Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier: PM/oi1zS3dwreSXcDL6Xd0b3ztlJGDzCk80T6yBgmQQ=
Subject key identifier: DB:E5:C2:6C:D1:66:F6:09:A4:61:0A:AD:60:63:75:49:2D:C0:38:BA
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 019E205A897A1EA5E2E4E290A2EA7E9BF89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number: 158C
Signing time: Wed 13 May 2026 08:01:04 +0000
Manifest this update: Wed 13 May 2026 08:01:04 +0000
Manifest next update: Thu 14 May 2026 08:01:04 +0000
Files and hashes: 1: xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa (hash: 8Hl158eCXhXx4gFRUokLsBxI0i7haKKmOz5b/bBgdPg=)
2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: 9MQMcQHCC+KAv2veyP5Dt8ZE/6QXMAjcRg0YSooWwCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:89:7a:1e:a5:e2:e4:e2:90:a2:ea:7e:9b:f8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: May 13 08:01:04 2026 GMT
Not After : May 14 08:01:04 2026 GMT
Subject: CN=dbe5c26cd166f609a4610aad606375492dc038ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:56:29:33:1c:d3:b7:fa:96:c5:74:e4:be:
fc:1e:36:da:90:48:3f:45:3a:94:fd:98:95:e4:c1:
47:d3:b7:56:a2:b8:23:0a:fa:4e:5d:f3:27:20:f3:
e1:22:bf:e1:98:76:e9:0b:69:41:3d:0d:c5:64:aa:
ea:0c:85:6c:62:90:89:eb:b0:78:5c:5c:36:1e:2b:
51:9d:db:80:69:48:a5:dd:f2:da:f5:2e:e3:51:94:
9c:44:31:9a:c6:f8:58:b7:1e:80:ab:f2:c2:1d:89:
7d:e5:cb:a4:f5:64:5a:64:32:26:bf:eb:74:51:75:
a1:58:9a:f2:cd:58:97:f6:e3:62:23:3f:a2:34:fc:
ad:2d:70:98:43:8b:96:c2:2e:1a:53:c7:fb:98:0a:
54:d3:00:ff:af:51:2c:ee:3b:62:54:a3:6a:8d:e5:
ea:3a:c4:bc:c2:55:0d:52:49:a1:4a:b6:24:56:0a:
a9:a8:0f:85:87:13:01:a8:b9:59:9f:f8:bf:fb:95:
5a:a7:2e:f8:b0:30:c8:4b:8c:2e:c7:82:07:b8:03:
8e:9e:01:33:76:04:38:6c:d3:42:97:d0:d2:f2:12:
bd:73:ad:7f:bc:c6:98:88:5b:b7:56:a5:c4:99:62:
4c:fd:57:9e:db:e2:30:27:43:45:38:c8:5f:6f:b7:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:C2:6C:D1:66:F6:09:A4:61:0A:AD:60:63:75:49:2D:C0:38:BA
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d4:83:92:1a:43:be:3d:a1:a3:bc:5d:7a:6d:a2:3e:d2:a2:
90:b5:4f:10:23:59:c2:52:67:f1:63:d7:04:05:64:60:88:28:
b2:6d:c3:bb:10:60:13:90:31:de:97:b7:44:c6:4d:8f:f4:87:
8b:43:33:68:0e:0d:fe:a6:b4:b2:0d:2b:98:96:37:b4:4b:d1:
5b:e2:e4:b2:39:50:22:5d:74:ec:94:09:10:0a:b9:16:df:7b:
aa:db:49:dd:58:e5:07:80:c2:9f:a4:cf:62:18:ed:14:1f:f0:
f8:2c:aa:42:d2:72:f1:ff:61:9b:8d:4a:ef:10:9a:29:6c:0e:
e2:0e:4e:2a:51:fa:c0:ca:45:fd:f5:33:98:a7:99:30:7f:c9:
48:f8:67:6d:09:d2:67:e1:43:46:9b:f1:c1:91:78:6b:a5:b4:
20:e4:2e:d5:4b:76:91:24:8e:de:79:b6:c5:c8:9a:b9:96:66:
c3:07:2f:37:0a:e4:44:26:68:3a:b5:50:41:81:cd:87:a5:a2:
ef:f0:d3:7f:ae:53:cd:65:e0:9d:1b:71:8c:46:3f:ea:7f:42:
94:1d:7b:0f:a4:98:e8:44:9d:f5:4c:8e:15:dd:25:27:af:b4:
61:6f:31:15:07:72:89:f1:b8:8d:ed:d8:bc:23:e8:4a:69:a5:
b7:00:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:27 2026 by rpki-client