Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: 22DsXNhvRivsQc8xd2d1KWZBAtIv2IZwiYWqDL4qbDw=
Subject key identifier: 2F:A9:8F:C1:35:FC:09:89:CA:23:2F:EF:F1:F9:96:2E:5C:06:A8:E6
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019DCE992A9188CEBDBC97C05F1EAF625499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 07B6
Signing time: Mon 27 Apr 2026 11:00:37 +0000
Manifest this update: Mon 27 Apr 2026 11:00:37 +0000
Manifest next update: Tue 28 Apr 2026 11:00:37 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: YPfN4DaVkT12LLIcjPNmURDJuirIQj6NUF6Ajnhfa/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:2a:91:88:ce:bd:bc:97:c0:5f:1e:af:62:54:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Apr 27 11:00:37 2026 GMT
Not After : Apr 28 11:00:37 2026 GMT
Subject: CN=2fa98fc135fc0989ca232feff1f9962e5c06a8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:82:2f:7a:e2:ba:95:37:32:16:51:33:38:
05:d1:00:2d:6c:49:a8:8e:2d:f6:2e:ae:c6:80:aa:
a7:66:1b:7f:33:e7:8c:2a:94:ce:f2:11:51:ee:b0:
27:b0:c6:1d:ee:be:50:b3:cd:6f:05:f4:4d:69:5f:
a2:9a:05:a9:2f:02:1d:70:a8:4c:ff:a8:5d:af:cb:
12:a7:85:f8:00:66:0f:bf:5b:4f:b6:32:de:82:47:
e1:0f:a1:3d:99:ba:6e:78:2d:51:e0:bf:f8:13:b3:
a5:d3:54:72:a7:d5:6d:a5:90:49:5f:54:a1:c0:4a:
73:91:c3:70:3f:2b:48:67:c5:4e:a4:12:58:94:06:
e1:ee:0a:3c:e4:1a:ff:38:e1:9a:26:76:26:61:83:
a1:cf:1c:1d:37:bf:9c:4c:11:c1:39:93:6f:da:c1:
4c:14:b5:a9:ca:a2:e4:c7:19:dd:d3:8d:e8:68:82:
5a:bc:6e:c2:b1:78:78:e8:6a:c5:a4:19:cd:d2:a9:
6b:6f:da:6d:1c:aa:a3:4e:5b:17:fb:ca:4f:57:09:
34:8e:da:4d:3d:ea:22:9a:7b:64:7b:67:e6:a2:9d:
07:88:fc:9b:e6:8a:23:54:08:3f:da:93:5f:fc:ce:
ad:90:f6:89:b3:9d:40:7f:19:ac:aa:99:20:32:15:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A9:8F:C1:35:FC:09:89:CA:23:2F:EF:F1:F9:96:2E:5C:06:A8:E6
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:23:9c:b3:b4:ef:de:17:db:42:d6:ea:8c:3a:10:b5:9a:6e:
0c:0b:aa:4f:10:43:14:21:bd:11:d2:dd:d5:d9:5b:39:e9:1b:
99:21:ec:74:10:69:d0:f2:77:92:35:0f:01:53:86:95:4a:a1:
17:99:ff:10:cc:2c:a1:99:08:ba:e8:20:d3:98:39:68:ab:f0:
ca:59:40:8a:56:28:71:1b:8a:7c:4d:38:e2:ea:ac:aa:06:ed:
b9:8c:ac:a5:18:f4:e7:46:eb:4e:4b:ce:d5:c9:dd:05:2f:bb:
af:32:92:25:f2:17:5a:dc:fd:83:ac:f5:76:d1:a7:99:a8:2d:
65:81:56:10:43:fa:a2:f1:9c:b8:f8:50:1c:f6:9c:84:03:a1:
8e:f9:69:87:a0:b4:37:18:f6:40:d2:45:c6:fe:83:65:1e:12:
a4:50:c0:73:58:60:28:a6:ae:e4:eb:d0:5a:16:75:c4:10:36:
ed:80:e0:94:09:7c:ee:bb:ab:0c:6e:f1:fe:a8:d9:c1:97:9c:
0d:75:78:55:16:94:d0:54:1e:10:fe:64:7d:3b:77:b7:08:fb:
73:ea:f8:16:f9:ff:2b:5c:60:2b:fa:f5:21:dc:9d:a7:9f:7e:
a7:37:66:f8:2f:16:e5:f0:c9:b2:cf:3e:b5:b2:5b:f8:ca:1a:
f5:b0:26:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:36 2026 by rpki-client