Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: FL3jtH+pHzGnkvf9XDO2tCBX/Tp7LP6C6bNXW18TBpc=
Subject key identifier: 4B:69:99:69:5D:0F:BA:F6:B0:DE:55:ED:32:E3:D0:47:B3:DD:7A:94
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 019E2ADDFD346781DD350F6A4F3BF5DADFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 0B1E
Signing time: Fri 15 May 2026 09:00:51 +0000
Manifest this update: Fri 15 May 2026 09:00:51 +0000
Manifest next update: Sat 16 May 2026 09:00:51 +0000
Files and hashes: 1: 0vGrMxojgcPt9P0KUJob_C_cA4U.roa (hash: fVAae7Y5Zz2XdpZ74Up9h49RGw16VEUvuuQIWLhSejw=)
2: KbmQvdtw005bLkDFKvnTpXFlk4g.roa (hash: dXlkajMu1mbeHv48NSi0zEYpzy7e58YEKKA2joNBYBw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: ewnqz2wxhmdhjmnM+NFt+S+WM6sH06tOs4V34Y6OdVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:dd:fd:34:67:81:dd:35:0f:6a:4f:3b:f5:da:df:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: May 15 09:00:51 2026 GMT
Not After : May 16 09:00:51 2026 GMT
Subject: CN=4b6999695d0fbaf6b0de55ed32e3d047b3dd7a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:6b:ea:10:ed:9b:a4:09:ca:88:01:f2:d2:
a3:33:61:45:76:3a:69:98:02:e0:ef:db:4f:00:f0:
d4:11:e7:31:46:aa:5b:d0:f0:45:66:91:60:c1:ea:
1f:6b:2c:b6:6e:df:eb:21:fe:d8:d1:50:fb:63:b2:
2b:0d:e9:38:0e:b0:1c:69:c3:b0:62:55:ba:45:50:
5e:8c:7d:be:34:33:6d:03:d3:15:12:4c:88:97:ef:
7d:28:92:2e:f9:f8:9e:62:12:ab:ff:44:c5:f2:a2:
a9:78:0d:95:b4:4f:2c:4c:99:af:13:b2:f8:6c:56:
c7:63:d4:29:2e:33:e0:50:53:27:a6:01:c7:05:9f:
7b:14:dc:8d:f2:cc:e2:7d:d2:45:ef:ec:46:25:0d:
67:b2:ae:32:d9:2d:47:42:ae:77:d1:7b:17:17:ab:
d3:82:ec:69:e1:ab:09:d2:b8:d0:00:03:00:fd:9b:
0a:f5:20:89:ba:08:c7:29:8f:d3:d5:13:fa:6b:50:
6e:d7:0f:11:c1:ca:43:5b:4b:2a:73:71:d9:cd:3c:
9e:e8:c4:42:c5:33:83:ac:9b:9f:07:c4:90:13:85:
68:00:c1:47:5b:77:b2:44:d9:df:a3:06:05:05:63:
91:22:2c:5b:4a:62:83:95:aa:d9:c0:d4:9b:45:56:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:69:99:69:5D:0F:BA:F6:B0:DE:55:ED:32:E3:D0:47:B3:DD:7A:94
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:1d:f6:0a:db:92:93:52:4e:31:de:61:d3:93:b0:ad:72:13:
4c:58:05:dc:c6:47:c3:59:75:fa:dc:ff:5e:a1:c9:90:78:0d:
66:63:f3:5f:13:48:ac:ad:ef:67:15:a4:d0:e7:7b:2c:40:13:
2f:63:ab:88:9d:d3:e6:55:65:9c:fa:1c:23:b6:41:3d:82:38:
fe:3e:2c:f7:24:c3:26:ff:ba:48:76:27:20:c4:9a:f8:6f:b1:
64:fd:7e:6a:ad:db:31:dc:0a:45:35:75:74:95:1a:fb:5d:a2:
3c:37:bd:b1:9e:2e:50:a7:5a:27:19:89:b6:e0:5f:6f:fb:59:
0b:b2:67:0b:63:82:38:e6:d1:f9:ed:c2:bc:cc:a0:78:da:53:
fe:95:62:7f:9c:40:6e:d0:59:7a:c4:f8:d4:40:96:7c:54:90:
ce:27:0e:72:3f:a2:64:4a:10:c2:ca:f0:0e:71:0e:70:3c:7e:
67:f9:18:4a:ef:fa:a0:7c:2e:bc:34:bf:05:d1:f9:f5:f6:bf:
4d:71:31:b7:55:69:46:11:79:f7:21:d0:00:b0:3c:76:dd:df:
08:2b:b8:c3:22:5a:3c:40:2e:e7:09:ed:79:83:24:ab:24:13:
6f:34:4b:bd:1b:76:9d:c0:a6:19:c6:5a:cc:78:df:ba:ae:6c:
58:03:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 15:59:02 2026 by rpki-client