Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: 7HT5cOtF5QhjzLqT2ZdRR7pdgDpB/WQWxSECLKzL1wY=
Subject key identifier: 1D:3F:E5:98:38:99:78:0C:1A:F2:F4:D5:BF:5A:82:01:B3:FA:0C:67
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 019E205A553C5D80EA5AC5B8193A9A07E65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 1613
Signing time: Wed 13 May 2026 08:00:51 +0000
Manifest this update: Wed 13 May 2026 08:00:51 +0000
Manifest next update: Thu 14 May 2026 08:00:51 +0000
Files and hashes: 1: dm05ruUJUy3EB3fTlfRp28bRVHs.roa (hash: HKoH3W2n4KC9D9ffQJl5txh8NMSU8l6yIctHVJM24eA=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: 8B7JpMIJCZ9DD1tAS1QDrMRwkw91B8Qov5bfn97n9PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:55:3c:5d:80:ea:5a:c5:b8:19:3a:9a:07:e6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: May 13 08:00:51 2026 GMT
Not After : May 14 08:00:51 2026 GMT
Subject: CN=1d3fe5983899780c1af2f4d5bf5a8201b3fa0c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:44:ff:5a:af:28:b5:0c:cd:78:bb:43:98:
cc:b7:e0:12:43:9c:9f:ab:b0:de:f3:a3:a8:18:20:
bd:aa:41:0a:7c:4c:06:29:e8:78:f8:6a:d2:66:c4:
eb:ca:54:3e:b7:93:6b:a2:28:63:44:07:bf:07:0d:
c2:ea:2f:26:d3:64:ef:b8:07:e5:e0:8d:8e:37:75:
cb:d2:ce:b5:7a:ac:cf:b9:bf:87:36:73:28:ce:95:
81:03:44:1a:02:d5:56:39:01:dc:48:f5:e9:f5:f5:
74:12:dd:c8:b9:cd:49:b3:97:37:af:bb:7e:17:99:
4e:41:06:c7:9f:1d:61:0a:3a:ad:eb:1a:b8:0c:58:
44:5b:93:b8:c5:09:8a:37:af:b1:24:83:06:e2:4f:
05:c3:f3:eb:89:ad:38:a2:a6:e7:33:c9:93:d1:e6:
52:d1:a6:ee:bc:9f:26:32:92:39:d9:37:7c:77:d1:
de:ae:e7:e0:d4:e9:6a:5b:04:e1:cc:24:86:29:7c:
ec:06:3c:55:b7:7a:47:a7:36:f4:df:c4:03:57:71:
e0:a8:84:73:1c:5c:92:79:e5:2b:f8:2d:db:c1:27:
8a:93:74:65:68:7b:73:0c:5e:3e:3f:19:bc:8a:cf:
c6:12:4d:3f:0f:64:b4:63:74:c6:a6:12:84:1a:6f:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3F:E5:98:38:99:78:0C:1A:F2:F4:D5:BF:5A:82:01:B3:FA:0C:67
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:31:b8:6a:a1:9f:1b:e0:c2:30:d0:d8:97:37:a3:23:b7:21:
26:43:62:3c:c5:60:25:db:62:bb:67:40:a2:6f:b0:59:55:b8:
bd:66:c3:4d:fc:24:dd:a8:2d:23:c8:8c:8e:ae:3d:07:bc:d1:
7f:86:6c:d2:9c:f1:29:76:d5:cb:16:62:b2:bf:33:b6:70:08:
70:11:c8:cd:cd:ae:25:40:80:16:71:4d:c2:71:81:b8:5c:e7:
f7:ca:e8:ca:89:9e:a2:dd:23:c9:91:7e:47:38:57:80:05:04:
7f:9e:2f:a5:c0:e0:8e:ed:a4:61:95:ae:87:a7:c4:72:28:de:
54:ba:bd:d6:c1:75:11:a6:ca:5c:98:31:1d:20:70:65:c7:94:
d7:06:8e:e6:2f:13:23:63:40:e6:67:74:c7:1c:3a:7d:c2:8e:
6c:ba:3c:07:98:85:73:f2:b5:5a:46:0e:3b:88:bd:ab:13:ae:
1c:1e:1f:f0:c0:4f:be:a1:13:56:83:8e:fa:e6:d1:37:37:1b:
93:06:0a:48:95:c4:bf:a2:e8:46:54:01:ed:7d:29:12:e2:bb:
90:02:91:29:f9:39:4b:d9:74:a6:5f:03:0e:a5:3c:41:6b:02:
41:15:39:a2:f5:40:23:24:02:bb:1f:1b:be:3e:30:94:f6:24:
e5:af:cc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:19:12 2026 by rpki-client