Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: U1gRpnmTNJCeNR6imS9R6+j3SHk8qSLcL/cVmEBJhg4=
Subject key identifier: B7:75:24:BA:0E:4E:F6:3E:A3:7F:51:08:F4:DF:10:96:6B:37:75:25
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 019E30A94505E34E5AC5C12822D25C373600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 12:01:00 +0000
Manifest this update: Sat 16 May 2026 12:01:00 +0000
Manifest next update: Sun 17 May 2026 12:01:00 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: tKHS9iupnXYKtc4Jei6hxeQ3LFw8cuqJnsPuoFxZN2M=)
2: LbD2tYPsPC8uP37pndvidAshgOM.roa (hash: ePxnnXcYkNMYiZIwMvTVXJah+jChUGFP5Kv/37gIREs=)
3: yV2l8jCuUkBjhG1YrGK34ROvjco.roa (hash: OW+ZvGgaMJR1U5WGE2eB0o2w9cCprc/bpgV1/vZl/uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:45:05:e3:4e:5a:c5:c1:28:22:d2:5c:37:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: May 16 12:01:00 2026 GMT
Not After : May 17 12:01:00 2026 GMT
Subject: CN=b77524ba0e4ef63ea37f5108f4df10966b377525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:c0:d0:1f:de:e8:4c:f7:7d:44:d8:ba:70:
cc:1c:13:06:e5:a8:e9:ab:58:a4:88:d5:26:ee:5f:
1d:d3:90:a7:2c:1c:c9:36:0e:19:6d:ab:74:60:7d:
d3:1e:96:28:ce:12:1f:b1:44:bf:9a:66:ab:0f:21:
0c:0a:01:82:53:c3:66:a2:8a:df:4b:03:d2:6d:ac:
e1:9a:29:27:94:cd:9b:39:ad:5b:2c:00:13:99:9c:
38:3e:f7:38:37:70:b6:76:90:b7:bf:b9:35:28:18:
23:ce:8b:19:98:0c:55:85:82:04:f0:c2:c2:66:0f:
f5:b7:cb:f3:d4:81:e4:69:67:26:2b:db:97:f9:77:
91:32:1c:46:02:5c:4c:51:ba:a0:3c:11:26:69:83:
7d:79:ad:18:9c:0d:12:54:31:00:6c:34:00:51:21:
57:99:e3:9e:81:03:f1:af:94:c7:08:d7:73:c1:13:
43:cc:44:68:b8:bd:32:a8:0e:68:75:bd:12:be:24:
62:ab:41:4b:c1:1d:82:34:d0:b4:4c:bc:6d:b5:f5:
5d:9b:57:26:f0:f2:cf:ae:a5:1b:29:89:4f:e2:6d:
0f:ee:57:3b:9c:32:1f:24:af:60:7a:fb:9f:b3:fe:
6c:fe:47:75:4b:0d:c5:b3:c8:a4:52:dd:37:eb:e6:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:75:24:BA:0E:4E:F6:3E:A3:7F:51:08:F4:DF:10:96:6B:37:75:25
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:72:71:e8:70:77:da:f1:cb:64:31:b2:21:77:e8:fd:60:4b:
bb:ef:e4:03:b8:d7:aa:0a:56:95:6a:72:ee:93:a0:c0:f0:a6:
d1:06:e7:13:f4:de:27:ae:c2:d0:bb:1f:fe:dc:ad:31:40:20:
20:32:17:bd:9c:2c:bf:02:56:2f:e4:88:6b:b2:92:33:47:08:
f8:5f:63:c9:0a:50:b5:a7:e2:ee:c8:8e:2b:44:6c:31:58:e7:
d1:37:55:0d:75:b2:26:62:41:7e:f2:bc:ba:35:c8:f5:79:9f:
69:1b:db:3c:74:7b:14:fa:11:9d:5e:60:7d:d1:1e:d6:e6:1d:
e8:ce:19:24:8e:6a:08:6d:e8:86:06:35:79:52:c9:d6:2d:01:
87:8a:6c:dd:e3:f6:fb:fe:0e:52:0c:f8:64:2e:6b:74:73:ef:
dc:24:45:88:a8:e0:7a:af:a7:82:61:22:56:be:6a:90:f5:46:
4f:8a:77:95:8c:8b:3a:4d:f2:aa:93:d3:55:fc:2c:10:35:5d:
91:62:9e:08:77:76:c3:de:76:dd:08:f8:1b:bf:57:3b:f7:be:
5b:ea:46:b6:85:9d:de:54:6b:05:b5:2a:e8:e1:ec:bb:b4:31:
08:1b:28:06:a4:0a:0e:b1:e8:7a:72:df:b9:1e:36:f8:f1:30:
94:c3:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:21 2026 by rpki-client