Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
File: y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft (raw, json)
Hash identifier: kgPqyc5q9bAsM/D9J7bMQ0xc8T1NoKRA1CskVwqGPOw=
Subject key identifier: DD:30:CF:DA:2C:6C:6D:83:8B:1F:A0:E9:95:0F:BE:6E:30:80:17:58
Authority key identifier: CB:9A:1C:B8:0F:B6:37:32:E5:30:04:7A:1E:C5:52:9F:8C:8B:1A:06
Certificate issuer: /CN=cb9a1cb80fb63732e530047a1ec5529f8c8b1a06
Certificate serial: 019D38D2E1F2268F254BFB470325481BE824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
Manifest number: 05A7
Signing time: Sun 29 Mar 2026 09:00:37 +0000
Manifest this update: Sun 29 Mar 2026 09:00:37 +0000
Manifest next update: Mon 30 Mar 2026 09:00:37 +0000
Files and hashes: 1: y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl (hash: lc2pKT1WnrlnDuXcEWJ6A2pVo5hsc5mrQVvNxCVeynU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e1:f2:26:8f:25:4b:fb:47:03:25:48:1b:e8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9a1cb80fb63732e530047a1ec5529f8c8b1a06
Validity
Not Before: Mar 29 09:00:37 2026 GMT
Not After : Mar 30 09:00:37 2026 GMT
Subject: CN=dd30cfda2c6c6d838b1fa0e9950fbe6e30801758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:7b:f9:58:c6:fc:de:c7:26:97:3d:9f:2c:
e1:57:2c:56:2c:3c:ca:8e:64:9d:e4:45:40:ac:04:
98:c7:b9:b7:9c:bc:e0:16:a2:9d:5a:85:fe:86:06:
f7:89:50:b4:11:58:66:99:a4:f4:26:9d:f0:5c:3f:
40:2f:45:6f:03:2b:88:c2:e6:0a:76:3b:bf:fc:99:
39:d2:c9:d1:e0:db:83:a4:62:a9:3e:8e:0a:ff:13:
f7:5a:e2:bc:02:81:75:61:c0:a9:d7:d2:67:af:73:
0c:ba:44:15:be:a1:b1:45:7f:4f:4d:0e:5b:29:97:
6d:a1:d3:c1:2a:1c:8e:97:63:59:7b:37:83:e2:98:
cb:68:4e:fb:91:9f:1d:9c:e6:19:0f:17:35:33:aa:
a8:b2:13:7e:71:79:9b:46:d0:e0:49:72:1c:1d:c1:
07:49:4a:b4:50:c7:e3:0b:4c:38:03:f7:f3:28:ae:
bd:7d:1e:bc:f3:7d:0a:0f:3d:20:5b:6b:22:1c:33:
1b:21:59:e2:fe:a5:88:26:7f:30:71:c1:56:6f:ef:
ab:13:27:6b:b2:96:b5:7b:2c:bc:3a:0f:8e:07:ff:
31:0c:e2:a1:f8:6f:d3:3f:af:32:fa:43:e0:2c:e4:
41:c5:d9:89:44:df:25:d4:c2:51:b4:56:f0:06:d9:
d7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:30:CF:DA:2C:6C:6D:83:8B:1F:A0:E9:95:0F:BE:6E:30:80:17:58
X509v3 Authority Key Identifier:
keyid:CB:9A:1C:B8:0F:B6:37:32:E5:30:04:7A:1E:C5:52:9F:8C:8B:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4e:29:6e:b5:c4:fc:cd:4b:e9:79:84:4f:f3:21:db:18:3d:
cd:63:37:8f:fe:6d:f4:e4:d8:0e:c7:d5:5f:f2:f6:87:75:78:
32:a1:4e:ad:1f:f4:10:0f:fb:00:f9:14:6d:6a:59:96:a7:1b:
e9:11:dd:14:10:0a:6b:0d:c7:78:98:76:83:b7:04:49:ff:fd:
50:d9:99:8f:a6:83:45:e4:af:81:4b:31:42:bc:15:eb:b1:b4:
84:72:77:4e:23:89:10:d4:2c:a9:cd:b8:60:fa:ba:15:b7:78:
5a:bb:b5:55:98:06:b9:14:d0:64:28:dd:23:13:4b:cb:1f:5b:
b6:56:fb:b5:71:b8:7a:8b:02:db:e8:1a:15:9a:c5:c3:4a:b2:
8e:8b:75:7a:55:1d:72:39:3b:76:59:82:fc:cb:7d:64:81:8d:
21:99:06:a2:b8:b2:5d:b6:47:2c:e4:7e:38:aa:35:58:a9:4f:
f1:d9:7f:04:eb:a6:67:80:a6:b5:7a:02:d5:47:8c:c6:fc:84:
fa:8a:56:aa:a7:95:7c:17:f4:74:68:42:c1:69:6d:63:ee:5c:
e5:11:b6:a5:d3:45:5d:25:0c:26:65:15:e5:31:ff:e4:dd:6c:
64:e1:b2:82:fa:37:94:3d:10:e6:2b:b8:75:b7:8c:ae:de:fa:
fe:b9:d5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:51 2026 by rpki-client