Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File: yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier: GaUPlDcmV8vCIL8xCUuLOSkXpnP/zjDaOPJtIoieseg=
Subject key identifier: 42:EA:8D:EB:AC:EA:4B:88:30:B5:56:50:DC:41:A6:FD:7B:1D:5B:82
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 019E1D22749D3213DA5B289D0393767633BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number: 1622
Signing time: Tue 12 May 2026 17:00:57 +0000
Manifest this update: Tue 12 May 2026 17:00:57 +0000
Manifest next update: Wed 13 May 2026 17:00:57 +0000
Files and hashes: 1: F71lf1rO3_j_YrGDLp8vXCnWwNQ.roa (hash: 2T6cEG+G6vR7CgItj3CD3tb1JHo1M1LaioFUbAKMaFQ=)
2: KbGZziqCA41JgOpe8AUOSiv8rIM.roa (hash: MBAhT/6sVckMLfrlu1S3S4sTHwbcNuOAQSyBUhp+xNk=)
3: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (hash: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA=)
4: Wgv3nP3KPCzK8Vc3Ujwc5tCZFEY.roa (hash: sZiUtGsuan8lIISLSvNoUUBLxQveJeIACDPYwQFWZys=)
5: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (hash: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU=)
6: ba1PPFUfJQPbN0qUaPYUh_lra00.roa (hash: io880q/jxrQW2nbvQeP7+TanhHJv6EExV9pj2tnHEls=)
7: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (hash: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw=)
8: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: GT/OFySHDkujvurzvj4Rcj9T2LLU3h597YJ9z6XPjt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:74:9d:32:13:da:5b:28:9d:03:93:76:76:33:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: May 12 17:00:57 2026 GMT
Not After : May 13 17:00:57 2026 GMT
Subject: CN=42ea8debacea4b8830b55650dc41a6fd7b1d5b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:40:9b:e3:e3:d1:e8:11:54:4e:ac:d8:1f:
9e:44:2a:a7:5b:8b:2a:cb:de:3b:e7:91:e5:7a:32:
67:cf:46:91:d2:d6:bc:93:72:43:12:8d:47:5f:c0:
ab:2b:21:35:5d:96:aa:6c:b2:4c:57:f8:b7:fc:9b:
42:b8:46:77:36:8b:93:23:b3:23:7d:bc:8a:f1:d7:
24:18:e7:ef:4b:06:58:7a:02:ef:a4:cd:56:cd:68:
63:d6:bd:04:77:84:1d:15:f1:9d:42:66:f9:17:84:
26:8f:60:08:96:9b:a6:f3:8a:84:ac:0e:e4:e6:5e:
e3:2b:24:6e:5f:1b:12:cf:3d:55:9a:74:26:48:4b:
21:67:fd:8b:64:1c:3a:f3:7a:0e:28:98:b2:e2:af:
18:74:a8:a8:40:ee:69:b8:5a:c4:a6:0b:fc:17:f4:
7f:1b:48:ab:68:9b:f9:a6:24:70:5c:6c:0a:01:1c:
36:68:d4:4b:93:6e:80:ad:3e:26:f1:4b:38:a6:08:
2c:2c:ba:5b:95:00:23:d2:25:e7:84:80:ee:cb:2d:
f9:87:ae:12:f9:77:88:37:08:7d:e5:77:a2:ed:fb:
a4:84:89:0f:9f:05:5a:da:b8:e7:cb:55:1c:b3:fb:
e1:66:18:f2:c9:07:23:3e:7f:6b:8c:95:6b:ea:fd:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EA:8D:EB:AC:EA:4B:88:30:B5:56:50:DC:41:A6:FD:7B:1D:5B:82
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:73:99:3f:13:3b:e4:cc:0d:59:0e:cb:64:a4:ae:e8:8e:15:
13:2a:7d:c7:0d:13:d9:6f:ea:bf:20:07:fb:f6:e9:bd:02:fa:
82:ab:a1:21:be:e6:60:ff:65:0d:82:46:04:65:a5:bd:19:b7:
bc:35:b1:cc:07:0a:4d:4a:67:b8:05:4d:c4:34:0c:a7:75:aa:
39:1b:96:42:63:f3:bc:c6:ea:34:9c:06:41:91:47:fa:68:ad:
5b:8d:39:b9:7e:57:64:61:8f:a6:27:42:c3:67:55:45:15:ad:
c4:52:72:c2:b6:54:e6:68:1e:ad:9f:49:8b:be:2e:b3:dd:c8:
ff:1b:87:66:37:0b:47:70:76:e2:4f:ef:42:92:34:35:8f:82:
c9:f9:ac:71:f7:ec:57:97:75:ae:cb:8e:3e:8b:52:4f:eb:c2:
32:b3:6a:b9:fb:69:64:38:85:1e:21:c9:b6:77:85:35:06:0e:
9e:fc:6b:eb:9f:a3:13:6e:78:a3:2e:a6:d0:12:eb:ce:7b:bd:
71:48:d8:0d:7f:98:20:a5:e1:80:40:44:01:51:79:e9:76:de:
cc:42:59:fa:51:13:e0:63:30:ef:a5:28:b5:1b:15:07:40:45:
7d:80:97:4c:b5:a3:e6:77:8f:0d:b5:f0:48:d2:f7:73:b5:c4:
f8:82:04:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:34 2026 by rpki-client