Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: QrDwO512Ir6Pq8/4EtIuzvIZ6zKxUFGLW5yCOtMcZ50=
Subject key identifier: 58:59:2A:75:3B:8E:D9:BA:DD:1C:77:C7:CE:8F:C1:EC:69:64:2E:B8
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019D98862605AF503FD7A0B458CEBC07E49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 079A
Signing time: Thu 16 Apr 2026 23:00:21 +0000
Manifest this update: Thu 16 Apr 2026 23:00:21 +0000
Manifest next update: Fri 17 Apr 2026 23:00:21 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: 4ZGc9AkB64xFRtdgWoFbdpdci5jZPN0EaJztjdYt8BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:26:05:af:50:3f:d7:a0:b4:58:ce:bc:07:e4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Apr 16 23:00:21 2026 GMT
Not After : Apr 17 23:00:21 2026 GMT
Subject: CN=58592a753b8ed9badd1c77c7ce8fc1ec69642eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:0b:42:67:92:4c:a5:25:f5:ba:18:b5:13:
3a:0b:6e:5c:34:66:c3:b7:c3:06:f7:72:d0:db:ad:
e2:26:15:0a:37:5c:07:cb:e5:3a:c1:49:cd:c4:5b:
b4:88:0e:2a:87:ed:ee:83:52:25:05:88:2f:4a:c5:
cc:4e:cc:86:c7:20:36:f4:51:d9:e4:86:09:9a:0f:
ca:51:bd:3e:8c:8f:66:bc:47:3b:45:66:27:db:01:
9c:20:73:ba:3d:26:22:14:0c:89:42:db:f1:d9:62:
79:af:03:8d:31:20:a2:8e:a9:71:5a:48:6c:ba:71:
1f:49:23:5c:11:58:9f:dd:87:9a:80:96:e1:04:bb:
f8:62:d1:2a:0f:fa:f8:66:17:1d:26:8c:aa:25:a2:
d9:9e:98:b4:85:ae:b6:af:fe:49:a0:eb:6b:82:64:
97:28:5b:55:90:66:10:9e:02:c8:db:60:bb:00:78:
83:8f:59:33:9c:1a:30:42:c0:05:06:32:f8:3d:07:
ef:a7:50:8c:da:26:a3:8e:aa:51:f6:c2:66:a5:e3:
de:a7:55:50:85:c7:e3:41:4d:a5:35:1f:43:cb:a3:
4d:e6:2c:c2:af:65:e6:06:a7:44:e9:51:ca:f5:36:
08:b4:df:c7:3e:e9:67:aa:d4:8e:c8:9d:75:02:b9:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:59:2A:75:3B:8E:D9:BA:DD:1C:77:C7:CE:8F:C1:EC:69:64:2E:B8
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:53:9f:27:bf:8d:1e:0c:e3:88:bf:b1:a9:e0:e1:05:d5:8b:
0f:c1:13:65:ad:c8:6b:74:78:29:3a:da:b4:36:f2:76:c6:fe:
bd:1d:c2:0f:4d:7d:92:51:71:36:dd:75:3b:a5:18:08:5c:d8:
0f:b6:58:1b:17:62:da:d5:b6:ac:51:dd:08:27:dd:05:33:14:
e1:ed:bb:f5:60:45:7a:e6:db:a4:1d:71:5b:42:c9:de:86:61:
68:58:57:3d:95:ee:62:d0:16:34:3c:cb:7f:c5:05:2c:dd:ed:
f6:c4:42:5c:5b:7a:58:ef:0a:bf:47:d0:bc:e5:5d:90:9f:80:
31:a9:1e:b9:da:79:19:8d:f0:f0:d7:79:b0:f6:92:c3:be:21:
21:1c:3e:1c:25:1d:bb:c2:28:c0:02:89:3a:93:e7:5e:b9:76:
31:d4:f5:40:dc:a2:bd:c9:6e:f4:8b:26:82:e0:5c:8f:85:c7:
c1:f7:a3:e1:28:9e:f7:b4:2d:93:87:2c:ea:7e:c0:65:3a:64:
3d:16:be:41:29:e0:0f:ca:5c:85:49:d5:30:e7:9c:08:4a:ed:
0c:b1:8c:2e:e8:bd:4d:eb:9d:f1:87:6e:44:df:38:20:cf:55:
df:24:e5:b3:14:8f:10:3a:22:b9:51:c1:ff:f6:65:a3:03:6b:
6d:07:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:53 2026 by rpki-client