Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: onSCPD1E0QLcnsp+AX6FAl1v1zZTMt+JMnk+5Ea27Ts=
Subject key identifier: D2:9E:B3:B6:7B:F1:69:B0:77:A4:7F:83:21:6D:6B:FA:44:AD:1F:BA
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 019E1EA3CCF39C3CE84322A4E9B4F155EB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 00:01:51 +0000
Manifest this update: Wed 13 May 2026 00:01:51 +0000
Manifest next update: Thu 14 May 2026 00:01:51 +0000
Files and hashes: 1: kvnj2cNsUgWmKqruiHTj8IAxW0w.roa (hash: 2sBzVhGKmjkLG0YmT86Sdiztaegp2q/NY0RQl2BxzZI=)
2: sMktTpfGHbgv6HFYRTILiDr3y4Y.roa (hash: pIuZdKxK8yFs7L1CCJy6Vhhj+nazdkwlFtFaPKVuzK0=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: wUBFWYTDG1uiSXd3WCIUyXyp62PEjrOkKaw5xcFdxPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:cc:f3:9c:3c:e8:43:22:a4:e9:b4:f1:55:eb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: May 13 00:01:51 2026 GMT
Not After : May 14 00:01:51 2026 GMT
Subject: CN=d29eb3b67bf169b077a47f83216d6bfa44ad1fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:7f:ce:b6:ea:80:6a:fa:b1:d5:ef:ac:48:
f4:7d:f8:c4:13:fc:c4:2a:be:bc:54:2e:28:65:b6:
2d:d4:4b:af:fc:9e:fb:f6:29:49:67:66:06:57:93:
6b:9c:7a:05:c3:bb:23:8d:db:86:dd:1e:51:86:55:
d5:59:ef:cb:a8:e3:25:0f:ec:ee:56:c4:34:fb:29:
ad:d2:9c:d4:16:11:6b:5c:54:79:93:09:57:e8:81:
ca:e0:ee:a6:b8:d7:7e:1e:27:93:fd:84:4b:ce:13:
a3:e3:28:5d:84:39:a8:5a:90:1b:ef:fc:40:eb:9e:
d3:04:2a:e7:43:e8:0b:41:03:62:c8:e0:5c:03:d3:
66:69:bd:45:83:66:91:aa:e1:5a:25:be:d0:e5:88:
d9:3c:35:a8:5b:8a:6d:f5:37:7c:ea:50:31:49:73:
1b:c6:5e:bf:f5:6e:71:8a:d1:73:a7:68:6c:4c:7b:
c2:2d:68:84:d5:bd:d8:3f:51:fc:25:3b:f3:88:b8:
9f:48:71:1c:6c:73:80:86:b3:08:22:65:e7:05:33:
5e:ea:ef:94:c4:74:9a:e1:b3:4e:c7:05:e9:b4:d9:
5e:2d:e1:bd:b8:3a:8d:f4:98:29:30:fd:24:a0:72:
dc:1b:e0:55:3f:3e:ca:e0:58:2c:32:f7:fc:69:e1:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9E:B3:B6:7B:F1:69:B0:77:A4:7F:83:21:6D:6B:FA:44:AD:1F:BA
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fc:52:9d:cc:7e:5d:26:a1:04:69:92:5a:54:26:94:26:f5:
e0:a1:e9:27:ce:30:bf:a5:1e:cd:13:1f:0d:55:fd:a7:c3:53:
f1:d3:70:84:a3:27:72:e9:64:cd:04:11:44:9d:c4:d7:14:56:
48:d5:e0:78:07:d9:b5:3b:40:d5:fe:77:c6:5b:3a:97:8b:c5:
8c:31:40:db:0a:94:ff:c3:53:f0:2d:48:dd:ad:3e:6f:1b:2f:
5c:37:3e:b9:66:4c:ff:61:dd:50:62:e1:cd:92:e2:72:dc:90:
96:80:f9:c3:7d:eb:b8:e0:7e:a2:5d:36:bd:9e:fe:54:64:a2:
ec:40:bc:a3:f3:44:59:44:3d:e6:8a:4a:b3:fc:60:09:26:2d:
12:b1:61:00:44:f2:b7:0f:e9:d2:b6:1f:77:f5:5d:3b:fa:01:
95:5e:49:73:1a:95:fa:71:75:8c:53:b4:3f:df:e4:c0:3d:04:
ad:55:86:11:3f:3f:02:06:97:97:85:2d:a6:dd:3f:00:1e:1c:
55:1b:31:a9:56:f4:0e:84:c6:f9:d8:0e:c9:2b:c0:63:9e:dd:
f6:f5:f2:35:da:0f:15:bc:58:23:65:d8:8a:b4:bd:a4:f8:5e:
2d:dc:e5:53:5d:a4:bc:7c:23:4f:aa:62:58:7b:0a:6c:6f:f5:
cd:b7:0f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:28 2026 by rpki-client