Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: A0qhc+LmAx5QITVEd6Oqv+im+nMnw5ReDPrLRCrTftU=
Subject key identifier: 1E:80:BF:DE:83:AD:97:0C:86:6E:B6:F3:93:36:4A:5D:63:16:6F:E5
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 019E1F11AAF6F53551AB179482CE9675401B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 035E
Signing time: Wed 13 May 2026 02:01:52 +0000
Manifest this update: Wed 13 May 2026 02:01:52 +0000
Manifest next update: Thu 14 May 2026 02:01:52 +0000
Files and hashes: 1: 9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (hash: MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=)
2: BtoXyxMSDIQKMTy6jmmOzPMifBs.roa (hash: 8KwO1lQ/lrfb32wFNdnAhNa5nkjafPNwoIk1Z923QrM=)
3: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: Q/7s7F/H03fYqbgudBYXpZBZeB9h+k0I+CMHzafhdpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:aa:f6:f5:35:51:ab:17:94:82:ce:96:75:40:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: May 13 02:01:52 2026 GMT
Not After : May 14 02:01:52 2026 GMT
Subject: CN=1e80bfde83ad970c866eb6f393364a5d63166fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:28:71:d3:ab:d0:88:b2:a5:96:07:94:ef:78:
35:e1:2e:a9:40:01:99:0b:7f:5a:71:d4:d2:c0:12:
28:75:a0:4b:20:ea:e1:df:18:e7:b9:39:2e:e5:15:
89:44:35:4c:8c:0e:22:dc:f9:3f:c9:5c:8e:b8:0e:
09:10:b4:71:3a:f0:85:90:93:b6:09:89:e3:e7:00:
48:17:76:6b:a6:7c:04:33:1d:fa:fb:6d:5a:c8:1b:
c3:fd:9a:3a:ad:96:68:16:d4:43:cd:75:97:96:ce:
df:88:e5:3f:90:8e:0c:0b:19:26:a4:af:a8:f0:4d:
c2:74:62:fb:4e:d1:ca:c4:7f:44:ea:d6:6f:8c:48:
88:9d:d9:cd:40:e5:a6:fb:39:6f:47:f3:87:13:35:
c4:e0:c6:0a:5f:e9:b4:48:d2:1e:b3:95:2d:d1:2e:
75:fc:9a:6d:01:fa:4c:03:39:f9:06:68:10:69:61:
17:31:80:66:f3:a1:36:48:70:42:9d:70:8e:66:0a:
ab:ee:65:60:6e:11:69:3e:cf:ba:69:70:1d:84:4b:
23:03:4d:86:39:e5:17:b6:ef:ea:e5:b7:28:90:84:
c1:ee:f9:d6:2e:d4:45:b2:2c:00:e6:3a:be:84:c7:
98:da:34:ea:cd:f9:03:6d:90:4d:c1:f8:01:5c:12:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:80:BF:DE:83:AD:97:0C:86:6E:B6:F3:93:36:4A:5D:63:16:6F:E5
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:16:69:c3:27:a1:fb:d8:d6:b5:0c:7a:bd:d5:df:fa:01:49:
35:3b:12:da:0b:20:58:05:32:20:15:a3:fe:65:a5:f4:f8:14:
67:40:ec:40:12:9a:d1:a3:44:b5:84:e0:b1:9e:ce:48:29:5d:
4c:08:ed:46:61:26:e2:09:e1:8d:52:1e:a9:4c:d6:bb:62:1d:
48:a6:8e:f2:31:af:5c:ef:13:93:66:8b:de:f4:3d:fd:83:7f:
01:bd:03:22:97:7a:4c:37:fc:a1:c6:89:10:9d:24:66:2c:8e:
ec:9c:f0:f5:50:7c:e3:4a:a5:70:8b:f5:20:78:6f:52:1a:9a:
27:fa:88:18:4f:20:81:b2:e9:f2:cc:ab:9d:ef:e4:bc:4e:a0:
30:61:b2:b6:be:bf:00:b0:d8:3b:8d:aa:22:06:1d:04:05:9e:
e8:40:6c:ad:7a:f2:97:19:ae:3e:fc:41:9a:38:ac:8c:ab:42:
4c:18:bb:c0:dc:4f:4f:5e:a3:8a:00:8b:7f:d0:bd:d4:d3:7d:
3c:1d:f7:93:c9:74:1b:c5:77:c1:d4:df:81:ce:9d:e1:6b:88:
ba:4e:38:44:55:6f:bf:78:58:c0:fe:c6:26:68:ca:d1:bc:08:
ef:cb:be:cb:4a:f0:cb:fe:72:8e:0c:b1:68:6f:ae:0b:68:00:
6c:c4:fd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:16 2026 by rpki-client