Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
File: yPV2sjbj7l0fmZnD27fBbEUfnh8.mft (raw, json)
Hash identifier: 6lYAOF1rYlI9QmmfTO6LfXP01QRV3iBl/azkf5R8FFs=
Subject key identifier: 3D:C3:8F:61:99:B4:D8:4D:A2:14:6E:7C:8B:6C:80:2B:8E:C0:EB:9F
Authority key identifier: C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
Certificate issuer: /CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Certificate serial: 019E2926F8630EE21C6F3D9ACF128CA6A8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
Manifest number: 0129
Signing time: Fri 15 May 2026 01:01:20 +0000
Manifest this update: Fri 15 May 2026 01:01:20 +0000
Manifest next update: Sat 16 May 2026 01:01:20 +0000
Files and hashes: 1: PAHwGSw_19gmyoRYGQaNAjqIHtU.asa (hash: goqlMghY0A1HTm2Y+OYa5ZZ8aJopRTgzI73g3bx5MKg=)
2: d4-TFbz-oqeLLp6bwikLyk7BouY.roa (hash: X7KhtR+I1OQBZN8LT6vTNUjdXPKB17DVohSBLz6YYbs=)
3: yPV2sjbj7l0fmZnD27fBbEUfnh8.crl (hash: wEg4iGRQ+YpgNK4af2tzRJeWVmpfGdFlsdjMH1V2H4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:f8:63:0e:e2:1c:6f:3d:9a:cf:12:8c:a6:a8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Validity
Not Before: May 15 01:01:20 2026 GMT
Not After : May 16 01:01:20 2026 GMT
Subject: CN=3dc38f6199b4d84da2146e7c8b6c802b8ec0eb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:f0:0f:95:3f:64:ea:f5:29:28:fb:f1:61:
7a:b5:b4:cc:b1:32:25:4c:5f:87:d6:41:5a:56:de:
f3:31:55:32:35:40:07:ff:de:cc:07:2c:85:cd:49:
b4:67:09:a3:cc:a6:4f:33:75:9f:84:9e:5b:2c:63:
0f:b1:4d:14:a7:39:d6:cb:0a:7c:29:be:2b:08:8a:
ae:9d:9a:94:62:5e:ca:d8:48:59:15:34:d9:cd:c2:
40:14:7a:30:e1:63:c4:11:67:27:d8:75:bb:51:3f:
3b:d6:c0:cf:51:bd:4a:e7:05:c6:ae:78:f1:75:64:
6d:3f:c1:b0:c2:db:82:37:65:b5:40:b6:c7:75:bc:
dc:95:e8:8a:2d:63:4f:f0:e7:ac:4d:68:8d:6d:9e:
13:a1:0e:77:36:21:92:66:73:ac:5f:2a:56:4a:1f:
b7:2d:ae:72:51:33:21:7a:7a:c5:54:d4:d8:16:29:
78:cb:41:bf:a7:c7:28:de:f6:f9:ba:58:8b:2f:5c:
e0:90:0d:5d:e8:fe:f2:df:22:10:fb:55:13:62:81:
e6:b7:dc:6a:72:a8:38:6c:06:64:76:0b:50:8c:5d:
fb:eb:85:b5:19:7c:07:74:66:6c:fb:af:36:ad:37:
d6:5a:84:93:ea:56:fc:6a:bd:2a:10:c8:f7:4d:fb:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C3:8F:61:99:B4:D8:4D:A2:14:6E:7C:8B:6C:80:2B:8E:C0:EB:9F
X509v3 Authority Key Identifier:
keyid:C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:64:45:40:f3:06:02:7d:1c:0d:b5:88:42:3e:e9:48:ca:ba:
0b:bd:0e:f8:fc:38:14:63:75:a9:bd:65:e6:4b:fb:25:f7:a9:
30:0d:b3:51:3d:a4:a9:7d:83:45:43:63:50:f5:ce:dc:2f:86:
33:6e:d7:b0:8e:4e:1f:37:fe:86:81:72:42:ce:e0:e9:94:32:
8f:97:ae:0e:fb:70:1b:0a:77:52:52:54:8e:da:db:ea:8a:b9:
67:a3:3f:35:e1:ee:ad:32:1f:d1:f2:20:bb:a8:c5:c0:5c:70:
44:73:6b:cc:f4:8f:c0:ad:2c:80:f6:a4:9b:55:84:3d:6a:be:
48:6d:70:67:5f:9e:1b:ab:86:bb:9d:e7:33:7f:1f:69:63:93:
03:91:ad:0b:4e:40:3e:ed:d5:fd:62:83:ec:9d:69:e2:71:0e:
26:1d:dc:b2:1b:9d:78:bc:fe:66:41:b1:2c:00:45:c1:75:4b:
74:e8:98:32:8a:e4:1b:45:28:43:ad:f9:60:32:3a:8f:34:1e:
f0:41:da:bd:2a:6e:96:72:69:a3:3b:f7:50:4e:ad:b9:c8:99:
1b:e5:09:b1:cf:8d:77:33:49:fa:1e:60:24:be:ae:5b:7e:20:
30:69:19:cd:27:12:b7:29:bb:5b:e9:93:9a:2a:dd:08:5b:27:
88:7b:44:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:16:38 2026 by rpki-client