Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: YKwieSQfYmKlachmAkno1OvndXVa9++nXC4sGDljilo=
Subject key identifier: 18:93:E3:75:E7:7F:44:4D:AF:6C:D9:F9:53:16:C9:FB:C3:15:86:8B
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 019E6A2B0540D348A2C1BE7A495A2863B14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 0F67
Signing time: Wed 27 May 2026 16:01:04 +0000
Manifest this update: Wed 27 May 2026 16:01:04 +0000
Manifest next update: Thu 28 May 2026 16:01:04 +0000
Files and hashes: 1: H7NifDoSU6PPqAYGiGzy4_-XfNw.roa (hash: sk5Lex95/S0IAQQhow818tnsCZwdWLab0EALvw3QhYw=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: 3Pu+vC/FCUubcYa8UZwxuw335V207S7cOi46YyFJ9WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 14:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:2b:05:40:d3:48:a2:c1:be:7a:49:5a:28:63:b1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: May 27 16:01:04 2026 GMT
Not After : May 28 16:01:04 2026 GMT
Subject: CN=1893e375e77f444daf6cd9f95316c9fbc315868b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:d3:b8:39:6d:5e:bd:5b:07:62:77:3d:9e:
86:41:1d:f5:58:e3:c8:88:14:5a:6e:82:fd:e5:b1:
98:0f:1d:e1:45:63:1f:c1:81:30:b7:b4:a0:85:b5:
c8:a7:64:2d:73:84:2c:36:08:e5:75:99:14:08:70:
33:a4:9c:0b:72:b3:f2:fc:55:e9:3a:6a:bf:4f:4c:
6d:76:63:d4:26:d9:e0:3a:8c:83:1b:36:a6:d6:be:
57:03:f3:6c:4f:20:88:ad:fa:f1:04:81:5a:4a:16:
4d:2e:dc:9d:de:2c:fb:2e:38:86:d4:25:0c:b7:75:
4c:b0:9d:1c:0e:16:de:ca:06:2d:57:69:a2:42:6b:
f1:e8:38:03:a4:7a:ac:38:48:75:6d:46:c9:e2:77:
12:16:98:e7:32:44:d4:49:32:db:5c:2a:36:58:16:
70:f0:cc:82:65:94:fc:0a:a8:29:c4:ff:bd:8b:bc:
98:67:aa:92:04:f6:d3:05:b2:74:3b:ce:9f:99:7d:
35:36:71:a6:30:94:6b:e3:26:e5:dd:81:21:26:a2:
dc:a4:81:61:26:b2:02:f1:9a:b7:4f:37:d1:fe:a8:
07:ab:f6:99:45:7f:82:74:c6:f2:bc:40:a4:d0:21:
84:b2:43:18:e4:8e:97:00:d6:5a:b3:0f:e7:fd:89:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:93:E3:75:E7:7F:44:4D:AF:6C:D9:F9:53:16:C9:FB:C3:15:86:8B
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c9:45:13:68:ca:c6:c5:64:f9:fb:83:45:20:76:cf:db:d2:
a3:2c:5e:1d:06:2a:0b:43:2c:7a:41:d4:94:e0:bc:55:6c:c2:
cb:a6:10:88:9b:9d:55:93:b2:99:ab:d6:64:c1:8e:dd:f6:2d:
99:4e:6f:de:18:fd:be:7a:a9:54:7a:56:02:ee:19:24:03:30:
4a:35:d2:ce:b9:dd:f9:55:07:62:75:2b:c3:a2:19:ba:a4:d7:
c1:bc:08:4f:3c:2e:61:9d:52:12:a1:cd:d8:8b:b1:66:0a:15:
a5:62:c4:bf:af:49:2b:3b:c2:a3:74:ff:a2:29:5c:d8:9c:3b:
8e:81:8b:83:76:38:57:1c:f7:7c:42:58:fc:8e:d2:74:6b:66:
15:10:c3:46:fb:5d:38:5f:85:89:7a:4c:ec:80:22:76:8b:76:
ee:0e:3e:82:c5:38:26:72:9b:b9:9d:49:95:28:97:7a:f9:75:
e0:25:1e:ea:97:63:31:14:4d:20:38:65:22:92:72:0c:60:d6:
89:3f:63:9c:9e:8c:cf:97:e3:eb:ab:93:5f:9b:53:9b:b5:f1:
ee:32:ec:d7:f5:c2:7f:b2:b5:4e:45:b0:47:f0:f9:07:06:59:
d3:09:44:c0:90:49:e8:e1:50:15:82:54:38:88:18:4b:f9:d3:
07:53:5c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 18:46:55 2026 by rpki-client