c7:a1:ca:f2:40:30:65:55:61:33:0f:89:49:39:8f:
e7:d1:41:a0:f6:ae:b7:06:37:b2:98:86:d4:99:5d:
23:5b:2e:43:de:14:f3:15:0d:29:02:26:9f:94:23:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F8:C2:3D:6F:F2:08:2A:2C:AB:12:18:DA:1D:70:06:38:27:BC:AE
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3a:ab:d0:c4:ce:f4:71:8c:65:76:1c:e7:fb:b4:dc:fd:7e:
78:09:7c:85:eb:a7:b7:d6:d2:a3:d1:ee:18:f9:16:c1:df:9b:
63:88:16:95:5c:d3:16:3a:b9:f5:01:e3:cc:7c:69:fd:e5:40:
4c:d7:30:dd:0a:66:7a:9b:73:4e:cb:30:5e:b5:e2:4a:81:c8:
bf:61:14:2d:25:62:3e:94:37:e0:00:64:01:e4:11:a5:0f:19:
2e:e6:5b:49:65:f1:48:e1:52:9d:14:d4:26:f9:3d:7e:f0:40:
82:44:60:e3:d6:99:f5:e0:9e:0f:64:9c:82:ca:e0:c2:29:6e:
b0:49:9b:4c:39:a2:a2:99:4f:7c:ad:ec:7f:78:ac:d3:97:bf:
22:ec:50:f1:37:56:1a:16:d0:e3:a2:d9:2f:ac:74:1b:e7:fd:
2b:7b:39:30:6e:63:e4:bb:e1:9a:a4:7c:b2:e0:41:36:84:6f:
3f:72:c9:8a:8b:22:89:96:9d:a2:a8:49:e1:69:d4:79:39:ea:
26:76:10:fe:99:79:c9:e7:0b:8f:e6:84:ac:ac:16:20:c1:1a:
8d:29:d5:bf:ed:40:93:bd:34:6f:0c:b1:db:80:b4:e4:c5:1e:
6e:75:27:b5:f6:e2:54:5c:2a:84:73:09:3f:21:da:44:d4:4c:
5e:12:fa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:47:34 2026 by rpki-client