Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
File: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json)
Hash identifier: xeafNrybeZCRzxGSKWAYJyNQOcKxa7R5UQiXFr1uYz8=
Subject key identifier: 4E:83:EC:30:73:12:CF:E4:3A:6B:83:20:F8:6B:55:E0:93:34:62:14
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial: 019DECA3F239FE48728FE4F748A6470BB33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
Manifest number: 17FA
Signing time: Sun 03 May 2026 07:01:00 +0000
Manifest this update: Sun 03 May 2026 07:01:00 +0000
Manifest next update: Mon 04 May 2026 07:01:00 +0000
Files and hashes: 1: 7wFOH7ecwAxbcPrjKMH8DMVlPm4.roa (hash: oDFpn/TpGeL3vgneJ/VQgGBHX/EOeGEzI4ysPf7pfaY=)
2: QLOd9vMTP4FPhghSPou0JbJuhUE.roa (hash: RwuImmn6QOcjTBNhpw2cK0vTsfjOTjWE/72ESbcTKQg=)
3: Y-pJ0zt5xFwsfApM5zD_msTaIqQ.roa (hash: a+YKFLuDobsKmaDDpSgIi2ckC2hwZqdDdY5fKql5U+8=)
4: oBXcY9E5U1GBb72h8m09mGmm-Vo.roa (hash: 9fw2PFDyEVoaxUE4CEIY7mthU2LIqsQo2HGJzEoheK4=)
5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: EeaqusfjsFwqMJBBFtK9BeXDykxUZkEIWoSzHqa1SZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:a3:f2:39:fe:48:72:8f:e4:f7:48:a6:47:0b:b3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
Validity
Not Before: May 3 07:01:00 2026 GMT
Not After : May 4 07:01:00 2026 GMT
Subject: CN=4e83ec307312cfe43a6b8320f86b55e093346214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:9c:3f:0d:cc:f4:ad:08:aa:8c:bc:d8:e0:
2c:44:7d:47:55:b3:f2:c2:75:b7:52:6f:ef:63:fa:
df:a8:38:e3:2e:95:92:ac:a1:14:dc:5f:5a:ed:0a:
b8:79:02:10:f1:b3:53:fa:68:a9:5d:46:10:cd:47:
0a:f3:7b:2e:2f:17:7e:62:1e:63:e4:5d:96:28:86:
c1:ea:58:e5:2c:24:50:57:e9:2f:30:f8:9c:ae:5e:
5d:e8:c5:46:0a:0e:b5:99:64:f3:c5:8d:48:bc:d0:
d3:91:65:48:fb:5e:0e:c1:90:53:04:b2:6e:dd:ec:
a0:27:52:ff:9f:bd:5b:00:ed:af:b7:25:73:65:8b:
48:f2:ae:fd:e4:c6:96:0a:97:78:56:57:f2:8f:be:
fc:bf:74:53:58:04:00:27:97:d4:de:00:4b:6e:d2:
b9:10:f6:74:2f:5e:85:bd:12:0a:41:d9:48:eb:9c:
c6:27:55:0c:1b:49:e2:24:1c:98:f3:e9:29:a8:c7:
e1:c2:a6:cc:66:61:20:c4:bb:e4:61:d5:2a:f7:b2:
78:87:a4:eb:07:de:3a:f1:8d:d1:c6:a4:fe:e6:9b:
0b:a4:e5:2b:a2:82:be:ff:b0:5e:45:d6:c9:4b:23:
28:94:97:02:8e:87:cd:0c:f1:f0:ad:c9:da:2a:9e:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:83:EC:30:73:12:CF:E4:3A:6B:83:20:F8:6B:55:E0:93:34:62:14
X509v3 Authority Key Identifier:
keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:17:de:89:6c:0d:cd:d2:ce:f4:16:f0:e6:63:67:18:1d:99:
02:30:8b:a1:4b:45:44:8b:0c:76:da:7d:94:77:9f:e3:e2:ea:
d7:f9:98:a3:b8:ab:83:b7:50:da:f7:55:d8:bd:54:06:e5:4f:
4d:29:47:5e:a1:d6:b1:02:f8:ec:0e:45:29:bb:d5:e6:24:c1:
47:78:3c:65:ad:7a:79:e1:69:4a:98:13:3b:86:4c:19:24:6d:
3b:72:a7:8f:67:ee:62:98:f5:b6:04:ba:03:78:82:0b:c7:67:
8b:f0:53:7a:45:60:0a:a7:49:b8:5b:11:81:b1:5f:f5:4a:36:
3a:a2:82:c3:d4:98:67:79:ad:7b:e0:98:24:11:20:e3:8f:d0:
0f:99:ae:2f:5e:3d:f8:b1:09:f8:63:7b:c8:db:37:b5:62:77:
33:ce:25:48:7e:bc:b2:ef:4f:7a:26:6c:b0:5b:ec:85:b4:9c:
af:f9:10:01:ff:5c:5a:38:6d:3c:56:43:49:f9:7c:09:96:c8:
e5:fa:a1:0a:1f:61:db:08:7f:8f:6c:57:66:40:1d:18:8d:f7:
45:53:01:a1:15:da:ff:04:c0:70:1b:95:b8:ad:64:8b:8c:5a:
af:e4:8e:e1:dc:dc:8b:e3:98:f7:86:0d:3f:42:31:f5:ce:a1:
4e:53:fa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:03:12 2026 by rpki-client