Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: ZSQEHCuONqmwPcVLouQ/sZF01xSGC7MeWASaV8QmWtA=
Subject key identifier: 9F:15:AF:A4:43:C7:88:21:8E:DA:BB:05:78:83:78:FB:4D:3F:5F:4E
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 019DDC551C7E22F5AF6115F82F45E8775594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 087A
Signing time: Thu 30 Apr 2026 03:00:58 +0000
Manifest this update: Thu 30 Apr 2026 03:00:58 +0000
Manifest next update: Fri 01 May 2026 03:00:58 +0000
Files and hashes: 1: VpnFqg4nLkv4hVZvAnrC7KmiNAU.roa (hash: 5iLmKrDX02BNsU1dvSS1ObOgIc5TS34EiCu+Rj74FUw=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: /UKEnzMuRv83Z/80XhuAIt0iWP94vuvKHwbacEQTN1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:55:1c:7e:22:f5:af:61:15:f8:2f:45:e8:77:55:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Apr 30 03:00:58 2026 GMT
Not After : May 1 03:00:58 2026 GMT
Subject: CN=9f15afa443c788218edabb05788378fb4d3f5f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:76:5a:e5:78:cc:3c:96:ab:bb:82:4b:54:
c0:b4:96:76:91:97:f0:0a:7e:d1:94:55:33:2f:14:
d7:46:ae:95:e8:6d:da:4f:3d:cf:f4:18:65:ad:70:
55:d4:a6:d1:55:79:51:ea:e6:3d:89:ee:73:f8:cf:
b2:f4:e2:91:0b:48:8e:85:0d:a5:32:6a:33:00:1f:
75:74:a6:9e:6b:cb:55:69:b0:8a:57:14:c9:2a:91:
0b:fa:8d:b6:d0:50:0e:55:8a:ff:a1:aa:8d:11:9a:
f7:9b:f6:34:a8:91:90:91:39:f4:d2:78:4f:9f:f3:
fb:5c:d2:3b:3b:d9:bc:e6:13:72:e7:f2:ac:24:c7:
f4:39:f2:f3:52:33:50:64:8f:43:e0:5b:b8:56:dd:
51:f2:c9:12:77:37:7e:a5:55:90:60:af:b5:72:f5:
81:24:4a:95:0f:fe:66:13:1b:d7:ed:e7:53:20:d9:
2b:a1:d1:ae:27:de:09:f6:ad:fa:c8:00:a7:a7:3d:
65:25:3b:ce:e6:11:a2:0c:94:2f:0d:f8:a2:7b:66:
11:a5:d0:6e:27:5b:56:e7:ba:32:ce:c0:82:17:9c:
36:18:9e:0e:64:f7:5a:ab:7d:79:22:48:9a:42:db:
c5:4c:89:45:f0:f8:1d:de:8d:f5:6a:31:ef:45:b3:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:15:AF:A4:43:C7:88:21:8E:DA:BB:05:78:83:78:FB:4D:3F:5F:4E
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:03:57:cc:eb:29:96:ed:63:52:b8:66:35:ce:d9:66:f5:1c:
85:29:af:aa:ba:6a:34:e4:56:c5:ab:96:10:8b:db:9b:4e:32:
1d:eb:3f:54:82:a1:ba:2e:ae:51:76:c9:e3:d1:5c:de:2e:77:
98:b6:c2:b2:4a:2f:ea:5f:f6:96:15:a1:84:fd:91:34:2e:e7:
34:67:ac:97:b4:ca:b5:07:ee:35:b2:dc:b9:e5:aa:41:44:04:
99:31:7c:e5:48:a9:93:04:16:c2:6b:6b:c4:bb:59:7d:d4:74:
28:8b:71:3c:31:0b:c4:71:2d:c4:d0:96:93:3e:32:bd:f7:84:
da:be:e0:b3:5c:d0:da:22:6c:bb:f9:ce:3b:9e:d9:5b:0c:72:
ee:f2:af:56:67:14:48:40:d9:64:ad:68:9c:cf:fc:88:ff:74:
5b:a5:c3:b7:96:ee:34:68:26:9b:fd:60:01:c4:de:6d:db:a7:
c4:fc:b0:90:70:48:56:ab:9c:31:9d:4e:6f:63:e0:db:71:c1:
60:3e:64:be:de:47:ed:d0:f4:03:84:b0:60:e9:e9:82:9b:d5:
2b:e0:6d:43:7b:5c:3d:69:5c:dd:0c:36:28:7e:59:27:7b:36:
ab:5a:53:46:31:e4:fd:ae:3c:69:e3:b5:f0:b9:48:14:97:fd:
4c:2e:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:39 2026 by rpki-client