Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: 6XkLEHZpMWzlcAOXQvkpsxikyPekNCqm0fpGMPPkUXU=
Subject key identifier: 07:89:90:31:27:94:8B:4E:64:C5:2B:7C:99:C3:13:C6:01:29:0F:C0
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 019D9C2C8C5FB6CB1A2615C3A5619C703CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0FA9
Signing time: Fri 17 Apr 2026 16:00:58 +0000
Manifest this update: Fri 17 Apr 2026 16:00:58 +0000
Manifest next update: Sat 18 Apr 2026 16:00:58 +0000
Files and hashes: 1: HXXJ5U9DGvbbZuWvDguPFDAOEkc.roa (hash: mEsE8YsZsxlgLGJIZIrrf3uSCgdInsp4ueGy7PdnCmU=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: 0FQwytdbRPwq2ctiyS9hLx0DwIHVxYCsmJ7m4bkZS4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:8c:5f:b6:cb:1a:26:15:c3:a5:61:9c:70:3c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Apr 17 16:00:58 2026 GMT
Not After : Apr 18 16:00:58 2026 GMT
Subject: CN=0789903127948b4e64c52b7c99c313c601290fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f8:c8:98:c2:f8:f1:2d:9a:ae:61:83:2d:8e:
7a:6d:a3:69:e8:9c:a0:a2:b7:94:08:2f:a6:3e:65:
bd:a5:29:a1:36:34:cd:af:d9:28:9a:fe:90:75:6c:
13:5d:21:90:3d:7b:2c:62:b2:f1:c9:32:e9:5d:39:
c0:2e:7a:2c:f6:da:77:50:76:a8:2a:ab:7c:c4:82:
43:72:29:9c:78:0c:dc:d0:d1:94:86:d5:5f:4e:fd:
c5:dc:4b:ec:67:14:4d:17:58:49:3b:62:9a:f2:2a:
91:47:a7:4a:4e:1a:11:bd:49:ef:91:a7:0d:66:0b:
e6:ee:bf:6f:9e:2f:f8:6a:7e:5f:97:1a:aa:2f:ac:
74:bf:90:75:78:5a:d0:57:27:e9:87:82:9a:21:7d:
a2:7b:06:c4:18:78:c1:15:b0:7a:14:50:b2:f8:15:
f3:17:9b:16:bf:5a:24:5b:5c:09:af:9f:d9:a8:38:
74:ea:a6:e8:fa:f8:c6:c0:f3:36:8f:e8:f3:42:8e:
cb:4f:09:76:28:f7:89:24:6a:53:9f:63:dd:a0:44:
52:49:15:41:5e:9e:0f:1c:66:d9:83:df:1d:12:ff:
f5:0c:ee:61:b6:ed:32:60:23:89:43:86:a7:94:64:
12:e6:f1:bf:48:11:65:a7:84:cc:21:e8:aa:6f:74:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:89:90:31:27:94:8B:4E:64:C5:2B:7C:99:C3:13:C6:01:29:0F:C0
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:10:71:f8:09:37:c1:14:c9:bf:1c:10:52:c9:8f:eb:8c:b8:
ed:cd:22:3e:9d:f5:5e:38:7f:0c:67:58:0b:03:50:8f:51:75:
36:ca:9b:ce:69:af:5a:44:15:74:9c:47:00:59:88:c4:04:20:
00:cf:f0:0d:7a:aa:15:f2:ec:d3:0d:a8:d2:26:fe:69:ad:da:
4d:41:99:23:19:3a:1e:5b:9b:87:7d:3a:89:e0:e1:13:a9:3f:
52:56:d0:3d:10:4e:c2:6b:fa:1e:33:4f:41:9f:a8:94:4f:55:
8d:ac:f3:da:78:0d:95:b0:bf:81:73:f3:99:00:1e:67:04:bb:
29:2a:ca:d5:cb:c8:fd:63:91:84:8a:db:02:a4:9b:25:22:2b:
d6:0f:0e:21:0c:c3:7f:0f:77:8d:7f:a2:7d:ea:2c:e3:6b:44:
4f:3f:73:42:29:9d:3b:e9:96:55:28:21:f4:89:f1:fe:5e:88:
cd:e3:f8:28:5e:90:b4:e7:f6:ac:b6:7e:4e:b1:3f:86:a5:64:
cf:9b:c3:f8:74:e6:66:68:28:84:3a:15:3d:39:ee:1b:8d:f3:
0a:fa:53:1e:e9:bc:63:2e:65:5d:25:50:33:5d:ea:aa:88:a0:
ca:ff:16:dc:ce:c6:f1:d5:d5:74:fa:62:47:f4:2d:38:19:45:
c9:dd:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:27:50 2026 by rpki-client