Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: OBhVgZBhDXm/m4btYY9NG7Zm6rpc9iPTLi8YJd8VlM0=
Subject key identifier: C4:7B:16:D2:A5:33:B4:61:C4:E5:F9:98:3F:AD:5A:B7:F3:93:A6:B6
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 019E1DC72141CAEE118AA3A747B3BE38F287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0DEE
Signing time: Tue 12 May 2026 20:00:49 +0000
Manifest this update: Tue 12 May 2026 20:00:49 +0000
Manifest next update: Wed 13 May 2026 20:00:49 +0000
Files and hashes: 1: 1lPDb-Qc7dgd58_k0ugXvgO36w8.roa (hash: up0wKM+by5cZA7R34zmGPf+ho8Ei16Ys0MiWkd/R1jk=)
2: NbUyaKZBv1RnKePQIxmyxsT9zGw.roa (hash: YfuIIb8IL5a5Ql6qciTZgKEuG43i9WjmWByHoP25V3M=)
3: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: 1zcHfhNIUA05vk86wIjyEzjiK7vDl9s0VyQp22JhCgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:21:41:ca:ee:11:8a:a3:a7:47:b3:be:38:f2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: May 12 20:00:49 2026 GMT
Not After : May 13 20:00:49 2026 GMT
Subject: CN=c47b16d2a533b461c4e5f9983fad5ab7f393a6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:47:79:c0:ed:f5:54:26:71:47:43:f2:78:
55:4e:41:0b:9e:3c:08:86:f5:3b:78:2c:b0:d6:c6:
7a:7a:0a:d3:50:45:d5:fe:ac:93:59:97:77:c4:99:
51:15:0a:7b:bc:d9:99:53:93:87:07:32:5d:a8:a5:
4d:9c:08:bb:26:5f:58:1e:8a:a5:1f:4e:62:46:0e:
68:21:28:12:17:d2:e3:4b:37:bd:dd:94:5d:11:fb:
83:bd:60:9e:1c:6b:54:66:40:f2:63:15:9b:cb:59:
1e:82:84:ef:77:52:f2:5c:41:4a:bc:aa:b3:70:62:
38:be:a8:1c:3c:65:a6:2e:13:c9:50:8e:04:04:27:
38:ea:aa:b6:0a:78:08:35:cc:e7:6f:44:72:81:43:
c9:50:38:dc:81:e8:3e:16:9c:7c:f5:05:54:d5:0d:
37:41:ef:87:dc:a9:b5:d1:7a:38:8a:1f:ea:15:8b:
86:fb:29:92:0c:db:a4:31:3d:ea:af:33:c3:fb:6a:
cb:3b:91:bc:b3:2c:bb:23:9c:cf:94:59:ce:a7:6f:
79:fe:51:fe:35:82:8d:b5:50:89:5f:05:6f:1c:16:
95:cb:bb:f1:d8:b8:06:2e:3a:1b:5f:dd:3e:07:4c:
9c:58:7d:ee:35:1d:87:91:64:2e:e7:3d:2f:e0:01:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7B:16:D2:A5:33:B4:61:C4:E5:F9:98:3F:AD:5A:B7:F3:93:A6:B6
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:83:95:20:3c:fc:17:38:fb:d1:fb:87:fd:da:a1:04:59:78:
d9:84:f3:a8:ab:02:d0:86:ab:ad:a1:c1:f8:74:f9:83:8c:8a:
53:9c:47:1a:95:ed:84:23:01:c4:23:ba:47:cf:66:bd:c9:49:
fc:c8:14:a8:72:5d:d6:d1:ff:cc:83:f5:b1:2b:f7:96:74:15:
10:2a:c0:a2:54:13:7a:3e:df:18:24:1e:62:15:ea:b8:f4:19:
2e:25:6b:21:8b:68:68:59:87:25:8f:a3:36:36:3f:9f:2d:92:
88:fa:f9:be:d1:b5:a1:85:b5:35:21:c6:23:fa:b1:35:70:f5:
6d:a3:f7:be:42:1d:bd:83:a1:65:b3:d2:95:98:99:25:3d:55:
ba:8d:ab:71:a1:71:6f:5d:5c:5f:9c:28:27:a2:58:cb:1d:b4:
51:19:e2:ae:13:23:d3:27:35:cc:a9:8a:47:d7:e7:c3:b9:4e:
17:64:d6:2a:95:14:c0:66:1d:fc:92:a5:7b:4d:70:c4:be:2a:
93:ea:61:f8:2b:3c:61:43:ef:cb:ba:d2:c7:bf:7a:39:2f:36:
4e:00:f6:c3:df:bf:b6:bf:d2:53:30:76:b6:26:90:ab:fc:88:
d1:2d:42:1a:b0:8c:f8:2c:75:63:82:95:54:cc:64:25:2d:27:
3f:19:10:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:46 2026 by rpki-client