Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier: GWYZsrAclA83PKmmshramWNE/7KAbohRq9URmZ1g/2U=
Subject key identifier: F9:AB:49:5C:B0:8C:B9:C9:C9:A2:FC:C3:9C:0C:68:37:9C:F3:0A:96
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial: 019E63844ECC4B292AED14C53E258AB57EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number: 02BF
Signing time: Tue 26 May 2026 09:01:15 +0000
Manifest this update: Tue 26 May 2026 09:01:15 +0000
Manifest next update: Wed 27 May 2026 09:01:15 +0000
Files and hashes: 1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: ziSkELQjcPssvac3RtZqbqPRTEymB0MCFKZQzyMwCnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:84:4e:cc:4b:29:2a:ed:14:c5:3e:25:8a:b5:7e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Validity
Not Before: May 26 09:01:15 2026 GMT
Not After : May 27 09:01:15 2026 GMT
Subject: CN=f9ab495cb08cb9c9c9a2fcc39c0c68379cf30a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:37:a3:dc:a5:1c:02:0b:c6:08:11:51:02:
e4:da:4c:e2:12:77:c3:83:a8:e7:1c:f3:a6:a3:3c:
1c:2e:c7:98:e3:b7:3b:35:47:31:d0:ca:d9:5a:7f:
e0:cb:62:36:92:20:fc:e3:e0:cc:df:66:ac:01:ae:
44:79:73:4c:a4:36:3c:25:5f:4c:fe:1b:d0:09:3f:
79:1a:32:1d:8d:08:31:86:ad:23:3f:a2:d2:88:d6:
02:58:2b:a6:96:21:dd:e4:cf:ed:ba:54:9e:65:56:
c9:56:40:09:90:b5:d8:79:95:59:39:ff:83:2e:65:
f4:eb:cb:bf:ba:41:1d:43:1e:bb:5d:2d:5c:a1:31:
93:bd:30:4a:6e:9a:fd:c8:24:86:f8:7d:b4:f1:83:
3c:63:f0:72:bd:59:c8:81:c1:c4:7a:ed:6a:bd:7c:
11:5f:f5:15:7e:7b:0a:12:65:79:bf:6b:19:03:7b:
92:64:18:a4:7a:82:8a:46:ae:eb:01:76:6b:4c:85:
e0:28:b4:ca:e6:02:dc:65:91:ea:8b:1b:dd:b6:a5:
cb:9a:bf:f2:51:65:ce:22:9d:73:92:23:4a:99:99:
f4:f1:74:ed:a3:0e:0f:a9:8e:3c:0a:3f:1a:41:6a:
45:85:94:42:99:5e:f2:ec:b9:df:e3:92:39:bd:d7:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AB:49:5C:B0:8C:B9:C9:C9:A2:FC:C3:9C:0C:68:37:9C:F3:0A:96
X509v3 Authority Key Identifier:
keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:14:dc:c0:c0:a7:a2:21:2f:47:60:0f:ea:cd:ca:d8:83:1f:
1d:63:34:e1:5e:a0:67:d6:5e:f5:80:06:03:2c:01:75:f8:57:
cc:96:c4:84:c8:3c:90:8d:18:88:3e:b3:78:e6:34:6f:f1:ea:
04:12:56:14:f9:31:12:78:56:b6:e0:5d:ce:68:0a:30:f3:10:
69:7d:79:8e:93:ed:30:7c:b8:9b:7a:4e:9d:6b:63:54:c5:61:
97:13:9f:2c:28:29:60:13:2a:5c:06:e7:8a:d5:07:8f:b4:9f:
15:66:10:2d:94:7d:ad:ae:02:10:c8:2b:87:cf:5d:c1:04:ad:
6e:a1:ac:3f:11:d3:94:49:94:5c:5e:61:ea:c0:91:f3:68:1f:
43:0f:a3:00:82:02:eb:31:02:a6:6c:ba:34:9a:42:f2:7e:35:
79:60:a4:36:09:94:d4:bd:48:b0:a8:69:04:1d:30:78:b2:63:
db:4a:15:e4:56:f4:c2:63:f5:d0:14:65:b6:a9:e1:c8:2e:25:
67:b2:c9:b7:6f:83:5e:50:49:d8:bf:cd:c7:2d:08:9c:b9:2f:
b8:ff:3f:d1:62:42:5e:66:b1:d2:3a:0c:6a:c8:ee:39:2f:8f:
7a:7a:1f:94:5c:84:cc:99:67:e4:56:2d:bb:31:c5:70:c4:b4:
11:77:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 11:48:57 2026 by rpki-client