Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: 62iecrkF52dOMH1moq7g5AMBOH35heRjtbnxw5Ed6RY=
Subject key identifier: 3C:D9:22:7A:A2:65:88:A4:AB:CE:DF:2B:92:82:E8:A1:D7:AF:CC:3D
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 019E2B160C173158F9694601C9E8787080B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 15C4
Signing time: Fri 15 May 2026 10:02:05 +0000
Manifest this update: Fri 15 May 2026 10:02:05 +0000
Manifest next update: Sat 16 May 2026 10:02:05 +0000
Files and hashes: 1: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: hz0QEsf7QrmdKeoTp99XxcnjNClb+t2f9yFw/fuF1cQ=)
2: r07b59Kbc0tU4fUroKjDGDeksk4.roa (hash: VbjM5vBRkz4uK7ac3fSu6tjCMa1PBV229HM3K4xTekY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 10:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:16:0c:17:31:58:f9:69:46:01:c9:e8:78:70:80:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: May 15 10:02:05 2026 GMT
Not After : May 16 10:02:05 2026 GMT
Subject: CN=3cd9227aa26588a4abcedf2b9282e8a1d7afcc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:0d:14:b8:68:9c:b7:c8:29:d5:f7:3c:ac:
2f:f2:6b:83:7b:40:04:7c:35:a6:a0:c9:50:50:19:
e7:d4:09:06:2b:73:d2:e7:3d:48:a7:21:c4:07:70:
75:46:2e:2f:ed:63:5e:46:3d:7e:5e:59:4c:52:26:
7c:aa:fa:56:e0:19:e1:69:c1:62:aa:24:c7:a2:36:
bb:5b:9c:b3:41:7d:22:eb:7b:0f:bf:42:fc:16:98:
db:9b:e8:a1:2d:70:b1:e0:0b:d6:40:53:ee:fd:b9:
bd:f3:ee:e4:65:b8:c4:79:8b:36:a2:6f:8f:ad:66:
ce:14:30:4b:52:37:cb:91:c1:77:f3:3d:b9:a7:5a:
09:a1:16:48:f2:9f:b2:9a:de:c2:a5:90:fc:db:7b:
b0:23:84:28:d8:5f:dc:93:fb:e7:4b:ef:fb:e1:8a:
fe:d6:93:a4:a5:d1:3c:c6:c2:4c:5b:a3:b6:fc:84:
f5:c8:cc:20:17:48:85:b3:f3:de:76:34:b8:6f:3b:
b0:42:eb:d6:fe:6e:e1:c9:ff:c5:bc:ef:e3:93:8d:
55:5a:b9:72:3a:da:eb:69:54:ee:f4:60:03:36:e4:
99:a9:a9:d3:c9:ce:db:e2:d3:75:2a:20:78:43:d2:
04:9f:de:c8:0f:02:b3:fb:0b:1b:b6:81:dc:2e:a0:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D9:22:7A:A2:65:88:A4:AB:CE:DF:2B:92:82:E8:A1:D7:AF:CC:3D
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3d:74:aa:46:b3:e6:af:36:7d:6b:d8:a9:b5:9c:b7:6a:5d:
e1:11:d1:bd:99:06:7f:d8:8a:62:73:a6:0f:2f:d7:1d:7e:4b:
27:60:9e:6a:8a:0b:3e:c3:24:70:b0:e9:5a:92:12:3a:aa:4f:
a2:d3:31:82:f3:e8:8b:aa:5c:3c:0c:2e:3f:ac:11:0b:6c:b0:
68:7d:91:97:3f:3c:3e:2d:8d:b3:1e:7e:d1:25:b0:3d:c8:44:
59:44:d8:80:4f:7c:e0:8d:99:f1:b4:47:c0:05:3e:05:66:cd:
c5:4a:f4:b2:1a:2f:18:19:7d:2d:81:c3:76:af:35:63:e1:02:
9d:d4:bd:5c:e0:68:66:04:00:62:db:c7:58:ec:ab:fe:e5:84:
77:53:c3:d6:de:19:d4:d3:9e:fd:5b:b0:bc:d8:db:c3:8b:f0:
51:24:12:bc:f0:79:61:92:33:2b:95:c1:ef:78:f6:da:17:bc:
45:ea:9d:c3:9d:be:a8:db:3b:d3:a3:a7:8f:ea:38:9a:71:9b:
19:97:77:d6:28:82:13:df:e5:46:0e:cf:fa:a1:75:2c:5d:0d:
a9:52:fc:55:4b:10:42:19:e4:3b:51:d1:9d:ec:8e:27:cc:b6:
9d:a5:bc:8f:e3:f1:5a:ea:fc:1a:66:ae:fb:41:1d:88:29:74:
95:b8:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 14:06:21 2026 by rpki-client