Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: pk6swW3yXmgJ7Q9eNZmCuZoYz0BKcSxGbXdwKruKdNg=
Subject key identifier: C8:B8:41:07:78:16:3A:01:58:6B:88:D2:34:2F:54:D1:3C:A7:A8:A2
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 019E1EDA605736BC9CD4E4AB2CFFC52E80C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 1102
Signing time: Wed 13 May 2026 01:01:28 +0000
Manifest this update: Wed 13 May 2026 01:01:28 +0000
Manifest next update: Thu 14 May 2026 01:01:28 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: 5+jCpGOCuzHZTfYtTc5StQ11/X8e4gdRK677LfgSQag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:60:57:36:bc:9c:d4:e4:ab:2c:ff:c5:2e:80:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: May 13 01:01:28 2026 GMT
Not After : May 14 01:01:28 2026 GMT
Subject: CN=c8b8410778163a01586b88d2342f54d13ca7a8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:12:22:ff:34:6a:3b:69:48:1d:ba:1d:a8:d4:
7b:84:68:c2:6a:c7:28:87:93:00:b6:74:ab:3d:d3:
ce:2b:63:91:cf:c4:a2:2a:61:74:d7:02:43:dd:4d:
a4:70:54:51:12:ef:20:17:a1:7a:b0:8a:21:26:36:
cd:50:73:ec:92:e0:c8:7a:a0:4b:46:2d:bc:0c:88:
9c:1c:f3:fc:7f:72:89:a1:69:b9:14:b3:8d:a6:f6:
f1:7a:fd:f7:26:10:fd:53:9b:fd:e9:45:e0:a2:b6:
05:f9:e8:af:18:9e:d9:cb:00:13:b7:27:68:45:dc:
25:91:c2:cd:05:63:7d:9e:56:cb:fa:2c:ce:93:76:
1f:73:b4:3d:a0:0f:83:63:43:2a:5d:e1:c8:16:62:
0e:2c:28:a4:b8:dc:38:15:b0:35:0e:9c:d7:2b:02:
dc:3d:5b:ea:c9:47:4a:f0:34:11:70:e5:a5:8e:5a:
cb:65:38:83:1c:b4:36:19:13:e9:98:ad:00:67:d0:
8a:9f:8f:86:a9:01:c7:87:15:c7:02:3b:55:11:1f:
bd:5a:27:06:6a:8a:f3:fc:cf:56:e0:97:c7:f9:fc:
44:71:6b:8f:30:b1:c5:b8:9d:bc:0e:18:7e:64:0d:
91:56:ee:48:b3:03:da:be:e8:58:55:43:72:f7:4d:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B8:41:07:78:16:3A:01:58:6B:88:D2:34:2F:54:D1:3C:A7:A8:A2
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ce:90:b4:f4:bc:e7:c8:53:4c:6f:0f:db:29:b9:85:e5:e8:
1a:9e:5d:f2:5b:81:cf:70:fc:14:b4:33:b8:55:1c:26:a7:f5:
a0:ba:45:76:a5:38:1c:26:d0:4d:c6:f9:17:de:96:d4:9a:bb:
2e:f4:3d:13:99:8a:29:e7:b7:f3:96:06:55:db:d4:0c:2a:4e:
f5:9b:34:8e:96:f7:6f:72:85:61:bf:d4:6c:0a:d0:7d:a5:7b:
96:11:81:3e:a5:2f:83:51:74:23:a1:78:ac:53:4c:82:c0:08:
cd:60:47:22:39:c1:63:c0:b9:c2:ce:8f:92:93:d2:45:ee:30:
14:b1:26:e5:67:39:f3:dc:8c:b5:cb:56:df:6a:fa:d2:15:21:
65:41:e9:72:38:d3:6b:11:55:13:ee:e7:3e:33:e9:22:6b:68:
02:56:48:db:14:9a:d0:5c:cc:7a:e8:4d:5e:0a:ec:53:4b:84:
90:d0:70:e9:f3:0a:3c:cc:11:e7:1d:2b:f5:90:37:ed:1d:9f:
ec:62:11:ad:32:e5:dc:e8:1b:4e:ff:91:0d:35:56:5d:05:2c:
cd:c7:79:4f:14:4c:13:84:99:a2:52:23:37:4a:6f:02:ff:d4:
fc:66:a0:c6:98:c3:22:8c:3c:5c:41:4e:ea:e8:8b:49:ae:1e:
3b:a7:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:46:13 2026 by rpki-client