Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File: yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier: qAwckopw2mKcLlYLhif0nAu7EyTT3tL3g+ZqakXs/DQ=
Subject key identifier: B9:BD:8D:9A:BC:08:B9:8F:E4:B7:D1:1C:F4:DF:D1:B3:10:21:7D:C5
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 019E1FB5A57D946A33CE488A0A2C51753A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number: 1911
Signing time: Wed 13 May 2026 05:00:58 +0000
Manifest this update: Wed 13 May 2026 05:00:58 +0000
Manifest next update: Thu 14 May 2026 05:00:58 +0000
Files and hashes: 1: HqGTGlJNCwD8iNo3O2yITxmeCwc.roa (hash: lYCD20DI0iQge3ODQugwP5cP7vicqwIE+12AsMdZEFg=)
2: PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa (hash: ECesKQ6eT4CAViBPjtKG3epmntO2VSEJzUCQqkLEU1U=)
3: aFAces1pfL2Gf7A82Ua9HdY5M_8.roa (hash: ihoy12eYWp6w4F3+SZfOyRsI/MGwgD7ZEiY1ooLQCpo=)
4: aPG3EYw2VofOCEzLOdUvwSZioag.roa (hash: Wotu54IXEWdJ5q1KogRg82/7w2mseyamEfZGS9yMPLs=)
5: sR1oPQtW-Makp0q2GEwGGGWP6-4.roa (hash: 42QylWBVPcRn+sQtIzfk5m8WJP9tWYlxV8MBA5fdb50=)
6: uNpGJTkDf9vfyQ-rWsMHOZPhKY4.roa (hash: DmupEvIL4K/NQQ7P0WNq04y0+5V0bCdj/6N1toh/r7g=)
7: yoOlkunfyIDQIpu8hSJPuV67N8k.roa (hash: 3vGjw6ITVAmFgqvDm6vNVM3T1UQ++9p2OwqdlJ0wKCw=)
8: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: Q0uhpqxE0LhC/dCWjFr+YHy5T93wxs6it6OF92jVDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:a5:7d:94:6a:33:ce:48:8a:0a:2c:51:75:3a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: May 13 05:00:58 2026 GMT
Not After : May 14 05:00:58 2026 GMT
Subject: CN=b9bd8d9abc08b98fe4b7d11cf4dfd1b310217dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:9a:91:02:c1:f1:6b:86:70:51:4b:f1:ea:
3a:d2:d7:da:76:67:9f:0f:a1:6b:6c:e8:52:cc:43:
62:b7:64:21:93:52:e7:e9:84:1c:60:86:40:47:3c:
cd:a7:31:d4:ed:54:ba:b9:f0:af:92:67:5a:47:68:
26:e8:a8:6c:2c:4d:4f:fd:a6:7e:8f:99:f2:23:ad:
67:50:51:28:35:8a:1f:57:b4:2a:de:ea:94:80:18:
ed:82:01:61:96:81:9f:5b:47:43:42:18:7b:11:3e:
b7:60:9d:64:1f:6f:19:09:78:61:24:a1:74:00:44:
d4:05:17:59:ca:57:87:06:3d:98:56:b0:a5:c0:8a:
c3:c7:5c:b8:8e:cd:01:7f:98:d2:2a:c6:ca:f4:96:
07:d2:1a:d5:6b:e5:9e:1e:6c:e5:c0:0b:09:54:5a:
10:29:22:95:5b:79:18:31:28:da:43:24:cc:e0:ba:
f7:94:d6:2c:bb:45:6f:cc:00:66:d8:7c:db:19:d1:
f3:aa:dd:b1:ce:e2:9c:28:fc:d2:50:bf:0b:e3:07:
db:53:be:fa:5b:ef:56:6f:e7:65:a3:ca:db:29:28:
82:9c:3b:c5:ea:d8:7f:1e:24:3c:a4:26:9b:34:82:
f0:77:b0:40:8c:2e:c9:88:f1:7c:97:c7:9d:fb:e5:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BD:8D:9A:BC:08:B9:8F:E4:B7:D1:1C:F4:DF:D1:B3:10:21:7D:C5
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:63:21:7d:52:36:41:cb:4e:80:75:8d:2c:29:ba:7a:99:37:
9d:e7:69:f3:63:06:dd:c5:92:b0:99:f8:31:2f:65:6d:df:bc:
a0:50:d8:4b:23:30:80:a6:3e:d4:c6:78:92:d8:8d:ca:52:7f:
95:8a:11:98:ad:08:1a:13:fd:c1:04:f0:5c:62:25:e7:bc:04:
8a:4f:f6:6a:6d:28:bd:55:94:6b:bd:c1:5f:db:bc:42:39:c8:
ae:35:ee:41:41:f3:0e:c8:86:a9:68:c3:b9:56:78:58:a4:f5:
0e:ad:75:4c:41:35:89:b1:ee:b1:4d:41:87:0e:3d:1b:63:b7:
88:0d:bf:dc:53:97:dd:4d:32:70:f9:bb:17:4a:f7:5d:6b:91:
fb:73:ea:bb:4d:ba:ce:bb:e6:67:29:a4:fe:12:ec:4f:db:bd:
78:b1:cf:b5:c8:fc:84:67:0a:4e:03:7f:b1:0f:20:af:74:92:
ed:00:f8:31:40:db:6c:15:d7:9b:d1:89:48:46:2b:ed:c6:25:
79:4c:02:9d:e7:99:ed:bc:95:35:5e:c3:ce:23:39:06:14:1c:
95:a5:d9:28:94:c7:8e:20:2f:85:dc:9f:be:b5:f4:91:10:46:
0d:7c:b0:0f:3e:f1:5d:e3:6b:ca:13:8e:e9:fc:00:3c:49:94:
80:a0:26:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:01 2026 by rpki-client