Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: AoHOB8hkREKM1BklL41A8RxaEeX1DOiLserM9jN6pZ8=
Subject key identifier: D5:BC:47:42:B1:53:98:7E:08:25:03:D6:D9:EE:C6:FB:85:40:21:BF
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 019D98BD1A7FB66F82464AB70FAE734AC936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 0857
Signing time: Fri 17 Apr 2026 00:00:23 +0000
Manifest this update: Fri 17 Apr 2026 00:00:23 +0000
Manifest next update: Sat 18 Apr 2026 00:00:23 +0000
Files and hashes: 1: VpnFqg4nLkv4hVZvAnrC7KmiNAU.roa (hash: 5iLmKrDX02BNsU1dvSS1ObOgIc5TS34EiCu+Rj74FUw=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: Lm7qiHXtIp9aaODKrSyKJD81eY5A8ciXVDPBJ2ygBrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:1a:7f:b6:6f:82:46:4a:b7:0f:ae:73:4a:c9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Apr 17 00:00:23 2026 GMT
Not After : Apr 18 00:00:23 2026 GMT
Subject: CN=d5bc4742b153987e082503d6d9eec6fb854021bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:27:e5:a9:3b:f8:d9:4d:43:ed:04:49:72:
a2:e1:94:14:c7:7d:50:c3:50:d6:ca:31:3c:57:50:
e7:74:94:2c:dc:bb:27:4f:fc:6c:78:7d:57:38:74:
bf:96:95:0e:1b:d5:06:00:03:22:9b:5b:b0:37:13:
7f:d9:7b:1e:32:99:b3:f3:0d:76:c1:8c:8e:8b:50:
fc:be:7e:e7:b4:da:0c:80:4d:a3:71:54:38:98:01:
6f:83:6b:af:2a:e7:5f:a6:a2:21:8c:a1:2d:6a:ae:
00:54:97:71:69:f3:74:45:12:2c:0a:1f:4d:c4:9c:
cd:d6:de:a6:37:53:06:99:00:8e:95:81:49:7d:00:
3c:15:df:4e:88:5d:59:96:b2:a7:6c:49:08:56:66:
02:1e:92:70:bf:65:74:f9:42:16:b4:53:c1:99:cc:
6b:c3:c4:55:8d:b3:71:dc:82:d1:42:4f:bb:fb:12:
d9:83:87:b1:f2:31:41:13:9a:71:ac:ee:10:e3:51:
5e:24:1d:41:09:39:aa:b9:82:3c:a5:85:c5:e7:19:
27:b8:20:b6:35:b9:a2:01:94:05:e2:9b:f2:e0:05:
8f:d3:ad:35:35:21:60:42:8f:0a:15:99:7f:34:8a:
7d:d1:9f:d6:09:21:72:19:7a:4f:b6:0b:60:b2:87:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BC:47:42:B1:53:98:7E:08:25:03:D6:D9:EE:C6:FB:85:40:21:BF
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:aa:b7:f3:3f:04:18:7d:4c:f8:5a:78:25:10:d8:5b:50:5d:
35:d3:b2:53:95:58:b8:72:5a:f1:b1:5b:11:89:f3:cb:56:3e:
67:83:6a:80:8d:96:76:f6:7a:dc:e5:62:06:f0:d1:45:63:c0:
93:fe:5c:08:3d:f5:3d:b7:4d:61:e0:25:82:f6:5a:17:1d:51:
67:01:ac:8b:a9:b6:e9:85:d6:71:b2:af:7b:db:cf:bb:d7:6e:
4e:1f:91:63:65:83:6f:64:f0:15:37:8c:6a:5b:8d:67:02:b7:
e9:4f:b5:86:cb:05:f5:ab:56:3e:df:95:5a:6d:15:ef:88:54:
d3:60:97:72:24:29:40:2e:81:48:4b:16:73:e5:83:36:f6:89:
f8:e2:69:71:8e:03:ad:14:d6:53:92:42:d7:b8:f9:81:78:b7:
5b:74:d4:d3:cf:94:e8:d2:d4:36:59:77:ad:cf:4b:14:f0:b9:
9c:e3:c9:2a:fa:41:93:ad:32:b1:38:cf:93:c5:1f:7f:74:ac:
58:a9:18:7c:37:4b:f3:42:00:9f:8e:53:52:7a:a8:aa:51:56:
78:a1:be:47:d3:0b:85:40:b0:7b:cb:70:4f:63:64:6d:0d:96:
61:cb:f7:d1:be:2b:b3:07:1f:b1:a9:3a:f5:b7:f9:37:23:16:
d0:0a:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:55 2026 by rpki-client