Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier: Lb/HFXz+ZeMQ4DdFAt7gBYoSqOkDzBJ9II22WNyQ0Gs=
Subject key identifier: 44:1C:59:CB:06:7A:91:86:84:C3:29:2E:DA:C0:4D:E9:86:F5:68:D8
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial: 019CADFEA2C2581B81F9CFB42F9EB201963D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number: 05EE
Signing time: Mon 02 Mar 2026 10:01:11 +0000
Manifest this update: Mon 02 Mar 2026 10:01:11 +0000
Manifest next update: Tue 03 Mar 2026 10:01:11 +0000
Files and hashes: 1: ApB3AApTkd-CTxpkFDEIw_6nXz4.roa (hash: BHpUQQ7BEi0kv1fti7vIaRRcfrlm8kSIsZNfVucwYew=)
2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: TBhN/UzYAqb09dLmf0x1Tin7JejSgRGvXLWZMMadVyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:a2:c2:58:1b:81:f9:cf:b4:2f:9e:b2:01:96:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Validity
Not Before: Mar 2 10:01:11 2026 GMT
Not After : Mar 3 10:01:11 2026 GMT
Subject: CN=441c59cb067a918684c3292edac04de986f568d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:00:37:f6:4e:28:9e:3b:9d:3c:05:f6:a7:
d6:2b:1f:ca:4a:0c:72:ae:b5:34:d9:ca:57:a5:5b:
6a:08:c4:37:50:e9:63:f8:e7:f1:49:3b:8d:4d:d7:
3a:f5:d5:bf:d2:a2:af:dd:7c:83:92:11:39:8f:d7:
6a:06:9e:9d:1d:f5:bb:91:b0:37:b9:c7:34:b9:81:
35:8c:ad:f4:30:b1:86:7a:6d:a8:1b:56:2d:f9:b8:
60:ce:b7:93:a5:c3:4c:ea:aa:b0:be:74:0d:6f:f5:
d1:08:12:64:6e:f5:03:ab:45:d5:5b:46:f5:10:f9:
30:b3:05:31:6d:5a:f5:89:74:5d:0f:07:56:bb:73:
c7:1a:19:dd:26:7b:04:0c:61:84:8a:dd:d0:29:26:
48:a1:9a:2f:53:f9:09:33:7d:6b:57:2b:04:6a:c1:
c9:c3:e2:87:77:9b:ba:a9:20:26:97:ce:db:bd:c6:
e8:0e:2a:9f:07:61:51:35:a8:a0:70:53:6f:f4:7c:
ff:82:8e:22:35:d0:d0:06:fe:43:bf:f9:1e:2c:f7:
f2:66:ca:6d:a3:06:3e:66:7c:8b:56:f2:4a:2f:56:
34:e1:4e:14:8e:7f:7b:ce:35:3b:2d:f9:00:c7:f5:
78:28:55:93:67:7c:6d:e7:a2:37:9b:6a:3c:eb:61:
9d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1C:59:CB:06:7A:91:86:84:C3:29:2E:DA:C0:4D:E9:86:F5:68:D8
X509v3 Authority Key Identifier:
keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:98:61:51:96:25:66:93:53:44:57:d6:cf:33:2c:f5:c5:2d:
6d:46:58:94:96:8b:a4:d1:c7:d8:24:d8:76:42:d7:2c:74:06:
d2:f1:40:82:ed:ef:c3:35:7e:07:c8:84:94:3f:55:b7:8e:69:
01:eb:7a:7c:54:66:8f:9b:36:a0:90:e3:ea:43:55:ee:f1:d3:
7d:3c:94:63:d1:7e:a2:15:c3:79:1a:b9:45:70:53:e6:c5:14:
b4:f7:47:85:43:8f:ea:c4:fd:6d:ca:c3:2d:34:43:92:f4:41:
23:9d:cc:6e:99:41:1d:f3:27:2c:c3:d3:4c:b3:14:86:37:53:
03:35:d4:ac:e5:42:91:a9:8f:e7:b4:56:15:e1:1e:67:db:51:
a2:e0:93:c1:34:67:05:ee:4d:32:91:55:b8:e9:80:22:4c:60:
9d:3a:a4:1d:ce:b1:57:13:a4:e1:34:a0:11:7d:e3:e6:21:f5:
5a:1a:a2:f2:11:f4:5f:4a:67:8f:32:45:e3:6b:d5:fe:b7:ee:
96:47:36:10:41:9a:6f:d5:33:bb:f6:bb:ff:35:77:c5:31:b3:
f8:b3:4e:dd:fe:54:b7:1f:2c:2b:46:d0:05:da:bb:a4:b7:27:
db:8f:a9:d1:50:9f:19:79:13:c5:81:b7:77:5b:c4:03:28:fb:
20:2a:e0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:13 2026 by rpki-client