Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: d8AVEPduQyPoZbf+nTTGqzA4y7H6kMUScFSvtlv+WEY=
Subject key identifier: B0:9D:03:62:12:ED:53:F1:9F:8E:DC:B2:23:21:E8:0E:B5:DF:C6:61
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 019E30A931267C77A26F48F951C5CBD920E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 0FF8
Signing time: Sat 16 May 2026 12:00:54 +0000
Manifest this update: Sat 16 May 2026 12:00:54 +0000
Manifest next update: Sun 17 May 2026 12:00:54 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: QsUYpBp0PCJI9GFQC7ZerE38vA5/Xtm0HFdHSso1sLQ=)
2: XpDHF6qNAfRig2NmPZIIBwNiNAU.roa (hash: 9bFU4KF8zp5CMrxC2WFBFW2SFIScv756NVWyJZFeI1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:31:26:7c:77:a2:6f:48:f9:51:c5:cb:d9:20:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: May 16 12:00:54 2026 GMT
Not After : May 17 12:00:54 2026 GMT
Subject: CN=b09d036212ed53f19f8edcb22321e80eb5dfc661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:45:d5:db:10:b2:f0:7a:99:48:7a:83:f3:
86:74:c8:6b:94:78:2d:c6:6e:f4:31:57:a9:04:96:
fc:f0:4b:fb:49:95:5f:b4:4d:70:ec:80:76:df:53:
3b:5d:b0:81:74:a3:dc:b0:18:60:a0:ef:3f:f6:ba:
9e:6d:8a:17:6c:58:a7:2d:60:b9:cd:a6:72:d6:67:
05:84:34:57:b8:db:41:6c:f0:7e:a9:c5:ef:84:27:
60:ed:c6:52:44:51:28:4f:54:78:d0:75:a0:38:9f:
6d:73:60:7d:46:4e:7a:56:1c:7f:46:f1:cc:af:fb:
86:8c:91:08:8e:24:9f:52:e6:b5:58:c5:d9:d4:12:
70:aa:b3:f9:14:e6:79:42:95:02:f0:7f:83:e0:4b:
0d:ec:0b:e9:c1:4f:e9:14:81:0b:c7:8c:80:71:21:
9f:b2:0a:be:a5:91:0a:40:07:41:86:6e:5d:06:95:
c7:f0:88:5b:65:1d:76:ed:ca:33:e4:af:b1:6e:af:
02:02:4f:8f:2b:de:60:85:6a:3b:8c:e8:61:0a:ee:
8c:46:ac:36:09:2e:5b:96:0b:a8:dd:da:0d:d7:b0:
35:b8:3f:23:25:bb:dc:6a:1a:1a:a1:6a:5d:17:06:
ac:31:e6:b6:8a:84:6f:56:f6:77:48:6d:98:70:7f:
2c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9D:03:62:12:ED:53:F1:9F:8E:DC:B2:23:21:E8:0E:B5:DF:C6:61
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:de:be:24:c6:33:83:8c:1d:d8:76:dc:32:06:59:4b:e3:2c:
92:35:9d:62:d2:b8:87:ce:4b:9f:c8:4f:3f:b4:5f:19:25:74:
16:08:97:e7:9c:1b:fa:20:3e:f0:91:cb:17:f3:ca:6f:fa:10:
ab:29:5c:99:f5:43:82:a8:61:ba:d4:03:f8:61:dd:d7:3d:c6:
a7:b2:1a:5f:73:7d:83:5f:e4:62:61:3b:86:f4:57:aa:75:02:
39:c2:99:83:e9:aa:93:d4:eb:7a:a5:32:2d:8d:1d:10:3a:e0:
2f:af:fa:ae:0b:c7:d1:af:8b:4d:9e:b9:cf:32:38:52:96:13:
bd:95:49:42:36:fd:7c:13:7c:64:8c:2e:43:5f:23:17:83:f3:
41:c0:d0:8b:c3:a9:16:fe:6a:c2:3a:5e:5e:84:02:e1:82:e0:
35:bf:72:c6:f3:e5:fc:59:19:55:32:b4:51:04:4b:30:8c:a5:
e0:71:12:77:01:41:54:ff:1b:57:ac:36:ac:55:39:4d:63:f3:
fd:c6:40:b1:4b:3c:df:0e:0b:2a:20:58:8a:62:f8:8f:95:e4:
f2:1e:20:5a:fe:1e:a5:69:a6:88:dd:97:a2:35:df:2a:b3:db:
45:a4:11:e1:08:9b:24:20:9d:70:9a:cc:eb:7a:22:9d:e7:5f:
2b:20:6c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:27 2026 by rpki-client