Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: 65QYzPZstjm9W1TaSlKwr3Yq08cPU9xwdKaNBKbJzGU=
Subject key identifier: 26:0A:5B:71:8C:3B:0B:59:73:B6:64:6F:11:ED:8C:86:24:CE:3F:A5
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019E1F10EDB3BC5AAD8C7CF19180C96BDD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 13E7
Signing time: Wed 13 May 2026 02:01:03 +0000
Manifest this update: Wed 13 May 2026 02:01:03 +0000
Manifest next update: Thu 14 May 2026 02:01:03 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: qeHFnS/yp3okzEfRhQxzXDum0xmf1vmz86MzU06SbP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:ed:b3:bc:5a:ad:8c:7c:f1:91:80:c9:6b:dd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: May 13 02:01:03 2026 GMT
Not After : May 14 02:01:03 2026 GMT
Subject: CN=260a5b718c3b0b5973b6646f11ed8c8624ce3fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:0c:e8:7a:3d:82:26:97:53:a4:df:7e:b3:
5d:1d:2c:cd:3b:cb:9c:8c:fd:d8:fa:0b:29:0d:8c:
98:ed:4f:7c:b7:94:88:eb:de:9b:14:a3:be:1e:8c:
a1:a7:ea:bf:9d:53:5e:0a:96:a4:6a:ce:ee:f7:c0:
91:4b:69:eb:f6:d6:db:ad:d9:1a:9c:30:1f:1e:fe:
95:d8:b8:7e:20:d0:f1:bc:ed:4f:12:93:53:34:b4:
74:64:96:1f:d1:b9:d6:02:0e:5a:9d:d3:4f:2c:41:
26:2c:04:32:d5:33:b0:c8:70:af:02:a8:c2:79:cd:
df:2a:a0:85:50:ed:13:f0:1f:42:4b:b1:76:f7:20:
35:4b:f2:68:34:ee:3a:22:6e:59:16:69:2f:c4:c7:
62:ff:45:b3:56:7d:75:b2:47:5a:30:e3:06:93:a0:
00:31:96:0c:fd:6f:50:8e:62:6b:17:6f:a5:0f:5c:
85:81:e1:69:d4:8a:db:75:c9:9e:b4:69:16:9e:a4:
f7:5b:66:5f:77:a5:44:62:83:4d:70:c4:23:86:29:
9f:3d:46:dd:74:3e:00:dc:46:0c:bc:ed:7b:e1:63:
80:35:93:9d:4c:69:0b:93:e0:2c:82:e0:b5:d8:87:
82:73:0a:10:db:3b:81:cd:a5:b3:34:8d:95:90:62:
17:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0A:5B:71:8C:3B:0B:59:73:B6:64:6F:11:ED:8C:86:24:CE:3F:A5
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ed:5f:02:6c:fd:16:e2:c1:37:52:0b:2d:5d:7c:7b:47:d0:
2c:47:e5:6b:1e:e9:23:e2:67:f2:aa:5d:db:6b:17:91:73:b4:
9e:fb:97:a7:ba:e8:61:0f:65:73:81:dc:e3:5d:1b:80:79:e8:
88:61:b9:f0:3a:40:61:6d:c3:ee:04:21:1d:4e:51:39:f2:14:
20:a9:b0:e5:3a:a4:4e:d2:c3:b2:ac:5f:68:59:a2:c9:8a:4a:
25:f0:62:0e:d4:81:f0:f8:2e:d9:49:7b:16:28:b6:bc:cd:fe:
f0:df:82:4e:87:bf:57:cf:47:ec:fc:a8:de:81:09:9d:26:2c:
54:d0:c7:ab:18:6b:c6:6c:47:6a:46:91:23:28:1c:26:71:a7:
d5:4a:61:72:ad:6b:fd:54:d9:ba:91:73:66:4a:18:08:72:33:
49:b2:58:2d:95:63:ff:73:ff:c4:ee:41:c5:48:99:60:e0:9a:
1b:19:03:4c:a6:12:90:51:8b:24:6a:2a:74:6f:f7:aa:7b:ba:
fa:22:9f:7a:a5:20:a1:19:c5:e8:86:9c:a8:c2:a3:d5:ed:1a:
58:e0:b1:21:a7:c5:0c:03:0e:a8:d5:5d:c5:d9:2c:34:b6:e5:
b0:ed:86:27:11:36:8e:cc:31:7b:83:2f:e5:de:80:14:ce:72:
e8:de:d3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:20 2026 by rpki-client