Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: XQp5wp95TuKxSi5V5Evz7T3inxzWGqzXq0hkTaZXKCQ=
Subject key identifier: A0:C8:91:DC:1C:C3:94:DD:B4:B1:7F:DF:E9:4C:AB:11:3C:19:F7:97
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 019E1EA36706050AEF5A18247AD7C90F01CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 189B
Signing time: Wed 13 May 2026 00:01:25 +0000
Manifest this update: Wed 13 May 2026 00:01:25 +0000
Manifest next update: Thu 14 May 2026 00:01:25 +0000
Files and hashes: 1: D4tyxDwHbBDY6loeNMrI_qWSNIE.roa (hash: VUYKqJjCtizhOmCO0vEKUF1mkjsOrBaXggAOIPV76PI=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: xgC3nX8exCOqdz4cpbwoF9lQl/OuZ1177IcppGau8/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:67:06:05:0a:ef:5a:18:24:7a:d7:c9:0f:01:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: May 13 00:01:25 2026 GMT
Not After : May 14 00:01:25 2026 GMT
Subject: CN=a0c891dc1cc394ddb4b17fdfe94cab113c19f797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:59:50:be:14:09:3c:5e:66:4c:37:b2:22:
43:0b:10:32:83:61:b7:2b:5f:df:89:2e:44:16:7e:
6a:0d:4c:15:9b:b4:e9:44:f4:2c:1a:59:35:33:d7:
7d:31:c7:07:a3:85:8c:d8:8c:50:9e:ac:c6:3f:8e:
d4:55:d8:e3:ea:8a:dd:00:e8:10:c7:23:95:82:d8:
9d:f0:39:a4:ac:f9:75:d1:95:9a:5a:20:49:36:3a:
13:f2:0b:da:f2:3a:af:f1:62:19:93:8a:c1:05:cc:
0c:f9:0b:13:a6:4c:d5:97:4e:3f:d2:14:97:85:9f:
03:bb:a7:a5:a3:1f:4a:08:63:90:c1:5d:72:6c:1a:
10:c0:c6:98:28:63:a2:a8:3d:b5:0b:d1:a7:b0:f9:
2d:5e:a2:f7:87:0f:13:24:a2:66:85:00:00:8b:75:
30:e7:68:f9:cb:57:b6:b0:8b:a1:ac:fb:df:62:fe:
3c:ab:63:d0:71:48:af:c0:53:4c:e7:4e:6d:03:e9:
75:8b:78:1b:2b:67:39:66:97:6d:c0:f6:42:75:47:
a6:3a:b9:2c:d1:28:05:6f:2f:86:30:37:f3:cb:0c:
6e:ed:87:e5:e3:a6:d2:86:97:7f:09:09:04:2e:61:
f0:6e:41:ba:c1:a4:ea:24:25:fd:79:75:9a:dd:bb:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C8:91:DC:1C:C3:94:DD:B4:B1:7F:DF:E9:4C:AB:11:3C:19:F7:97
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:96:39:db:22:1c:23:70:ad:a2:fc:66:54:85:8d:76:45:01:
9b:59:44:54:2c:ef:35:30:21:54:7d:98:ee:e3:51:aa:89:00:
04:8d:19:90:6b:23:bf:2a:61:90:df:a0:53:1e:04:d9:f7:bf:
38:79:6f:f7:45:44:6a:fa:0f:00:8a:7d:2e:3a:d0:77:f5:cb:
8c:41:e5:2b:97:01:c7:51:6d:09:c7:61:b8:e0:70:ab:be:79:
d9:95:a6:84:c7:ea:35:45:9d:4c:0a:e0:21:33:dd:42:56:70:
86:42:56:44:ca:7d:fb:c7:ac:a4:28:1b:13:ba:33:b4:6b:16:
6a:fa:11:84:4c:3f:44:5b:4d:33:61:87:4b:22:01:ea:14:ce:
c7:8d:39:29:b4:e6:cf:66:c7:9b:60:fb:27:3f:a1:9a:26:82:
ba:19:ea:a6:13:3c:d5:e6:f5:3e:cf:ca:f0:4c:5d:9f:48:4d:
31:8d:d6:2c:38:18:44:d1:4f:8f:2c:f2:ca:ad:1e:2e:a7:0b:
65:81:b4:8b:02:04:38:b7:7e:9f:f9:93:1e:d6:27:ad:e5:14:
9a:76:6c:c6:fa:90:56:dd:ca:c2:b9:6c:96:93:fe:2a:73:93:
0e:89:29:ec:f3:5b:ff:8b:8c:e8:de:97:a8:71:32:72:03:97:
21:09:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:17 2026 by rpki-client