Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File: Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier: nCkI5pMQyyLWMXpAZBsip9fAFSPE7yWRBRu4TwAk4v0=
Subject key identifier: C3:3E:96:AF:70:CB:AE:44:20:B2:9F:E1:7D:5A:32:CB:E0:A5:9B:D5
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 019DEDEDA70A8F5F30E2E5ADE7A9224F9F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number: 0F80
Signing time: Sun 03 May 2026 13:01:08 +0000
Manifest this update: Sun 03 May 2026 13:01:08 +0000
Manifest next update: Mon 04 May 2026 13:01:08 +0000
Files and hashes: 1: 9qaqud_c4V53thjjkEblp5yEtNw.roa (hash: 2A6FNxJL63HaW3rs8IFtns/rrq4grW3RAI1BGSdMLWM=)
2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: 0DHAGlyvB0zeDiHm+d1FZZeNatkWEljszsMT9rOLZEc=)
3: h_hzjLW67wHlOyeEeE48OzILdyk.roa (hash: OBEq0IJXfkXFzJ3vqHNWHMcPsC7MjRnngy52bDrCEpY=)
4: tC2pXEfIIS_ssbaAFt1HYp326ls.roa (hash: Pi077bZmvt3rsE2utKBEwLCAlswX9cB3ZU6WM08tylE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:ed:a7:0a:8f:5f:30:e2:e5:ad:e7:a9:22:4f:9f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: May 3 13:01:08 2026 GMT
Not After : May 4 13:01:08 2026 GMT
Subject: CN=c33e96af70cbae4420b29fe17d5a32cbe0a59bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:e5:f9:47:8e:e3:19:52:22:10:cc:65:49:
74:62:f3:bc:c5:84:4c:b2:28:1d:68:8b:e4:21:db:
4a:3f:f5:06:f1:27:76:a1:f1:f2:e1:e0:7b:83:58:
a4:bf:5b:eb:e1:90:b1:e5:30:74:2a:87:c7:bf:f6:
32:c9:12:a6:64:d7:a5:20:a2:d3:a7:04:3a:d4:49:
75:6d:67:dd:18:ad:22:fa:21:c1:ab:25:ec:f9:ee:
a9:f5:cb:73:c8:c9:cf:5f:af:c2:49:50:92:a3:ce:
66:be:97:e9:f1:a1:fd:b0:f0:a3:97:eb:ea:52:95:
88:6e:57:d3:c9:5e:78:9b:91:e2:bd:58:db:a9:44:
c5:9b:be:9f:e4:0e:04:a3:5a:7b:ed:f7:32:66:78:
a0:0b:84:02:64:f1:8b:d2:95:ac:55:11:ba:ef:55:
3e:bc:98:f2:c3:7f:eb:0a:b8:b1:e0:ba:39:e1:b0:
b8:b2:22:b1:e2:82:90:2d:ef:84:b9:13:08:16:1e:
d1:9d:60:11:ed:b4:9f:af:b2:ca:53:d3:b9:ff:fb:
a3:4e:9d:5e:9b:da:f3:9d:6c:57:91:0f:4b:0c:5e:
09:54:d9:17:8a:14:f1:8e:90:ea:12:06:d4:ff:f7:
23:e7:f5:fd:b7:81:ef:65:07:2f:58:f6:63:28:16:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3E:96:AF:70:CB:AE:44:20:B2:9F:E1:7D:5A:32:CB:E0:A5:9B:D5
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:94:4c:16:35:16:a8:14:eb:a8:6a:ea:85:ba:15:00:1b:72:
fb:bf:67:f6:66:2a:5e:d8:bb:a5:fa:1e:8f:86:c5:64:8f:97:
81:54:64:de:c0:8d:e9:a4:50:27:d6:3a:b5:76:74:29:fc:60:
a5:c9:1d:e9:87:e5:65:4f:24:07:3e:fb:11:0e:40:70:e5:dd:
d1:20:de:0a:55:65:8d:27:66:18:64:8e:8c:56:01:d5:2d:fc:
0f:3c:be:91:14:35:38:45:f1:5d:61:ff:27:ac:2f:d8:7d:f6:
8a:d4:30:1f:27:ba:35:10:72:69:e0:37:c7:22:0f:4f:5d:56:
27:26:71:eb:0b:b8:fc:0b:ca:c2:77:2f:a4:23:4c:ac:9f:11:
0b:b2:cf:45:2f:e0:d4:7a:62:a3:09:81:e9:50:af:fb:dc:6d:
a4:18:9e:1a:4a:1e:5e:5e:65:b8:ac:ca:32:f8:01:1e:dc:bb:
03:dd:35:1d:8a:6a:55:aa:1f:07:bb:5e:37:5d:12:be:79:c7:
d7:30:b8:8a:ca:c0:6b:78:89:87:7f:fa:25:61:c9:12:4a:e9:
b8:e3:71:16:0d:de:8c:84:84:10:73:c8:a4:20:35:9c:2a:27:
1b:5b:8e:9e:a9:27:9e:45:58:10:5f:40:09:3b:f4:56:06:7e:
71:41:02:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 21:26:42 2026 by rpki-client