Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: Olp/VxGMwScVOo7psjT7maAh1Is1WFLx8fDgReAzJAU=
Subject key identifier: 87:E8:1A:13:2E:E6:5B:70:B6:32:6D:40:A0:B5:33:4D:59:11:4A:FD
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 019E1DFE4130D1C7EB2B17A1569A7C748722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 21:01:02 +0000
Manifest this update: Tue 12 May 2026 21:01:02 +0000
Manifest next update: Wed 13 May 2026 21:01:02 +0000
Files and hashes: 1: YNrng7LuWkCZkAtvO0FUnnpdapY.roa (hash: LVcYH4intwAxq/uJ9kNbCKuqV5DBz8cARMAEmR1qWHM=)
2: jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa (hash: 1qE+PeKCdqwLTMKhlG/DvcYz45q96dHEsGiuDU6+/bM=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: lc2ExNQ8EoitcF1UYL24boCLI0GOebOnehZk0Y+kqCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:41:30:d1:c7:eb:2b:17:a1:56:9a:7c:74:87:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: May 12 21:01:02 2026 GMT
Not After : May 13 21:01:02 2026 GMT
Subject: CN=87e81a132ee65b70b6326d40a0b5334d59114afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:47:fa:bb:ea:c1:21:ae:d5:cd:60:a9:2a:
38:f6:93:1c:53:00:a2:cc:72:10:da:b3:5d:f5:bf:
6c:4a:9c:1e:10:ab:d0:aa:2b:b8:56:2b:88:47:29:
83:10:fe:c3:f9:08:a8:c3:ff:27:90:4c:58:6a:ff:
bb:49:e9:ea:85:30:58:04:f8:01:1a:aa:d9:bb:9f:
aa:0c:0b:dd:7b:91:29:e1:d2:12:ee:11:79:79:d6:
61:40:bd:ce:1d:57:99:a7:47:54:d4:6d:ac:af:be:
2c:1d:ea:55:24:53:d1:a7:7f:cc:68:89:0d:4c:e6:
e1:59:54:06:91:f4:8b:f6:6b:a6:d6:81:3f:4e:d3:
b8:a4:58:0a:95:20:4a:b6:e3:d9:e5:82:81:c3:0e:
31:89:66:8e:cd:16:df:aa:ab:28:cf:f9:8a:b8:df:
4c:8e:6d:d1:6f:bf:d7:c4:1b:68:0d:aa:73:4f:8c:
6e:f4:60:24:c7:a7:d8:ea:8b:17:1b:81:64:8a:2d:
7c:33:70:64:29:21:91:dc:ed:2a:11:58:bf:b6:67:
e4:97:49:6a:ed:fb:db:b8:a9:82:0d:f8:97:f7:e8:
e1:e9:a7:ab:e8:58:af:a3:d5:06:46:45:4f:cd:55:
5b:d9:49:56:15:6c:2b:f2:f0:3e:b8:9e:5c:f1:e0:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E8:1A:13:2E:E6:5B:70:B6:32:6D:40:A0:B5:33:4D:59:11:4A:FD
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1f:85:62:2f:c7:b8:85:16:4a:f8:6a:21:5b:88:b9:a8:25:
a3:c0:fe:a2:55:b2:f1:4f:32:66:d7:6f:c0:9f:fd:ab:8e:9d:
a9:0a:9b:0c:1f:9f:56:0c:25:d4:eb:a1:1b:f0:33:40:8f:32:
21:bb:eb:88:80:36:4d:59:57:3d:1e:af:8b:6f:c6:3e:e7:7c:
7d:d1:24:3e:25:5c:8e:3c:3c:bc:e9:09:03:89:fd:62:58:be:
4d:2b:76:bb:d5:66:5a:50:53:26:8f:d3:c9:3e:5f:c6:99:40:
41:7d:f6:f1:ff:e9:68:b8:fa:2e:07:41:64:ff:af:74:6f:5b:
75:7b:51:d3:f7:e7:c5:2f:fd:ff:f7:68:df:19:a8:0d:89:1c:
2d:c1:42:a6:1e:bb:7b:7e:6f:01:a6:56:df:01:f2:b8:7b:a1:
f1:08:de:25:74:14:8b:0b:b3:8f:75:7b:94:1e:4d:9c:f6:bd:
5a:fd:c5:09:8c:3b:c4:6b:25:37:fb:17:75:2c:3f:4a:8e:f7:
b8:4b:89:42:74:ef:93:09:21:15:2a:5a:69:cd:04:a2:fa:35:
88:8e:41:ce:c3:86:40:35:8a:8b:f6:19:14:f3:4b:68:53:03:
85:07:47:92:84:7c:c8:d6:61:9a:24:fa:0c:e9:4c:55:6d:63:
19:f1:cc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:27 2026 by rpki-client