Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
File: YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft (raw, json)
Hash identifier: k9rSPiPH6bhI519M4wUpfk5zVBSmtFeY+1LxnVxUspc=
Subject key identifier: 4F:B8:B9:D8:7F:01:08:55:C9:53:A1:EE:5C:2E:C0:5C:10:4E:EC:77
Authority key identifier: 61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
Certificate issuer: /CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Certificate serial: 019E2994B6BE0101BBD2B987F40F0E031CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
Manifest number: 025F
Signing time: Fri 15 May 2026 03:01:12 +0000
Manifest this update: Fri 15 May 2026 03:01:12 +0000
Manifest next update: Sat 16 May 2026 03:01:12 +0000
Files and hashes: 1: 1-_NirjIbixf3IjujxY08hJ4sR0w.asa (hash: hVFgDzF+0WyJCjBVO7SZls0NW5esHMScirMPVBWG/Wk=)
2: SthetgpXxzE5DDJOcie_LsqpRQs.roa (hash: 1G5wA/BqRdbf365y+2p8DrgYId5s873fPHSYZ3snZ28=)
3: YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl (hash: 8yxE3GqewREpTpizXwAT/hlgwxR2qh7NlMmgjbOQ/sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:b6:be:01:01:bb:d2:b9:87:f4:0f:0e:03:1c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Validity
Not Before: May 15 03:01:12 2026 GMT
Not After : May 16 03:01:12 2026 GMT
Subject: CN=4fb8b9d87f010855c953a1ee5c2ec05c104eec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:26:75:cf:a5:e2:b3:ba:a3:a6:48:be:c7:
0b:4f:a0:03:4d:bc:ff:c6:89:4e:28:92:b5:07:8c:
7b:31:c4:92:ae:6a:f1:8d:93:ca:02:5c:3a:bc:cf:
37:0e:f8:09:20:5b:9c:31:89:3a:ec:77:6c:3a:15:
0c:59:13:37:09:60:3d:49:b5:a6:c1:a0:7b:1d:a6:
86:32:d4:bc:c5:2a:25:ff:e7:d8:20:b0:48:26:90:
93:54:07:89:60:3d:52:36:d9:23:f7:14:3e:a1:18:
dd:b0:48:fa:24:78:35:d7:bd:7b:68:4d:ec:2b:09:
c6:09:db:72:70:8d:45:7a:1d:1e:5f:0f:74:b7:e3:
16:ee:d7:40:64:c9:6e:5b:a4:03:c5:58:30:50:35:
ac:c8:18:0a:3b:6c:2c:08:7f:22:f2:81:dc:c5:df:
52:e5:1d:27:4b:2f:24:f4:4b:9b:dc:41:39:13:17:
23:d7:06:61:af:01:34:a1:01:c1:ca:f0:17:2d:7c:
df:9c:21:80:b1:1e:ea:49:90:7c:2b:c7:7c:ff:09:
53:6a:fd:f1:61:14:5b:c3:e8:82:29:95:e7:40:b9:
61:a0:34:eb:e5:f2:6f:b1:36:39:58:c8:c8:f8:1e:
90:d2:c9:96:86:96:61:8b:34:d0:27:6e:21:7c:37:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B8:B9:D8:7F:01:08:55:C9:53:A1:EE:5C:2E:C0:5C:10:4E:EC:77
X509v3 Authority Key Identifier:
keyid:61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fb:1b:f2:a9:f9:90:a7:6e:26:07:95:98:e1:fc:2b:52:47:
84:c5:c6:80:d8:93:c6:18:66:6c:6d:b8:34:c0:e1:13:3f:38:
03:c7:65:63:35:6c:c3:da:ec:f9:d0:11:f6:a9:3d:fa:11:ee:
c1:7e:3c:db:72:6d:7b:fd:14:be:a2:ce:8d:f5:17:20:0d:95:
4d:16:8e:34:17:9a:95:06:d1:45:72:e7:b6:ca:81:ed:b6:c0:
17:f5:d8:d6:92:61:5c:e5:04:94:c2:92:12:e2:8b:e1:ad:2d:
22:c1:23:19:0b:fc:c0:62:2d:20:8f:48:fe:8a:e3:74:63:4b:
26:5f:64:b1:38:73:43:e8:02:77:b7:49:e7:3d:50:34:1b:b5:
6d:77:66:b5:be:5a:78:39:3a:b7:64:63:d6:61:f7:e4:1d:46:
79:b7:72:50:c1:71:fb:21:22:17:e8:6a:a3:79:55:62:05:dd:
48:be:e4:52:a9:ca:59:35:f5:01:16:28:71:b9:de:bb:e0:70:
53:21:af:b1:dc:67:19:cc:0f:ed:29:d7:39:84:fa:dc:52:0f:
0e:0c:ce:81:d0:79:6c:56:b3:2b:2d:d2:8a:03:17:35:5b:08:
ba:ca:0e:6d:b8:a1:40:f6:d4:19:91:87:37:75:c0:74:77:19:
49:58:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:23:04 2026 by rpki-client