Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: U4Da+TmQD/GC8fCYIwjWGpZ6pRHKZU3lOdbu+GyFYuU=
Subject key identifier: 89:4A:EC:B4:AA:6B:98:4D:0E:D2:B0:C2:11:09:7A:62:2A:7D:AE:61
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 019E20916A9644D0105C01CEA26B964137EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 0588
Signing time: Wed 13 May 2026 09:01:01 +0000
Manifest this update: Wed 13 May 2026 09:01:01 +0000
Manifest next update: Thu 14 May 2026 09:01:01 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: 9xP0wIzkgnrlaBvZ1JxxGqVY5JzyJ2rqmeol7zoAwtQ=)
2: yjWJBP_-NJfhexDZzlwqedaPyY4.roa (hash: SkEjGblzIkRFnt59eOfa2NG/dhlC1N31bem5GR7D9p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:6a:96:44:d0:10:5c:01:ce:a2:6b:96:41:37:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: May 13 09:01:01 2026 GMT
Not After : May 14 09:01:01 2026 GMT
Subject: CN=894aecb4aa6b984d0ed2b0c211097a622a7dae61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9d:20:de:70:a7:59:5f:8e:37:9d:bc:6e:a2:
f5:da:e4:43:9b:ec:dc:75:50:17:98:09:1c:46:78:
fc:e5:b6:80:c7:19:59:44:d3:3e:73:96:c5:bd:20:
28:0b:1f:52:25:ac:a2:3d:21:aa:04:50:75:4b:97:
23:a0:30:aa:9c:f0:d1:79:7a:99:98:11:9b:e5:10:
44:ed:83:f7:80:26:d1:35:ed:d3:8c:5d:0f:7f:ab:
00:04:88:09:66:5f:b3:38:a3:f3:1b:65:83:29:9e:
d7:42:a7:a4:ce:11:6a:69:77:94:38:3d:a3:87:22:
3c:98:cf:59:3e:f2:3f:ee:60:f0:2d:90:2c:c6:cc:
3d:19:8e:4d:1c:a6:4c:4f:2b:c6:ee:3a:51:f8:61:
ae:53:a8:b4:2d:91:5b:96:94:c3:96:09:41:50:a8:
bb:c1:25:16:97:48:4a:a6:10:42:67:4e:92:cd:d5:
dc:66:97:1d:1c:87:e5:c8:6e:0c:d8:17:91:9b:b0:
45:6e:e5:53:81:7d:e8:64:8b:8b:14:e0:77:eb:9e:
1e:d0:c1:38:ca:ce:b9:37:a8:ff:66:1a:f1:cc:5b:
ed:76:38:a4:af:e6:a9:98:69:6e:dc:79:00:d2:fd:
ab:38:72:fc:f8:55:20:5e:3a:88:4e:43:a4:e4:f8:
e5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:EC:B4:AA:6B:98:4D:0E:D2:B0:C2:11:09:7A:62:2A:7D:AE:61
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:94:d8:7c:de:39:22:8b:10:09:26:dc:9a:8b:cc:50:d7:57:
24:33:b6:82:ac:b8:4e:d5:c6:1f:f1:4d:c3:87:85:22:35:18:
a0:1e:5f:8d:6b:46:4e:3d:74:7b:82:9d:ab:f3:25:14:3c:ec:
14:7f:98:d5:e5:f7:36:32:29:28:71:b7:37:c4:b7:f9:e9:e8:
a2:1b:21:25:af:c2:a4:0d:87:2c:4a:52:41:30:e2:40:f7:f4:
2a:c7:89:a8:79:d6:01:23:2a:94:96:80:1f:cf:39:04:8b:77:
79:0a:2d:32:18:d5:83:15:3a:ae:2f:2a:0b:58:22:b6:00:75:
45:b4:70:d7:11:cb:f1:02:af:7f:9e:aa:e2:1d:ba:f9:bb:e5:
b9:bd:f5:8e:19:f2:37:f6:80:65:6d:07:0e:de:25:52:7e:dc:
6d:29:34:92:96:1b:84:bb:18:7f:79:61:24:5a:de:90:45:7e:
3c:38:fb:9f:14:10:6f:49:46:59:47:27:be:1b:fa:19:28:8f:
97:a5:ca:af:b5:f5:8f:73:3b:3e:01:fe:b7:c2:8b:c5:d8:eb:
31:54:d7:7c:69:80:90:f5:67:e8:9d:ba:03:e9:b0:5a:bb:72:
26:4f:b8:a8:5c:7f:69:7e:5d:ef:7e:fb:11:4f:42:e5:2b:f3:
16:b3:7a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:59 2026 by rpki-client