Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: D8yl2YBQQh8ab3SwY9kmp46BMw6ULoAS3rzhrmn/wZQ=
Subject key identifier: 0A:78:3D:E9:76:69:F5:21:C3:D4:83:38:AB:D2:1E:09:F3:03:65:8F
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019EB846080ED3B8C8EBBEBABCDD020703CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 082F
Signing time: Thu 11 Jun 2026 20:00:57 +0000
Manifest this update: Thu 11 Jun 2026 20:00:57 +0000
Manifest next update: Fri 12 Jun 2026 20:00:57 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: 61knfBWnMIpQ1IAg/G9rc9nXfMbBBtWVY+EgTvkQDJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:46:08:0e:d3:b8:c8:eb:be:ba:bc:dd:02:07:03:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Jun 11 20:00:57 2026 GMT
Not After : Jun 12 20:00:57 2026 GMT
Subject: CN=0a783de97669f521c3d48338abd21e09f303658f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:f0:41:61:9e:b0:44:a1:b5:68:29:96:83:
d8:52:ae:1c:b0:ae:58:0c:23:8e:1d:ca:aa:76:a8:
aa:b9:26:09:de:a9:ce:b0:e6:41:b6:69:26:19:5d:
62:4a:2f:19:bd:ef:a2:0e:65:31:ae:bb:43:d6:6e:
8e:77:17:3d:54:a2:47:06:9a:1c:e1:cf:64:98:5c:
70:b0:85:23:0d:27:3c:87:0e:f9:ff:72:b7:a0:6d:
c0:6b:7a:e5:c9:27:5a:d2:3f:86:19:84:b0:9b:f8:
54:d3:02:6f:ed:53:97:78:83:5b:84:b8:96:eb:50:
57:1c:23:3c:fe:bd:ca:6b:36:ec:33:ff:49:ef:c9:
06:e7:c8:cf:a8:41:26:ca:bb:cf:0f:39:82:69:ac:
63:a9:c6:66:54:6f:bc:03:76:6a:f2:54:b5:cb:82:
e4:e1:6e:63:d3:8e:48:7a:8d:01:c9:0c:aa:70:1e:
07:33:a7:f3:ee:f5:41:35:49:5d:ec:f5:99:d9:6e:
b9:b2:5c:72:c0:26:0e:ef:9f:62:23:db:8e:41:32:
38:e1:b5:78:19:bf:95:45:f6:ae:14:86:83:f6:09:
bd:56:7b:f5:6b:80:bc:ba:a0:64:83:c2:82:21:75:
08:fe:f3:c3:90:45:58:56:d9:f8:e1:3c:ed:74:e6:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:78:3D:E9:76:69:F5:21:C3:D4:83:38:AB:D2:1E:09:F3:03:65:8F
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:42:84:c7:96:ed:af:33:4b:7b:d1:ad:03:19:be:da:9b:fa:
ad:cb:14:58:76:86:ba:ff:15:9e:df:36:b5:21:92:49:cb:a7:
89:c5:4e:b6:97:42:13:b7:a8:30:4b:2b:c4:e9:c2:27:22:9c:
91:34:54:18:86:e0:a5:99:2f:2a:d6:89:f7:11:2b:fd:43:e0:
a7:b5:d5:04:56:fa:bc:1e:9e:5f:99:94:db:38:61:aa:9c:98:
42:af:dd:25:ba:37:15:9c:cf:de:dc:7f:fd:f3:71:20:2c:69:
54:53:42:18:01:34:bf:ce:2f:1c:53:70:bb:92:9c:0f:6a:27:
dc:1f:46:f4:13:e1:1d:dd:8f:47:58:4e:0b:8d:0b:6f:e3:d0:
e4:92:f2:80:44:c5:b8:3b:90:b5:f1:f7:02:2d:ce:5b:aa:9c:
a6:92:d6:9b:75:28:e2:f1:5e:dc:b5:7b:06:42:87:56:4d:3f:
61:cc:ce:88:6f:8e:7a:51:b3:ce:77:29:72:94:2d:00:23:51:
e0:8c:d5:4c:13:56:67:a1:b9:65:6e:d1:94:bf:ae:7d:68:fe:
53:3d:72:c7:2d:49:94:a3:0e:a1:d0:6a:67:5c:02:79:7b:fa:
e1:9c:6f:39:04:19:2a:34:41:8a:d7:e8:17:b9:1b:1d:da:7d:
ba:6c:3f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:37 2026 by rpki-client