Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: WcQtRwPazxT3E5Hdoztkm+XgzzHAJ+Lln1HBgMNECf4=
Subject key identifier: 05:BF:F8:A3:DE:DD:39:D2:39:FF:85:5E:B2:A0:D0:BC:3D:67:FC:87
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 019DA3E6E4F676031B7E965CB77359EFBE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0FFC
Signing time: Sun 19 Apr 2026 04:01:51 +0000
Manifest this update: Sun 19 Apr 2026 04:01:51 +0000
Manifest next update: Mon 20 Apr 2026 04:01:51 +0000
Files and hashes: 1: WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa (hash: F58q4gWz10PJi3pePWbZTjvTAbHmgaZfqkLlGVghmM0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: qCTgEbbR1D12cCf6cxxZIk5bfdeSsHK0ybv3hAwJUfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:e4:f6:76:03:1b:7e:96:5c:b7:73:59:ef:be:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Apr 19 04:01:51 2026 GMT
Not After : Apr 20 04:01:51 2026 GMT
Subject: CN=05bff8a3dedd39d239ff855eb2a0d0bc3d67fc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:cc:40:74:7e:4c:6c:dc:71:d0:af:62:99:
44:c2:94:73:08:0d:c2:ca:08:cb:b8:10:f3:63:4b:
cf:72:a1:3b:a0:11:00:75:ec:dc:48:bc:63:a6:87:
b5:b5:83:cf:c3:1d:61:08:da:0f:4c:c3:bb:83:a9:
92:22:df:31:ba:7c:52:74:6e:01:74:7e:5b:d8:4f:
22:87:b5:d9:fd:87:e3:df:50:e7:35:2f:73:c5:4d:
40:fd:9f:16:9e:e6:76:44:c9:7e:2d:30:d2:37:e0:
8f:3d:f4:6b:be:13:09:c6:85:df:a1:a3:eb:9a:2b:
3a:22:c3:59:c7:92:09:2d:22:d7:3d:0a:9d:c3:1e:
4b:8d:d5:23:54:82:15:d2:1a:50:eb:6e:ed:ad:e0:
b2:ac:88:93:0e:2e:b8:40:cb:a8:5d:81:40:b8:2f:
96:21:d0:e9:1b:00:13:18:d4:0a:3c:47:74:b1:19:
82:ee:7e:29:b8:d0:f6:20:e5:0c:c3:5b:73:bd:68:
ec:a1:24:0c:3a:72:21:7f:aa:29:b7:61:eb:dc:43:
12:eb:99:92:98:4c:92:e6:b9:c1:74:9b:ab:62:7e:
e3:d8:28:73:12:cb:20:49:ae:b9:49:36:50:d2:11:
d8:f9:69:60:91:e3:cc:86:c1:3d:c5:4f:39:78:ff:
e5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BF:F8:A3:DE:DD:39:D2:39:FF:85:5E:B2:A0:D0:BC:3D:67:FC:87
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0c:0a:4a:0b:d8:2a:ca:cd:46:82:29:4c:1d:f4:a9:fb:73:
02:9b:92:e4:97:95:9c:56:a4:fe:45:2f:af:10:87:c3:9b:d6:
5a:a6:ce:3c:54:a9:c0:13:ba:f2:8e:91:0c:e5:92:fb:50:5a:
42:d1:e8:79:74:e7:39:17:49:01:1c:97:30:64:e0:a9:99:fb:
ba:fc:f3:00:95:04:cb:9d:22:5e:43:2e:0f:bc:c8:68:47:1a:
81:6c:47:e8:4a:10:ad:73:04:bb:3d:03:29:49:90:f1:73:1b:
c2:d4:f0:c8:87:00:7b:9d:04:2d:d3:d9:12:6b:7d:63:f3:6a:
d0:2b:7e:cc:ba:4c:66:6f:13:b9:be:05:ae:cc:d9:8b:ff:38:
0b:00:bb:e3:ec:58:2c:30:e5:cf:d9:c6:12:1b:59:65:4e:80:
95:7b:3b:d5:84:53:d6:51:76:88:9c:19:57:9c:d8:a8:86:37:
7d:6c:8e:43:d0:1e:8a:01:23:fb:0a:46:ca:7e:9a:04:e8:e9:
90:0b:5e:5b:53:12:05:08:c3:00:a8:c1:8a:5a:77:6c:67:74:
7d:0c:50:f1:a2:97:31:97:00:1e:67:ab:1e:60:55:9f:02:f9:
32:b6:5a:37:ec:95:6a:21:c4:a6:3c:eb:da:d7:a0:8c:45:11:
a2:21:65:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:17:59 2026 by rpki-client