Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: dmGjfIAMzf8eixHcf5j0LxB3MWONqgRG259r0xGoDRk=
Subject key identifier: D8:27:8C:A4:0B:38:26:89:4C:12:0A:DE:BA:38:58:31:D3:DB:42:86
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 019DCE638D4D85898A4D2B295A578A6F2448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0FC3
Signing time: Mon 27 Apr 2026 10:02:03 +0000
Manifest this update: Mon 27 Apr 2026 10:02:03 +0000
Manifest next update: Tue 28 Apr 2026 10:02:03 +0000
Files and hashes: 1: HXXJ5U9DGvbbZuWvDguPFDAOEkc.roa (hash: mEsE8YsZsxlgLGJIZIrrf3uSCgdInsp4ueGy7PdnCmU=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: MXpEMTn7ZXsqVwKj3tRs6FhxVHnqFbv+dHrAb2g+Jtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:8d:4d:85:89:8a:4d:2b:29:5a:57:8a:6f:24:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Apr 27 10:02:03 2026 GMT
Not After : Apr 28 10:02:03 2026 GMT
Subject: CN=d8278ca40b3826894c120adeba385831d3db4286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:27:7f:78:df:af:18:ab:ca:21:a6:36:bf:
45:4f:c9:4f:b1:aa:18:ab:b6:f1:d5:e9:93:a9:1c:
e0:f2:2f:5d:c2:d4:85:05:f2:66:ba:90:e1:8b:bf:
cd:00:df:7f:76:bb:39:0e:46:10:13:54:22:8a:36:
5e:c7:95:ce:48:77:58:b4:f3:5e:cc:d2:82:65:f2:
8c:0b:e6:d6:03:38:18:f4:37:b2:69:cc:7e:cc:8f:
da:03:21:86:1b:6c:d7:d0:1d:22:4e:9e:10:66:ea:
e8:c8:1b:f0:cc:c9:38:6d:0a:25:5a:d9:59:bd:85:
6b:0a:2d:51:4c:85:9c:52:ee:29:04:cf:2b:c1:ba:
46:20:7b:28:c1:4d:18:d1:ca:ea:09:08:3a:fd:80:
78:b0:55:1e:44:36:33:2c:94:e2:05:17:84:7c:b1:
20:0d:3a:af:42:ad:10:1e:7f:78:41:ed:5a:82:4f:
cb:e1:b0:f2:93:38:38:72:fa:7d:5a:d4:dc:53:40:
8f:6b:41:67:6e:90:10:5a:62:25:8d:db:7a:87:a5:
cd:5e:04:19:0e:49:48:bd:02:48:cc:b9:23:ef:6b:
fa:e7:0e:c6:e6:74:18:c0:25:80:60:5e:10:4e:bf:
c4:53:a2:d6:d1:dd:ef:e1:2f:c7:3b:d4:a4:44:9e:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:27:8C:A4:0B:38:26:89:4C:12:0A:DE:BA:38:58:31:D3:DB:42:86
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:34:cd:e3:9e:7e:95:6b:27:44:0c:eb:cd:9f:b2:c6:53:e2:
0e:ec:79:c4:ab:1f:38:dc:df:60:97:f8:60:44:23:34:66:a0:
06:0a:d5:60:3c:c5:58:0e:87:6b:d1:16:0f:1f:2b:9d:73:0c:
c2:01:9f:a7:4e:3b:fa:58:b6:b1:67:f9:90:ab:a4:d6:c1:51:
f9:55:6a:f7:15:e0:dd:ec:26:84:67:27:45:61:9c:82:c1:b8:
6e:06:9f:6d:22:7b:e5:33:e9:17:91:40:65:64:67:db:4f:ba:
a8:11:89:70:5b:a1:ed:61:88:2b:5d:45:5f:32:ca:1b:13:00:
6c:7d:2f:43:1e:56:f8:56:23:53:2c:00:12:7d:c5:81:2a:ed:
86:31:3e:72:43:ec:5f:82:fa:2a:c6:91:c9:73:c8:f5:7a:90:
5e:f8:21:3c:ba:bb:29:25:35:d7:0b:2f:29:d9:0b:e1:04:a9:
50:33:de:d6:dc:f6:2c:34:38:17:12:35:1c:ed:f6:ea:09:1e:
53:42:f2:c8:d4:b3:b6:6a:07:9c:05:a6:1d:54:8b:5a:1e:bb:
14:37:90:fa:4f:73:13:7f:e2:43:60:0c:e0:c2:fb:9d:6d:19:
b2:76:30:0a:2e:ef:40:3f:65:d0:56:c6:d9:85:d3:e4:1b:df:
a4:b3:43:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:49 2026 by rpki-client