Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: K7IvVhuFr3u+YAQ9y3RQnJHhreAzk9DjtUfaRKPKxww=
Subject key identifier: 05:81:64:E0:60:CB:D1:3E:C4:BB:91:59:E7:4A:13:87:5C:7D:20:16
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 019E1EA2CCFB79F4601BF5640343457C6924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 00:00:46 +0000
Manifest this update: Wed 13 May 2026 00:00:46 +0000
Manifest next update: Thu 14 May 2026 00:00:46 +0000
Files and hashes: 1: EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa (hash: WN1W+AcOMLOyw+Z7FxISMQd+TynXYraLEQDBrawgt44=)
2: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: vW6OUz9vfgGum7ukX7NjNTU4h/+HO2jfsGRSnORZ0A8=)
3: _tJiHAhGvLVPtYOMlLKCBsGuaeI.roa (hash: 0t/lW4HNsvLF4G+Bu7vWjQlegvcFtdB8mR4eqRFVFzU=)
4: d-N2YiUYpoOLPomAp2JVyicVc40.roa (hash: zETEJQC7tB8lRhNeIGpvA+FfF5ncGBNLatmPmvMsTNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:cc:fb:79:f4:60:1b:f5:64:03:43:45:7c:69:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: May 13 00:00:46 2026 GMT
Not After : May 14 00:00:46 2026 GMT
Subject: CN=058164e060cbd13ec4bb9159e74a13875c7d2016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:f8:47:63:42:bb:c2:aa:a0:ba:e5:a5:b4:
1e:e7:c7:df:40:7d:b4:10:32:32:41:5b:7d:41:07:
9c:0b:4c:a5:1c:0a:26:38:d4:e3:90:e8:c0:df:0f:
95:ba:36:73:21:b2:f8:ce:10:0f:0e:54:80:69:8b:
8e:dd:f3:1c:2d:76:8e:31:e1:b2:a1:41:0f:77:85:
78:db:f9:06:07:f5:3b:d0:66:cd:cf:0a:4c:ac:60:
fb:3e:fd:21:0f:63:11:a1:56:e6:0b:40:2b:4b:3a:
64:dd:f3:89:d5:a6:e5:1a:50:2d:1b:7f:6d:fa:0f:
d5:fd:1d:7d:e8:70:db:c5:76:55:1f:b2:28:3e:1f:
30:79:f6:24:43:08:3d:d9:34:c0:4d:b6:bd:10:d5:
b4:a5:ae:57:10:cb:85:16:4c:e4:b8:e7:6e:73:f6:
37:46:14:10:55:2c:1f:31:7e:22:50:12:26:a0:40:
22:eb:b3:59:d9:c7:12:9a:bf:2e:45:65:1b:19:8d:
8b:de:4f:3a:df:bf:06:c3:63:b4:dc:49:e5:9f:c4:
a7:32:a7:1b:da:a7:f1:a7:3a:60:a6:89:89:7e:09:
30:1c:6b:a9:15:c5:cc:3f:66:ef:e4:0b:3b:38:05:
ae:c8:f3:cd:88:bf:cb:7e:c3:4c:4f:81:d1:99:44:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:81:64:E0:60:CB:D1:3E:C4:BB:91:59:E7:4A:13:87:5C:7D:20:16
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:17:85:eb:47:78:31:13:0f:5c:d2:11:d2:5f:4b:f3:bb:f2:
39:f0:c3:4d:5e:bb:ce:78:3c:a0:9b:9c:df:68:0e:3c:25:e3:
dd:a7:b4:60:44:64:4b:0a:ad:5c:d5:d3:d6:42:7d:d6:63:b5:
8d:f5:f7:20:77:cc:0a:25:54:f3:33:fc:4d:5e:be:12:3d:ad:
e7:6f:3f:bf:df:f9:e2:98:48:ac:7a:83:c1:ee:08:ef:9e:84:
f9:4a:37:86:bb:ad:3b:38:65:5f:f5:cb:30:3b:a7:77:ad:df:
13:87:78:04:2c:7a:dc:fd:5b:68:de:59:33:bb:33:02:04:3f:
b6:7f:fb:af:c0:ae:9e:4a:b4:ba:ae:c7:c5:65:f1:a8:a1:f5:
48:e6:1d:3f:02:cf:67:b5:c3:05:a4:db:13:69:20:96:85:f8:
45:2b:a2:a2:c5:ed:0d:07:e2:c7:ee:6a:08:ab:6e:6b:c1:0d:
ef:30:cd:66:f9:a8:56:85:41:8d:77:56:b1:d0:82:4c:6d:37:
64:08:ca:75:34:8c:62:25:c2:a2:99:9f:24:d4:c6:80:67:2e:
f5:c2:37:6b:45:70:84:b5:f3:82:79:59:03:0b:3b:a0:32:3f:
f4:66:0d:89:e6:a5:40:97:a5:17:e7:17:18:95:b7:af:50:91:
75:c8:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:30 2026 by rpki-client