Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: DXqnDZN6V0zTmSfSsa3DihrXSVnsUuCcgCMRy1mWu4k=
Subject key identifier: 0F:1D:36:CF:7A:A0:7F:BA:A0:54:19:46:09:69:CE:96:3D:B1:39:7C
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 019E2B4C4A44053E0215535448117F281DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0DF5
Signing time: Fri 15 May 2026 11:01:20 +0000
Manifest this update: Fri 15 May 2026 11:01:20 +0000
Manifest next update: Sat 16 May 2026 11:01:20 +0000
Files and hashes: 1: 1lPDb-Qc7dgd58_k0ugXvgO36w8.roa (hash: up0wKM+by5cZA7R34zmGPf+ho8Ei16Ys0MiWkd/R1jk=)
2: NbUyaKZBv1RnKePQIxmyxsT9zGw.roa (hash: YfuIIb8IL5a5Ql6qciTZgKEuG43i9WjmWByHoP25V3M=)
3: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: h22Rl+A464ZHIDCDvV4blhwojcxwherwdUDUZOZirmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:4c:4a:44:05:3e:02:15:53:54:48:11:7f:28:1d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: May 15 11:01:20 2026 GMT
Not After : May 16 11:01:20 2026 GMT
Subject: CN=0f1d36cf7aa07fbaa05419460969ce963db1397c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:68:ca:f2:87:df:e5:f5:a4:4c:6d:98:35:
20:1f:3f:8a:e0:9c:4b:34:44:0b:0e:52:ec:cc:ee:
9a:6a:8e:56:61:d5:e6:49:ae:9e:21:2a:60:c1:ba:
cb:47:0b:61:53:c1:5a:74:ac:d5:09:5a:74:bb:27:
6c:cc:c8:71:a9:6e:36:30:46:0e:1c:e5:f8:67:94:
9c:f6:32:a5:1f:e8:3a:99:85:3a:a7:c5:8b:ab:eb:
d6:55:c9:ea:c9:e3:0f:f2:e9:9d:37:67:9b:f0:99:
70:34:79:d4:6c:da:18:38:74:1d:28:89:71:1e:af:
66:3b:0a:ad:18:6d:f1:24:85:1a:22:d7:52:af:57:
b9:f3:74:3f:39:d7:d6:d0:51:78:21:d2:90:2e:60:
4f:99:ed:e2:30:83:1c:db:e6:b5:7a:7d:e1:4e:a4:
90:99:96:04:41:63:55:11:80:7e:b6:68:2f:35:37:
f6:77:87:5e:07:a9:bc:be:20:a9:89:4e:b1:9a:10:
49:6f:7b:a7:28:b5:50:fc:ad:a6:ce:39:cf:c0:3f:
27:8b:19:1c:03:85:05:6b:e2:ec:0d:92:c2:67:33:
5b:6a:aa:5c:42:02:c0:a4:83:51:fc:18:1a:58:a9:
4c:a4:40:1c:03:fe:80:23:3e:a0:81:29:f6:7f:b4:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1D:36:CF:7A:A0:7F:BA:A0:54:19:46:09:69:CE:96:3D:B1:39:7C
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9d:54:f6:c8:82:f6:4f:24:97:62:46:5d:4b:86:cd:c0:ab:
d3:f2:de:1c:fe:a6:33:f2:66:83:da:d1:20:a7:52:57:21:46:
fe:65:be:2d:44:aa:db:77:82:90:80:f7:42:25:45:76:3d:bc:
96:24:f2:cf:b1:0b:a1:6b:50:c0:2f:0f:8b:f7:16:f4:a7:84:
83:cd:c7:7f:91:49:7b:46:ab:43:30:b6:f7:9c:c1:c3:a1:97:
54:70:a5:29:52:4a:b2:1d:45:b5:bd:9d:94:1c:71:18:9f:77:
df:80:e6:f0:fd:5a:ef:2c:cc:06:a1:dd:64:18:72:ca:e0:ec:
d0:08:4d:a1:81:d7:b4:0c:86:26:c9:03:12:87:87:9f:7c:43:
b0:78:67:f7:69:90:69:c1:d3:d7:25:bd:26:3f:48:08:19:e6:
da:3c:9e:f7:3d:04:ff:8f:ab:6d:9c:73:51:0f:0a:be:4d:fd:
f0:6a:40:76:03:bc:5f:c0:9f:13:2b:68:d8:e6:8c:e3:44:ad:
6e:e2:cb:a9:b4:0b:fb:80:46:5a:41:69:d2:10:7c:0c:38:02:
fa:74:bd:ca:1e:0d:23:13:02:0e:90:05:bf:53:57:aa:d6:37:
01:76:b2:24:cf:a5:27:cd:f6:da:b3:f4:b6:f2:20:09:af:d8:
14:6b:6e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:07:21 2026 by rpki-client