Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: fJl8IwjEQo3yIRpbriEG7/VuYYHIS3bz/ojUU6c3yB4=
Subject key identifier: 27:C0:84:6D:F9:3F:D7:07:E0:B3:14:8E:40:03:E0:2B:BF:C6:4A:83
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 019E1D908E55962579B9D8E04A3AA7909531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:01:13 +0000
Manifest this update: Tue 12 May 2026 19:01:13 +0000
Manifest next update: Wed 13 May 2026 19:01:13 +0000
Files and hashes: 1: 3eahbNs7sLSlMwMQAPIK4WlF5S0.roa (hash: iShcDJZ7gmNtw4FSGePEabrCqu38c4kHe0CrQJ2Q7ow=)
2: MuKPEjpSeKLvjqZfVopVa-G44-Y.roa (hash: gXY94gXYWU1Pqibv85vvI+18JY770F42380MRYt28Gc=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: ZYnxiZKGk6wPk8z5lrFM8OJrEGGjx8TOoncNwKQXRAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:8e:55:96:25:79:b9:d8:e0:4a:3a:a7:90:95:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: May 12 19:01:13 2026 GMT
Not After : May 13 19:01:13 2026 GMT
Subject: CN=27c0846df93fd707e0b3148e4003e02bbfc64a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a2:21:74:f4:0a:d5:57:29:5c:e2:02:ee:e2:
fc:4a:5e:31:1c:41:e7:8d:53:80:a1:37:e5:f1:ee:
62:62:af:01:27:f0:f3:08:93:4c:2d:68:c1:95:d2:
11:ad:4c:80:02:26:e0:ed:5b:7e:4e:f3:ac:06:e1:
2d:3f:9c:ee:1e:a6:55:c4:98:c5:6a:f4:1e:1b:5e:
13:a6:4a:b0:f6:49:eb:ce:d4:3e:aa:03:da:a9:3a:
60:e9:da:c0:d6:fe:8e:82:3d:f7:dc:e7:10:bc:8a:
61:07:0b:49:23:24:60:ee:cc:a8:24:31:c4:9d:df:
8e:64:ba:7a:33:3c:cf:04:2c:f1:c1:56:12:25:8f:
3f:bf:c5:36:ee:8a:18:09:15:34:e1:34:e5:b7:15:
df:8f:88:e2:73:8f:c2:56:e8:5e:ec:e3:3e:83:e3:
37:0c:69:ea:2c:8d:ea:cf:99:62:80:37:29:59:ae:
69:af:49:c5:8e:09:f2:bb:2f:66:1f:c5:e7:e3:6f:
ea:5b:e3:40:fc:66:cc:28:98:59:1a:c6:04:97:db:
92:5f:2c:03:8d:92:1e:1c:2c:7d:e5:3a:08:9e:43:
2a:7e:61:3d:3f:73:5c:3c:02:84:ab:78:57:41:12:
6c:31:42:7f:5e:1a:ee:b7:6d:76:c6:38:fd:f4:5e:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C0:84:6D:F9:3F:D7:07:E0:B3:14:8E:40:03:E0:2B:BF:C6:4A:83
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:75:d1:11:46:43:7d:0d:4b:07:c6:6a:f5:cd:9e:d8:a6:99:
87:34:8d:43:f9:f8:59:c7:1f:7b:df:ea:ff:ea:53:0b:0a:88:
63:3a:00:a5:78:ae:32:4c:9f:4f:7a:d1:5f:7d:41:94:8b:6b:
be:36:ac:2b:b7:d3:c1:07:51:5a:81:1f:88:31:1d:e9:48:eb:
b6:fb:15:36:51:c2:88:42:26:92:e1:10:f1:d8:9e:8f:ab:06:
8d:da:45:1a:ca:3f:e0:6a:52:1c:ec:5f:13:69:bf:2f:20:a2:
9e:e3:b7:39:87:c2:93:42:b8:74:da:62:52:15:c8:e7:7f:57:
c3:88:df:4b:90:53:08:a8:f7:44:3b:d2:ae:17:f2:03:44:c4:
d1:8b:8f:ff:a2:8e:dd:2f:d7:83:28:eb:02:fe:22:b7:12:4a:
d4:65:bf:a3:3a:44:1f:53:84:76:40:9b:5f:09:b6:c6:53:de:
b6:51:f8:96:aa:b7:75:89:dc:a2:cb:9d:79:a7:c9:ed:9d:bb:
f9:8a:1b:ec:ab:cb:c3:2f:bf:11:be:32:7c:91:e6:ab:b3:8c:
fa:59:ce:89:55:b3:75:46:46:f1:61:ae:3c:79:96:ad:45:bc:
21:31:bf:87:47:a9:ed:ec:ca:32:e1:0a:8f:be:22:7e:28:86:
b9:98:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:09 2026 by rpki-client