Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: 7BWL3xbV0ZW5NX/gsEDegyjhE1mJ0RzJLxxtj0Cz9iU=
Subject key identifier: 20:C5:6A:62:12:A2:C5:D7:0C:FC:8B:70:5F:FE:B6:7E:74:EA:10:35
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019DFA96259A114EB0D43808B2BE0F906A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0F78
Signing time: Wed 06 May 2026 00:00:37 +0000
Manifest this update: Wed 06 May 2026 00:00:37 +0000
Manifest next update: Thu 07 May 2026 00:00:37 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: E6c+LDBDsX3lcZgMfdLD624TGEFtLLgls2TTNZJ2oWg=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:96:25:9a:11:4e:b0:d4:38:08:b2:be:0f:90:6a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: May 6 00:00:37 2026 GMT
Not After : May 7 00:00:37 2026 GMT
Subject: CN=20c56a6212a2c5d70cfc8b705ffeb67e74ea1035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:c4:4e:18:32:68:ff:96:ae:21:85:da:9e:
4d:76:12:fd:4d:d5:2f:82:ac:69:ef:de:05:38:4b:
a0:20:8d:51:c1:24:a0:b8:e3:a8:bc:a7:47:c2:7a:
89:7a:97:71:0d:13:7f:dc:8e:9a:a8:35:25:2c:b0:
0c:3f:68:63:ff:c2:c9:ae:f5:1d:a2:29:c8:fa:57:
09:38:58:52:44:c2:98:48:a7:d2:55:7c:5a:0e:fb:
0e:5b:f9:e5:01:16:5f:96:56:da:a5:be:f0:45:85:
3c:72:ce:5b:f7:d1:51:f2:dc:c0:38:0a:53:93:8d:
6d:5f:78:4b:6c:bc:ff:88:56:32:06:0c:08:6c:db:
ba:28:61:cc:d0:42:c1:bb:56:d0:ac:27:77:ef:28:
d7:1f:95:fe:92:4f:2d:89:66:4c:ce:dc:e1:ac:19:
78:31:c4:eb:41:59:00:55:17:36:bf:23:cf:2a:0b:
8c:04:9b:49:5e:7d:58:9b:03:e5:5d:02:99:7e:86:
f7:56:20:7a:27:3b:73:a7:c9:6a:59:a4:cf:94:35:
0d:eb:6c:95:cf:41:18:f5:06:20:e6:46:0e:40:9d:
f5:04:a3:05:87:74:b1:f5:e2:ff:a1:90:da:5a:1a:
1e:bc:97:3f:d0:d5:19:a5:cb:2c:33:9e:7e:61:68:
c4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C5:6A:62:12:A2:C5:D7:0C:FC:8B:70:5F:FE:B6:7E:74:EA:10:35
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6d:b3:2a:45:0e:bc:f4:1f:36:9f:dd:5b:a5:22:48:e1:61:
6e:03:de:2f:d5:c5:4e:db:1a:94:c6:b3:b0:44:c4:fd:82:d1:
09:c3:9b:9e:2b:f3:cc:c8:2c:b5:ba:9a:70:5c:09:ce:70:30:
33:97:df:38:8d:c6:05:9a:15:b2:91:85:82:b6:93:2a:ef:66:
4b:ec:d0:ee:f8:b3:c2:fc:4e:66:68:77:4d:0b:9b:a9:39:3f:
4c:0d:52:f0:8a:4b:b6:28:eb:18:d0:13:39:1f:db:2c:19:d9:
aa:6a:1d:17:44:82:0d:a7:f2:96:2c:1b:0a:1c:51:16:80:bd:
41:3b:fd:a6:78:43:ba:18:59:0d:03:79:3c:3f:33:5a:0d:6b:
77:26:87:ed:a5:2a:3b:9c:87:f5:ca:e2:69:b8:94:71:20:ce:
93:be:1d:da:65:88:30:65:73:df:3c:93:70:c5:f9:d2:b4:c0:
f9:05:7a:7c:37:eb:56:6b:bd:7d:d5:22:81:41:eb:a4:2d:77:
e4:c3:41:b7:05:bb:4e:16:21:fb:27:71:d7:21:cd:d4:d2:a5:
34:fe:88:c1:c7:ba:bc:c9:43:4a:e3:4e:f8:dc:74:de:15:2c:
10:73:a9:21:d9:af:2a:dd:ac:79:a0:2b:a0:09:e3:53:23:99:
a2:8d:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 06:25:20 2026 by rpki-client