Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
File: y0QccfqMdkotwsDswYPlLSOnrh8.mft (raw, json)
Hash identifier: 4ieSnUQCVywUHNBGV/nwLGE6yNst+EVoTFa/0CKbCb8=
Subject key identifier: 37:31:A7:C7:EC:F6:D6:42:31:0A:E0:46:A2:5B:C1:F3:3F:45:FE:CF
Authority key identifier: CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
Certificate issuer: /CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Certificate serial: 019E6E07C86989BAA7D44F0EF1A5186AFB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
Manifest number: 18
Signing time: Thu 28 May 2026 10:01:04 +0000
Manifest this update: Thu 28 May 2026 10:01:04 +0000
Manifest next update: Fri 29 May 2026 10:01:04 +0000
Files and hashes: 1: G83V1nWk1M0pYAHDfAvxnUMwSMA.roa (hash: j4wXmxdv/0enwpuVvGc3vBJ4lXdgd81VwD2IbAUVpeo=)
2: a_xgCSeQn5Ssbn8baCisaVeCEIo.roa (hash: mm9SsTEQyCJpAwPRjfFIv0OGNftc+iPyUjxpgaN7qkA=)
3: y0QccfqMdkotwsDswYPlLSOnrh8.crl (hash: 0c+xUWALTa8T1mVv1V+F9ybywFZu/Pz6Bg36gVbTp6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:07:c8:69:89:ba:a7:d4:4f:0e:f1:a5:18:6a:fb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Validity
Not Before: May 28 10:01:04 2026 GMT
Not After : May 29 10:01:04 2026 GMT
Subject: CN=3731a7c7ecf6d642310ae046a25bc1f33f45fecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:94:2f:85:bb:c7:0d:77:87:c9:bb:b3:7c:2c:
e4:47:31:54:59:6d:3f:65:8c:93:43:1d:28:86:59:
b2:4a:8a:df:83:e6:31:12:1c:ba:ac:cb:e4:bf:ff:
61:02:63:a6:fc:66:33:86:02:a0:57:bc:a0:4b:25:
2b:c4:c7:b8:10:c7:de:a6:3b:34:79:52:fe:0b:5c:
f0:11:86:25:9b:51:7f:d9:8f:27:9d:b7:9d:90:37:
d6:71:12:55:58:08:c3:9c:e9:de:e2:32:ca:38:a9:
c1:b2:c4:57:41:90:63:c8:6f:82:df:b2:8c:59:4b:
53:04:2b:ad:51:f3:eb:44:e3:ff:59:a6:15:17:78:
af:b8:0a:90:cb:42:3e:ec:ba:f9:da:e4:5f:24:2e:
23:9e:0e:06:46:ed:3b:48:ec:d0:33:71:6b:9c:4f:
49:b6:d7:9c:50:fb:9c:42:b7:b0:a8:a1:0a:ca:ee:
90:82:14:34:c1:e0:fb:c2:5c:72:f6:33:13:75:ba:
07:88:39:c5:f6:96:1b:08:5f:e5:21:91:36:b9:6e:
f6:fa:7d:c9:42:3c:17:14:c0:80:e9:32:29:ba:5f:
6c:b4:b5:84:0c:23:c8:c7:89:40:e4:a8:e8:30:a1:
64:6a:cd:4e:09:4f:7e:dd:49:e1:3b:27:83:68:64:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:31:A7:C7:EC:F6:D6:42:31:0A:E0:46:A2:5B:C1:F3:3F:45:FE:CF
X509v3 Authority Key Identifier:
keyid:CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:46:f0:5f:46:22:0d:30:14:c7:38:ad:27:d3:e9:23:5e:df:
29:99:b1:c5:0a:b0:8d:84:a0:92:31:6c:1d:9d:34:1a:ca:e1:
c7:f8:7f:0b:7b:90:6e:2b:10:c3:02:a9:bf:2c:6c:96:59:17:
69:84:30:32:b6:4a:54:0d:44:3c:71:9f:ef:21:f3:d8:4b:81:
c9:0a:d0:7a:dd:ef:52:e6:16:c1:1c:25:e9:ce:0d:a0:77:f4:
11:5f:7c:cb:f8:82:52:7a:31:20:4a:6a:c1:61:8f:20:8b:26:
a3:7b:73:16:df:bc:b8:f5:35:57:c4:fd:6f:91:8b:d1:37:aa:
35:94:19:40:69:bb:d4:16:e3:49:9e:41:c8:5b:73:89:f5:9c:
86:54:7f:87:4c:a9:68:af:81:32:07:4e:b4:59:19:aa:b1:42:
e6:ee:6b:30:2b:54:26:af:f7:2b:64:c7:0a:b1:c3:c7:9d:6e:
fb:e9:0a:c0:66:2d:b0:9c:6c:a9:91:88:bc:18:43:43:79:bc:
8e:93:bf:b0:a0:b6:e2:99:c0:30:96:41:1d:48:7b:87:8f:55:
ec:7c:d6:38:20:97:71:59:ff:a9:d1:d3:21:76:36:27:82:42:
e5:e3:82:8b:48:0f:73:2b:00:8d:2e:c7:8a:f8:78:9e:83:7a:
9c:a9:6d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 15:57:47 2026 by rpki-client