Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
File: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft (raw, json)
Hash identifier: gKV4OVdQOa4408bhPLm4C3YNQkr0Ifpn3roEi2hy6zs=
Subject key identifier: 82:C2:48:64:6B:9E:C0:EA:3B:FB:1E:4E:EC:38:67:9E:6F:30:E7:5A
Authority key identifier: CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
Certificate issuer: /CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Certificate serial: 019E21DB435F1E23B6E736791A5F9E87190A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
Manifest number: 05BC
Signing time: Wed 13 May 2026 15:01:18 +0000
Manifest this update: Wed 13 May 2026 15:01:18 +0000
Manifest next update: Thu 14 May 2026 15:01:18 +0000
Files and hashes: 1: mQ0ACAyJhS24Ge7JfejryYjhrr4.roa (hash: vb4PW+qjvJj8W9hO5gMvw1SrDAuFxyDok45TJihaRuk=)
2: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl (hash: fCjUGLxx0sH0NOmpGhi/WWvwJEl4KRcs0YZzf1WH/sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:db:43:5f:1e:23:b6:e7:36:79:1a:5f:9e:87:19:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Validity
Not Before: May 13 15:01:18 2026 GMT
Not After : May 14 15:01:18 2026 GMT
Subject: CN=82c248646b9ec0ea3bfb1e4eec38679e6f30e75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:93:5c:56:a8:18:bc:48:53:ed:bb:bc:c0:
d8:15:a7:62:cf:b1:c0:37:66:48:f9:c9:d5:2d:bd:
db:88:19:f2:27:89:ab:da:f0:a1:07:c1:0f:e1:1e:
d8:24:ac:79:ac:ff:9e:00:c2:61:91:46:73:5c:78:
00:72:f4:34:17:95:55:bc:e1:3a:4c:7a:12:e7:7e:
f8:8b:45:77:a5:54:fa:5b:ff:01:65:41:d2:e6:46:
ef:43:a3:5f:f6:50:bd:71:35:ac:9a:05:24:39:60:
ac:ae:f1:98:83:d6:4c:45:c4:21:63:ce:59:b1:10:
95:d6:6f:c9:97:41:bb:67:9c:35:b7:14:57:09:57:
57:f6:fd:9e:c7:f4:52:89:27:7b:99:64:58:d2:52:
99:5a:86:bb:94:80:01:ee:62:29:15:4b:b9:e8:49:
89:f0:1c:ee:c2:3f:a6:e6:7e:00:f0:85:b6:c5:9b:
1b:73:7d:7d:1d:84:a9:cf:ff:c5:f1:a4:11:7c:35:
5e:c8:bd:34:fa:86:94:9c:3c:81:31:53:be:af:7d:
a8:88:a3:57:44:68:68:61:a1:3d:20:b5:7d:d0:b1:
a6:e6:92:d6:23:55:44:d5:45:f2:f3:fd:b5:2e:f4:
09:6b:26:7f:e7:c7:c5:d3:8e:bb:db:e8:61:67:1e:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C2:48:64:6B:9E:C0:EA:3B:FB:1E:4E:EC:38:67:9E:6F:30:E7:5A
X509v3 Authority Key Identifier:
keyid:CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8f:03:f7:2b:04:68:e5:1b:cc:93:39:09:8e:92:ef:45:91:
c1:72:3f:8e:9b:fe:8a:d0:ef:3a:68:e1:d4:66:61:dc:f5:9c:
00:8c:01:bd:53:0a:e0:44:14:23:99:1d:b8:e8:33:ca:8b:aa:
59:9d:18:e1:9d:c4:6c:e7:fb:a3:49:45:4f:71:2a:10:22:f1:
f1:ea:aa:7c:27:3c:e8:0f:84:a2:8a:3f:1b:4b:0e:f9:f5:e4:
6b:33:ff:38:3a:4a:13:d1:e3:cb:34:d3:87:d7:ea:e5:ef:66:
46:23:11:4c:6b:b0:41:56:ca:d3:5d:fb:b4:7c:64:a3:1a:01:
44:20:53:3b:e3:f2:9b:7d:28:9f:2c:3a:8a:af:5c:3a:b9:71:
8a:4b:50:1f:a2:6d:c6:81:e1:07:5d:57:70:99:6d:bc:15:dc:
d2:87:cc:a3:94:67:57:ba:42:73:2a:c6:d1:fb:e4:2b:fe:db:
93:43:bc:ae:95:be:43:35:f7:ff:f5:6c:b6:c3:05:11:dd:d8:
dc:2a:f5:2e:6d:df:f9:8f:6c:0b:9b:15:9b:f9:53:91:74:65:
23:61:c3:b1:ad:62:3f:58:21:9f:35:26:ae:a0:41:51:6d:20:
33:a4:32:88:8a:1d:01:a3:78:7d:0e:e0:86:c8:ed:d5:b2:7b:
ed:ee:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:10:20 2026 by rpki-client