Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
File: yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json)
Hash identifier: sioPnR3SVmLkNc9S7RidHO5Kcqt9VNDXF/MDqJZREkY=
Subject key identifier: DD:29:DB:89:85:75:AD:08:A8:F9:DB:3C:D1:5A:31:C8:54:AC:0F:62
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial: 019E1DC79FB558675B81C757DDD84E1B6C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
Manifest number: 159B
Signing time: Tue 12 May 2026 20:01:22 +0000
Manifest this update: Tue 12 May 2026 20:01:22 +0000
Manifest next update: Wed 13 May 2026 20:01:22 +0000
Files and hashes: 1: YjABWXq1K-e_wEund0ue5nxCxOU.roa (hash: PI1L0CXgsAmafCm4unnTqfAaCBg3v/MEpLRsMdPwg9s=)
2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: vmLPaFDKOTfhAcksG062nwT/0UwXRZWu5FnWAh5vxWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:9f:b5:58:67:5b:81:c7:57:dd:d8:4e:1b:6c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Validity
Not Before: May 12 20:01:22 2026 GMT
Not After : May 13 20:01:22 2026 GMT
Subject: CN=dd29db898575ad08a8f9db3cd15a31c854ac0f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:d8:5e:23:d8:69:52:52:f7:db:a7:f1:0e:
50:8c:70:07:49:3d:2b:fa:ff:97:3d:73:64:b4:be:
ea:b5:6e:ae:2e:b6:70:cf:a9:7f:8f:81:07:02:47:
de:59:1c:03:f2:13:8b:31:07:8f:db:c7:32:07:2d:
4f:a0:70:9c:c5:a9:14:0a:10:2d:02:78:ad:9c:a6:
a0:22:6a:84:de:6e:8f:ec:7e:7b:37:60:c7:d1:e1:
56:58:de:a7:c2:21:49:08:82:f8:21:ad:52:50:80:
d4:c8:d4:04:b6:4d:88:b8:3a:65:18:16:97:5c:84:
d0:76:87:4f:05:24:68:86:1c:b2:29:76:3f:37:ad:
14:9f:2d:a2:2e:fc:b6:e7:be:9b:0f:38:d2:16:11:
d2:5d:4d:9b:70:13:c8:62:d4:a7:6b:5d:74:59:f8:
8a:0a:c2:8b:0b:b2:17:a5:a2:ab:47:13:7e:c7:40:
fd:e9:38:e9:26:06:2f:c7:17:c2:cf:02:79:2b:8d:
a2:0a:f1:5f:81:0c:03:90:f3:0a:78:da:4d:39:c0:
91:a4:d5:f2:f1:87:f1:40:22:60:73:3b:1b:01:67:
15:b2:6c:3c:84:99:dd:28:56:c0:85:fb:cd:f3:9d:
d6:cb:c6:9e:1d:83:cf:92:7e:a2:ba:d6:17:97:fd:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:DB:89:85:75:AD:08:A8:F9:DB:3C:D1:5A:31:C8:54:AC:0F:62
X509v3 Authority Key Identifier:
keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e2:93:32:fc:bb:44:f8:0c:4a:d9:16:09:63:d2:1b:30:c5:
99:d6:fb:89:20:78:a3:e0:12:ef:85:97:d1:89:13:1c:18:f8:
70:2f:44:cc:66:66:a6:4a:52:36:b7:1c:05:22:43:99:77:ad:
31:34:03:dd:61:d2:d3:c4:55:11:61:85:d6:68:95:97:9f:c9:
7f:e7:76:44:88:2d:5d:d6:ec:37:a4:6c:fb:31:ce:56:cf:1e:
49:b0:21:b0:1e:b2:e0:1b:f6:87:c0:c2:25:a1:45:18:04:18:
13:80:9d:a8:d9:22:9f:1a:1b:5b:37:fb:84:0d:2c:6a:92:66:
7b:12:f1:27:9a:4e:89:44:51:2a:2d:42:f2:8c:cf:e8:3c:a5:
75:22:da:6c:47:1c:7e:6c:7e:06:50:44:0e:f6:81:6b:22:81:
0b:61:22:ae:9e:8c:a5:d5:11:5e:c7:c4:98:f6:1f:33:e7:bf:
38:a1:3b:c3:6c:9c:d3:b1:5c:78:20:44:9d:21:40:48:e1:01:
bf:c2:0f:25:eb:dc:5e:44:5e:ba:ed:99:23:dd:a3:e4:a1:97:
70:84:d1:91:f4:90:70:9b:91:a0:0f:d0:6d:52:16:7f:a6:05:
4c:35:f2:25:f6:de:db:67:47:c1:d5:3f:5e:b2:4e:bd:b7:32:
29:c0:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:06 2026 by rpki-client