Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: i45Op0jN0Ujxan7Dyjm+mMeXyW4zLRfe42MpvDdORuk=
Subject key identifier: 4E:E1:13:ED:6B:76:1C:CE:93:A8:F8:48:CE:CC:25:BD:D9:19:94:02
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019E1F47F217B33EECBE4D817270B0A3DA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 11F1
Signing time: Wed 13 May 2026 03:01:09 +0000
Manifest this update: Wed 13 May 2026 03:01:09 +0000
Manifest next update: Thu 14 May 2026 03:01:09 +0000
Files and hashes: 1: BWIxZ78uKyw4vY-xhhwszjKA1Gg.roa (hash: DJhZH5ULKuTFx2qZjif4i5VCgjFcTYiLUvWNXLkT1QQ=)
2: GILkzrnW-WLXBiCMka03WJecbH4.roa (hash: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: vfFL3/2oChOnSFZoeHTkC8od3JqKZ9S7h7ZJ4ifp2Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:f2:17:b3:3e:ec:be:4d:81:72:70:b0:a3:da:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: May 13 03:01:09 2026 GMT
Not After : May 14 03:01:09 2026 GMT
Subject: CN=4ee113ed6b761cce93a8f848cecc25bdd9199402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:a6:5b:4f:a7:e3:10:c2:6d:49:6f:cb:cb:
b5:95:60:1e:f8:bc:5d:83:30:ed:54:f6:0b:ca:05:
0d:f1:84:7b:5b:a7:d7:da:10:1c:58:c3:3c:02:3e:
db:28:db:a5:58:0e:d1:b5:e2:7a:4a:6c:85:07:22:
ae:ac:77:ae:82:5e:63:a1:de:d6:3c:30:13:c1:38:
31:38:dc:a3:b8:0e:36:a8:e9:ea:c3:7a:cc:94:3f:
8c:8c:d5:97:6c:64:f6:55:4e:9d:f8:46:dc:82:d0:
de:24:3e:9d:34:63:83:f3:2b:61:93:20:ca:a0:1e:
97:75:b1:45:12:05:c9:da:3c:60:f6:93:0b:79:d7:
ec:5a:90:3c:e5:ef:66:1e:14:e7:fe:61:6c:9f:c9:
bd:9e:41:27:45:e2:90:48:6b:fc:af:32:e1:3e:a8:
51:91:9a:20:62:e2:0b:21:4f:64:70:e7:4a:1b:fe:
e0:4b:94:94:e5:6a:05:93:5f:54:25:33:48:b4:b1:
e6:d9:3c:b7:5f:24:94:ec:73:ce:9e:3b:36:7a:1c:
52:99:25:25:51:f5:a9:c0:a2:d9:22:db:68:27:bd:
0d:35:01:5b:c5:c7:ac:7f:58:9c:58:f6:39:f8:04:
1d:9f:f3:25:11:b5:e4:52:fb:e3:ff:49:15:2e:78:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E1:13:ED:6B:76:1C:CE:93:A8:F8:48:CE:CC:25:BD:D9:19:94:02
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8a:60:9a:da:6a:49:d9:40:41:28:63:3e:03:ef:19:4f:3a:
f7:b8:c1:96:0d:51:e8:88:89:04:f3:e1:0f:80:b5:8b:2c:46:
d1:43:82:7c:72:35:a3:97:ea:7d:2f:94:32:43:04:04:bf:9b:
a9:c1:2f:96:f5:72:37:53:07:21:2f:49:2e:c5:c5:8a:ea:bd:
27:4a:6d:d6:9f:7e:1b:1c:2c:a8:7a:e8:1a:d8:aa:4c:8a:13:
0e:ff:25:4f:9e:9b:d0:99:a5:bc:1a:60:1d:b4:c1:0c:f4:55:
af:e6:71:ea:75:20:c7:16:64:8f:d1:56:f6:95:b3:41:de:14:
38:f9:e1:9c:2b:54:fc:b7:fe:25:1b:9f:53:10:00:7a:92:30:
40:f1:a0:1e:c5:45:0e:6d:45:88:da:33:54:bb:9a:a7:2f:8c:
c0:02:37:ce:16:99:49:45:2e:94:2e:a8:78:51:93:9c:06:69:
9b:d5:4c:62:ea:2b:f4:e0:31:c6:a0:68:a6:2a:01:a2:48:b5:
86:37:e0:d6:0a:88:73:80:2b:f0:37:dd:99:10:46:99:f8:41:
ad:18:20:c7:c7:43:9e:3e:65:f7:0f:8c:ad:75:e3:1a:10:31:
98:6b:4e:11:05:42:24:98:dd:90:ef:84:66:6d:57:b4:6b:92:
09:1c:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:55:07 2026 by rpki-client