Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: /BYr6XHDJnc6yFpRtCcUeVNHVmAhyn/lT8THNDj2oww=
Subject key identifier: E1:1B:F7:0D:29:8F:D1:3A:F8:B6:54:C7:EA:69:73:B7:01:5A:0D:BE
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 019E1D906E6F30B5DFFDE5EC66802F96359C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0BE5
Signing time: Tue 12 May 2026 19:01:05 +0000
Manifest this update: Tue 12 May 2026 19:01:05 +0000
Manifest next update: Wed 13 May 2026 19:01:05 +0000
Files and hashes: 1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: ClYr5Y4wnUG/e8LLGhYiduphkZ/DrjV4EgTm0z26xNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:6e:6f:30:b5:df:fd:e5:ec:66:80:2f:96:35:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: May 12 19:01:05 2026 GMT
Not After : May 13 19:01:05 2026 GMT
Subject: CN=e11bf70d298fd13af8b654c7ea6973b7015a0dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:65:f3:08:8b:87:09:72:bb:75:c0:2a:98:
81:ae:f0:c2:3a:ae:41:5a:e0:84:52:1d:c5:49:68:
2f:6a:90:8d:4d:64:cb:76:1f:5f:23:3a:07:15:19:
6e:6c:e7:ef:7c:27:21:3e:12:50:f3:4e:01:f3:d9:
3b:5e:0a:a2:93:1c:18:c3:be:9c:7d:1d:83:bd:33:
d2:03:be:1f:b0:5b:57:93:c2:13:f9:12:a2:4a:81:
d1:99:52:3e:84:2e:ff:f9:30:14:3c:fc:ca:d0:3e:
dd:34:cf:3e:f3:5b:51:5e:47:c4:5e:b3:6e:83:da:
52:5b:85:17:4b:7f:83:bb:20:35:a4:95:ba:d4:2c:
1d:8f:66:9e:4a:a0:6b:a2:5e:91:e8:7f:b2:70:47:
57:23:4a:bb:f6:b9:80:33:36:8f:8f:0a:b4:20:86:
72:0e:a1:83:cd:ca:00:ff:3f:43:db:bf:43:18:e3:
a4:ba:3c:cd:d5:cc:a2:d6:52:ee:1c:a4:8d:18:2b:
f9:67:ae:df:80:82:28:21:b1:be:f8:27:7e:ae:cb:
22:9e:bf:4d:89:3f:b2:2a:8b:dc:bc:05:6a:47:12:
f9:bf:4c:b7:60:96:bc:48:0a:83:4f:9e:f3:20:a0:
42:10:f6:2c:8b:ba:3f:a8:77:f6:2d:f8:fd:8a:cb:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1B:F7:0D:29:8F:D1:3A:F8:B6:54:C7:EA:69:73:B7:01:5A:0D:BE
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5f:4c:19:8e:c9:b9:3b:01:df:53:f9:a1:de:9b:0d:c8:07:
3a:93:23:14:b5:59:52:a9:3a:a4:69:32:ad:04:0b:4c:4b:a4:
c3:62:64:fb:7c:45:a7:3a:ae:e9:77:50:d2:31:c5:82:c6:39:
88:e6:90:85:c3:96:a9:cf:37:9d:ae:ec:bb:06:8f:60:33:91:
a8:a4:f6:d3:f4:7d:09:8f:0e:c8:b3:46:1b:2d:eb:d1:18:93:
6d:f4:5d:13:dd:97:1b:06:08:10:92:47:d1:00:db:3c:5f:d0:
fb:19:d3:32:90:22:64:0e:2d:97:82:6c:c9:c4:a7:ea:d2:36:
f4:0f:f1:fb:b0:d9:01:82:2b:c4:14:c6:7b:59:4b:36:98:a9:
b0:75:27:4e:45:98:d4:f8:38:e2:9a:00:3d:17:3b:ec:2e:f0:
47:20:5a:c5:29:7f:80:10:95:75:53:c8:de:cf:93:26:c0:ec:
4b:9d:e4:24:9c:77:e0:e9:fd:c8:e5:a0:e8:33:7e:37:b3:26:
16:8c:0f:b3:f2:9e:9d:a9:43:53:6c:c1:fd:ca:05:8d:ec:17:
db:8a:3c:c8:81:51:f0:c8:77:6d:0e:d1:65:6b:ae:1a:30:7d:
74:c3:2b:59:ee:36:58:4f:2a:cc:ad:64:ba:e6:26:0a:42:9d:
f3:a9:99:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:16:19 2026 by rpki-client