Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: f3lwOzPtu5wqJ0VlESV0tFxPwSUOa0LRkB2oK1tJjMc=
Subject key identifier: A5:80:04:9C:92:09:14:F6:20:4F:5B:F6:CE:B1:F6:9C:63:CC:20:A1
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 019E1F111EACB5ADE67F8F0137DDE1AD4189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 196A
Signing time: Wed 13 May 2026 02:01:16 +0000
Manifest this update: Wed 13 May 2026 02:01:16 +0000
Manifest next update: Thu 14 May 2026 02:01:16 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: n/nAxkmfwtyPOlXoXTYGqhwXZJbd9/O05woYePc/N38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:1e:ac:b5:ad:e6:7f:8f:01:37:dd:e1:ad:41:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: May 13 02:01:16 2026 GMT
Not After : May 14 02:01:16 2026 GMT
Subject: CN=a580049c920914f6204f5bf6ceb1f69c63cc20a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:ad:c1:8f:11:19:8d:5a:2e:65:0d:4d:1b:
93:7a:e4:e0:ee:f4:ef:10:74:98:ca:a8:d7:61:d9:
2f:42:c4:a1:2b:4a:57:81:5d:09:39:57:54:94:c1:
4c:66:48:df:fb:de:ad:d7:43:06:a5:b2:ff:bd:50:
f6:2f:6a:98:e2:5b:06:e7:76:a7:34:02:f5:29:06:
64:31:87:f4:1d:19:9a:6c:1b:38:d3:c8:fc:2f:5a:
19:0c:05:18:94:c2:13:ee:1d:ab:20:f7:7c:15:0c:
5d:51:ea:94:16:3d:19:9d:a3:bb:32:0b:2b:e2:d7:
e1:2d:2d:08:12:c9:e1:90:f5:ac:70:9c:c7:10:92:
2b:0f:ed:99:3f:6e:ea:02:78:19:5e:64:bf:3d:11:
35:2d:9a:ab:33:22:f8:c1:77:38:88:f7:2e:c9:f9:
34:77:f7:38:ee:66:02:40:25:0e:c3:78:a9:6d:65:
55:8a:64:b0:f1:da:1e:45:fe:65:61:fd:43:5a:5e:
39:fe:47:29:ad:f1:30:2c:fc:a2:5e:a1:58:c6:99:
29:c8:0a:a9:ab:01:fd:8c:a1:dd:b5:92:e3:3f:52:
c2:b2:cc:39:84:a3:ad:e5:77:cd:cb:b2:9d:00:1f:
3e:fd:36:1e:92:0c:99:7a:22:ae:2a:c7:bb:02:ad:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:04:9C:92:09:14:F6:20:4F:5B:F6:CE:B1:F6:9C:63:CC:20:A1
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b0:68:ba:98:4f:6f:0d:6d:d0:82:76:97:8f:d3:9f:db:a7:
fb:d5:15:ca:dd:cb:23:34:21:dc:8f:18:a4:92:05:b4:d8:09:
46:98:62:39:63:00:a2:e1:7d:3d:50:f2:8f:2a:29:ca:cf:0f:
fa:0a:8b:77:cf:32:04:ed:30:dd:98:94:8f:9e:78:ca:28:74:
1d:94:90:c7:54:e7:4c:78:3f:a6:4f:46:f2:37:79:44:fb:ab:
69:ad:19:d0:65:1e:0e:e1:60:d4:a3:53:49:c5:48:be:7c:71:
9f:5d:c7:ea:8e:39:01:a0:63:d7:20:73:ae:ca:06:9f:1e:88:
64:ef:83:94:46:91:4c:26:d1:2b:dd:bf:c9:d4:6f:6c:30:54:
25:53:70:07:4c:4a:c5:56:30:dc:b4:64:e6:d9:f6:0a:45:cc:
4c:2e:76:dd:33:cf:99:8f:43:39:62:0c:57:bd:d4:5c:f0:23:
a7:f1:72:40:da:c3:78:25:5e:42:d3:b2:84:d9:69:da:0a:e0:
59:27:e2:05:5e:17:fb:6f:5d:7a:6b:59:c1:ec:a8:2b:71:df:
16:1b:a5:4c:c5:f9:ad:58:2d:38:71:41:75:ab:78:8e:54:b2:
17:17:e8:eb:14:0d:a7:6c:7e:8a:d6:a7:c2:9b:92:f1:48:89:
df:29:79:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:19 2026 by rpki-client