Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: hneZcN2FpgCwPgQXzYWazius2S+mXNQhSazTslkmuPE=
Subject key identifier: 05:4C:41:F5:B1:00:23:72:5C:CD:68:2B:4C:DA:51:36:6F:05:01:9C
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 019E8D5B90357E8D2F6373E40F83C450A7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 193D
Signing time: Wed 03 Jun 2026 12:00:48 +0000
Manifest this update: Wed 03 Jun 2026 12:00:48 +0000
Manifest next update: Thu 04 Jun 2026 12:00:48 +0000
Files and hashes: 1: QPQtrPAdzjVTLUIL1R2LDnfS2LA.roa (hash: Y2kjypGDHo8r5S3vGzyX8p4vjhzMXiKa35ThvxEKdFQ=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: 1E0/jodNfeKXmP1T5ZSAKWtce4QWGF3hIryPAIbwMO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:5b:90:35:7e:8d:2f:63:73:e4:0f:83:c4:50:a7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Jun 3 12:00:48 2026 GMT
Not After : Jun 4 12:00:48 2026 GMT
Subject: CN=054c41f5b10023725ccd682b4cda51366f05019c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:25:c3:9c:0c:fb:56:59:3a:92:88:05:5b:
6b:ed:ef:b5:65:34:a3:56:39:21:62:c7:46:a6:8f:
a3:76:bf:b7:37:d0:7d:a0:4a:cb:22:5a:6f:71:48:
30:0d:5a:64:24:b8:8e:45:ef:01:51:a0:71:29:44:
41:c8:00:34:8a:9e:8d:bf:88:7d:79:98:cd:b8:5b:
14:b8:ba:3a:ae:25:f2:8b:be:a7:9a:24:f1:31:36:
45:83:25:f5:fa:df:2a:cf:92:17:03:cc:3f:7f:20:
0f:cd:e2:00:38:84:3a:29:99:69:e7:08:65:f9:91:
b3:8d:1b:74:f2:5d:ee:a3:82:0f:1d:61:ef:55:1f:
51:fd:a6:25:60:be:f7:7e:af:45:2e:1c:23:ba:6b:
fe:29:8b:84:01:c3:96:a7:02:b8:ac:c7:dc:4c:22:
1f:dd:80:df:fc:a5:69:90:d1:ba:7a:04:82:df:ee:
65:6a:91:2f:79:dd:80:5f:2e:3f:c4:4d:36:76:ce:
88:f2:a2:7d:fb:8c:56:ab:04:39:fe:1c:4f:5e:89:
c3:61:ef:1c:5c:8a:9e:bf:9e:c8:05:26:60:f7:e6:
60:1e:17:32:3c:e9:6b:71:77:80:a8:70:8d:fb:53:
c4:d0:43:ca:5d:9a:b0:73:fa:7a:f8:8a:ee:a5:23:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4C:41:F5:B1:00:23:72:5C:CD:68:2B:4C:DA:51:36:6F:05:01:9C
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3c:fb:2e:d9:0e:80:72:dd:d1:5d:d6:77:2a:77:45:b9:e4:
c0:9b:9b:8b:35:f2:40:4b:ff:f2:f0:56:83:fa:39:67:7b:f1:
98:cd:ab:0a:6f:ca:c2:13:de:15:c4:f6:dc:1b:e3:51:8f:af:
de:8c:d7:b3:9d:a0:a4:50:f8:61:4e:95:32:83:18:4c:cb:1d:
13:8f:ab:14:55:21:7d:35:41:24:a5:c5:5d:6e:59:2a:3f:51:
b8:15:40:52:16:49:29:43:9a:24:43:7c:e7:0f:12:c2:27:69:
a0:82:21:04:0e:09:3a:7f:f1:fd:eb:89:7c:5a:5a:a0:b6:ee:
66:9a:d9:b6:56:3a:1c:43:3c:d1:36:35:19:ce:16:1b:0f:17:
b9:df:7f:4f:8b:16:12:bb:88:85:35:32:7f:37:78:fc:c1:eb:
16:07:dc:fe:00:e2:a0:18:f2:35:6d:45:55:cd:fc:1e:0b:16:
31:ec:98:57:62:5d:e3:e4:2a:4f:c6:03:0e:b8:88:cc:38:13:
9b:a3:ef:5e:92:2c:d2:28:8d:aa:cf:64:42:70:c4:2d:25:e7:
33:72:fb:7a:8f:e9:1d:92:4c:be:bb:08:13:26:67:7b:97:dd:
e6:55:2a:80:d3:1a:61:4f:eb:3b:d3:4c:4c:0c:7b:f3:28:d3:
ef:fd:05:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:08:45 2026 by rpki-client