Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
File: yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json)
Hash identifier: egTON37K6PNm8xoMkahXvHdYDmtcEYaF4T78o1OcYc4=
Subject key identifier: 59:A2:B5:13:0F:4D:9C:51:C0:7B:C5:00:4B:90:A8:7C:B0:D3:C6:3F
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 019E1F7E8547CABE7CC66E2EFA1A9343F9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
Manifest number: 05D8
Signing time: Wed 13 May 2026 04:00:45 +0000
Manifest this update: Wed 13 May 2026 04:00:45 +0000
Manifest next update: Thu 14 May 2026 04:00:45 +0000
Files and hashes: 1: DHHudebUM3yKARxlaZ2YpDdj_10.roa (hash: 4IZZF7kG21QLytTXVu8J+ZgosQ4Y4zImjPdBHl+JNss=)
2: eCIxVJBlZJg4A1PAGkOvPg7aiUM.roa (hash: DjYNeiW4ymro6Kp8UT3pCBgwHWIhN9hxIR+IH3BcZMQ=)
3: i_xckZzjEkRw31aSrJAsV3dFCLE.roa (hash: autrGXMDWT9GWUylEMorom4KkZ2EMR11IzzFRFDlO9U=)
4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: Jvzs4zTV7vcDKEZeRFkGcX/E9qkXGjMYb/8yILm4P6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:85:47:ca:be:7c:c6:6e:2e:fa:1a:93:43:f9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: May 13 04:00:45 2026 GMT
Not After : May 14 04:00:45 2026 GMT
Subject: CN=59a2b5130f4d9c51c07bc5004b90a87cb0d3c63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:fa:5d:fa:36:95:61:be:a8:4e:e5:c0:2f:
ff:1b:4a:2d:25:fa:f8:1c:db:44:07:92:58:e2:58:
a1:e3:04:58:7a:c9:ad:ed:4c:66:ed:ca:ec:94:2f:
ae:a0:fb:24:0c:ea:06:e9:6d:30:52:de:b1:f2:0d:
07:6d:35:c1:43:24:10:c3:ce:56:d5:34:2b:8e:5e:
00:4d:1e:46:26:cf:b7:23:3d:25:61:91:7d:cf:29:
f9:6b:21:fd:ba:e0:37:82:4b:b1:a0:b1:00:97:0a:
85:13:1e:e6:4a:2e:cd:ec:79:46:9f:91:56:ce:72:
a4:e7:28:a9:10:4f:8f:b2:eb:3a:d1:e4:90:b2:88:
c6:aa:07:74:7b:f5:1a:cf:31:c2:64:76:37:c2:85:
a8:4d:e0:85:79:e5:02:93:28:b4:2c:ff:d2:91:9e:
ca:18:99:59:07:7d:ff:9c:b1:df:df:34:42:10:be:
d5:fb:2b:c6:96:7c:f7:01:2c:62:03:bb:38:55:04:
9d:27:38:09:b4:6c:f6:64:60:79:b0:d2:12:07:7b:
8d:ca:84:02:aa:56:3d:48:1c:76:89:a9:5a:06:e3:
3c:8d:4d:5f:24:d0:02:be:64:f5:12:af:72:a3:75:
55:9b:e4:f6:a5:4f:bc:95:ef:3a:73:9e:06:fb:0e:
95:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A2:B5:13:0F:4D:9C:51:C0:7B:C5:00:4B:90:A8:7C:B0:D3:C6:3F
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a1:ea:c9:d4:f3:b4:0d:8c:eb:5e:e5:e9:c9:73:53:b7:9c:
08:ef:01:e7:39:1c:c0:fa:ed:f2:92:03:0b:1d:b1:16:60:37:
8e:15:e3:43:29:44:45:2d:f1:c2:41:a2:04:bc:6d:cb:11:a0:
4d:a5:84:92:d0:47:2b:fa:2b:52:9e:55:06:d4:68:b8:6f:84:
6d:5c:58:36:98:2f:ba:ec:01:b3:b0:ff:dc:79:2d:0f:1a:ea:
99:37:4c:2c:8a:eb:8b:f3:35:07:fd:b5:9c:20:4f:4f:26:ca:
4d:be:d3:95:4b:0c:c0:77:15:a5:cf:2c:d6:9d:49:45:32:98:
f5:60:29:64:c6:4c:0c:18:90:9b:23:a4:fb:f9:e9:1f:a8:33:
53:07:3e:90:71:59:64:96:30:c0:bf:5a:62:41:f8:19:e8:99:
40:c9:e5:aa:98:4c:b7:02:11:3c:dc:38:39:12:91:de:0d:d1:
c5:82:9b:73:1f:f2:3c:a7:df:5b:41:4e:aa:aa:a5:29:15:e5:
49:78:ee:66:2a:ef:76:b5:fa:05:7d:53:fe:6c:6b:9d:1e:ff:
77:67:d3:2e:3b:db:a4:9d:a0:34:1c:0f:be:b8:5b:3a:33:b6:
f4:ea:7f:2b:4d:b7:ff:fd:da:b2:57:33:e0:43:ed:c6:37:7b:
73:eb:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:21:06 2026 by rpki-client