Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: KtEtVL+R40p68/3q2T68ZNCXvy2vIkAww5XS895Eq58=
Subject key identifier: CC:06:32:E8:7A:F7:C2:96:1E:91:A1:5E:9C:9F:A4:20:50:91:38:BD
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 019E1FEC503FA568765AC2B35513F30EBFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 06BB
Signing time: Wed 13 May 2026 06:00:41 +0000
Manifest this update: Wed 13 May 2026 06:00:41 +0000
Manifest next update: Thu 14 May 2026 06:00:41 +0000
Files and hashes: 1: I2kHiqxmSF3p6V9W7eV_eTfDN3k.roa (hash: fCpVVld0L94vFLqVKGMCfHN/hOXwKxcQlDEoGOWDUFo=)
2: XExavfpXuaZ3MydZbyDnyFn5ni0.roa (hash: WQdTsTZhStmdezt2VotpAadyLft0mMYrZPTmmKNNRro=)
3: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: WdxDnjp8rC37GXi5HJ0+Z055oBJzhcKAtE2sOtG3Ec8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:50:3f:a5:68:76:5a:c2:b3:55:13:f3:0e:bf:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: May 13 06:00:41 2026 GMT
Not After : May 14 06:00:41 2026 GMT
Subject: CN=cc0632e87af7c2961e91a15e9c9fa420509138bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:b6:80:93:4c:ec:17:6e:a8:be:f7:1a:99:
b0:04:01:73:1b:b5:1f:12:98:b2:77:f5:a3:31:62:
c6:48:6f:ce:94:05:09:92:88:1f:8a:2a:a7:3b:87:
17:82:af:cd:65:9b:58:ae:74:e0:85:24:17:5f:ab:
16:fa:ea:8a:3c:98:8b:6d:0c:f5:67:c2:fc:b2:8b:
4e:c0:23:3d:06:ef:bd:e7:41:ed:5c:18:71:e9:5a:
ab:07:ee:f2:33:0c:85:69:21:ec:72:56:fd:77:16:
8a:fa:e0:b5:0f:e6:00:ca:ce:0f:ae:46:c1:33:c8:
54:ea:f1:ab:4c:f3:06:79:ea:2a:41:42:21:d8:32:
d6:be:5f:6d:e7:65:3f:d1:2b:61:a3:da:f3:65:b3:
3d:20:3c:d0:7b:9b:94:51:a9:13:24:2a:6e:d5:7c:
ff:f9:8a:6a:ed:78:33:18:d1:2d:8c:45:69:ec:a3:
b8:8e:e2:2b:91:48:df:a4:5f:6e:22:17:6d:9a:a7:
78:55:a1:b0:94:cc:2a:64:92:bf:c5:c3:1b:f2:3b:
85:c2:08:63:6c:5d:19:5d:c8:a4:a9:b7:b2:a2:03:
9c:98:d1:df:c3:c3:2f:b9:76:4c:bf:bb:77:2b:14:
52:03:3d:19:9d:4b:fc:66:0c:bd:e4:6e:f0:e4:d5:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:06:32:E8:7A:F7:C2:96:1E:91:A1:5E:9C:9F:A4:20:50:91:38:BD
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:93:75:d3:71:28:9e:af:f1:d6:93:67:8b:e3:c7:10:5f:05:
8e:b7:e5:9a:f8:47:7e:74:03:1a:cb:82:b4:61:3d:87:31:b7:
1b:44:e4:6e:f9:54:37:84:d1:c1:f4:4a:c6:df:2f:7b:1b:b2:
1b:ec:24:d8:2a:dc:0f:f4:04:24:f4:90:69:cc:fd:4a:e7:18:
37:6d:75:19:41:ab:bf:e3:f0:70:6c:bb:94:06:5a:cd:03:94:
e8:67:30:7a:cf:51:7a:b4:e5:d5:32:e7:ea:a2:f1:b4:21:3d:
19:e4:ad:b4:7f:83:19:c2:6e:cb:91:f5:7c:c8:d8:8b:79:93:
83:80:86:16:fa:87:da:f1:6e:25:28:a2:d3:2c:ca:10:2a:1b:
27:cb:55:a0:6f:bf:d2:a6:37:2d:8b:08:e1:0f:bf:74:9d:50:
21:24:01:96:3b:67:a3:30:e5:f1:87:50:6c:2c:e9:ae:1d:f5:
8d:25:b8:44:39:ba:3d:80:80:bb:f0:17:2c:69:6c:84:98:d9:
13:0d:7c:1e:95:84:70:fa:29:04:14:36:35:eb:9a:36:d1:33:
29:a6:8a:37:ab:2f:a6:f3:cf:63:9c:85:8e:8f:f1:74:f9:f3:
89:24:53:5f:c5:6f:b7:0e:22:37:a8:b7:ed:a2:9a:c3:81:a5:
c9:f2:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:50 2026 by rpki-client