Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: kU4WBpFX9rziGvFci2zqEA+cGPdAYmRV94QThlZXV/4=
Subject key identifier: 3F:36:1C:46:D0:B2:83:72:71:13:0F:B2:5C:C5:0A:BB:F1:B9:6B:B6
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 019EE857051E3E5CFE4ABD4C05E38D65DA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 1055
Signing time: Sun 21 Jun 2026 04:01:17 +0000
Manifest this update: Sun 21 Jun 2026 04:01:17 +0000
Manifest next update: Mon 22 Jun 2026 04:01:17 +0000
Files and hashes: 1: HXXJ5U9DGvbbZuWvDguPFDAOEkc.roa (hash: mEsE8YsZsxlgLGJIZIrrf3uSCgdInsp4ueGy7PdnCmU=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: MUJ53g2s3a37HQHiPr1DndLvmWoZxjxp96siG4rkR8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:57:05:1e:3e:5c:fe:4a:bd:4c:05:e3:8d:65:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Jun 21 04:01:17 2026 GMT
Not After : Jun 22 04:01:17 2026 GMT
Subject: CN=3f361c46d0b2837271130fb25cc50abbf1b96bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:71:89:d6:08:bc:2b:fd:04:96:d8:9e:1a:
1f:be:ce:7c:cf:a1:f7:64:53:7f:04:81:3e:18:6d:
4f:1c:fe:56:0b:cb:e8:e5:f0:d0:91:d6:5c:73:19:
f0:b1:65:b2:a4:c4:9a:60:8c:e6:79:43:83:c3:39:
d8:df:e0:00:ce:59:92:9b:b8:1d:09:91:8d:69:35:
ca:4c:6c:e6:ea:f9:4a:d8:32:0a:51:43:c6:8b:75:
c5:70:48:42:5d:40:d1:9b:09:6d:e9:d6:88:8e:8a:
5e:c3:73:c3:39:a4:12:b1:d7:2e:f0:76:cd:41:9e:
db:97:30:b2:ac:cc:e8:fa:1d:df:21:f2:30:18:63:
d2:bd:60:f9:df:5e:dd:dd:f5:2e:c1:2f:36:ad:40:
62:5b:18:81:8c:9d:44:57:7f:79:c5:db:2b:c9:05:
96:7e:4c:03:fa:9f:9c:bb:89:77:14:4a:2c:38:a0:
d6:34:f0:00:5b:82:8a:ef:7a:37:29:d4:3d:37:d6:
c0:d8:08:f5:92:52:e4:e5:15:2c:fd:98:78:00:93:
0a:fd:3b:5f:37:2f:00:f9:89:e6:10:bc:82:44:93:
24:5f:b0:20:05:50:29:39:a0:6c:aa:ed:13:06:08:
1c:0f:f9:c5:c1:79:5b:8f:f7:97:54:be:c6:5a:a7:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:36:1C:46:D0:B2:83:72:71:13:0F:B2:5C:C5:0A:BB:F1:B9:6B:B6
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:10:3b:c0:d0:80:d1:22:32:42:d2:53:33:5b:f6:3c:8d:d4:
31:0c:8b:e3:5b:d5:18:d4:fa:bc:d6:f6:5e:a2:d1:02:8a:6d:
d0:47:ab:71:07:81:85:d8:69:47:57:b9:7d:bd:4f:af:d4:89:
09:e9:b6:4c:df:75:1f:1c:1c:7b:4d:a4:fc:e5:ea:b4:ef:b9:
1f:ab:28:41:a0:04:da:94:53:57:17:c9:50:a4:38:e6:dc:27:
36:0d:a1:71:a1:f5:f5:dd:fc:1e:92:df:42:da:06:3e:dc:a6:
3f:76:00:26:45:ab:26:99:6d:a1:d0:10:80:df:fc:76:07:37:
96:47:4e:30:e4:1a:c4:da:a5:f1:9f:33:72:f8:08:7b:7c:2a:
f5:bd:5a:b2:13:59:38:cd:b4:54:c4:b5:36:7c:e1:ab:72:75:
a8:70:18:14:de:ce:ff:57:be:d7:7e:1a:e7:c6:5b:99:68:48:
19:3d:53:2c:3a:ef:f2:17:e0:30:d8:e7:a6:64:ad:09:75:99:
50:00:63:f2:7d:2c:39:78:82:18:20:aa:55:1f:d1:66:60:03:
fa:3d:c3:7f:c8:9e:7f:2c:c0:d9:4c:75:9f:71:64:32:28:27:
d5:d6:d8:97:4c:41:63:4a:a1:27:98:3a:f4:12:c1:ef:77:af:
ae:23:72:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:24:46 2026 by rpki-client