Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier: Lca44Efz0zQ767dZyn7hVCHIz3l/fbmMVCEovelqR0I=
Subject key identifier: 0B:7A:EF:EF:31:86:42:6D:D2:0C:9B:F9:87:99:77:CE:F3:01:26:F1
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 019E1CB5621EB34DDE471940488A10FAA452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 15:01:49 +0000
Manifest this update: Tue 12 May 2026 15:01:49 +0000
Manifest next update: Wed 13 May 2026 15:01:49 +0000
Files and hashes: 1: _xsLd4qUBjb6_7VD2WkixJfaVoY.roa (hash: nohQUdIFn7a7lR0P0bYRkbo26wNDU405wKs7TmIgPaA=)
2: jyhNKA-sqNdbKhKjDCM2oFmxAKA.asa (hash: +kK89jyXB9T4Lltl2vWeU7yjctVLp1sfe0s6KqTiyYE=)
3: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: okyhrJY2kO3QBD2SPfdqBngyFAc0mTcd/FOB5teEEvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:62:1e:b3:4d:de:47:19:40:48:8a:10:fa:a4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: May 12 15:01:49 2026 GMT
Not After : May 13 15:01:49 2026 GMT
Subject: CN=0b7aefef3186426dd20c9bf9879977cef30126f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:c6:a9:15:2c:27:bd:71:db:f3:07:d1:9a:
8c:40:bf:22:f7:99:13:ac:76:40:0c:cf:ac:39:08:
be:84:9c:3c:f0:28:7c:59:38:f3:89:a5:ac:c8:c2:
0d:5f:1c:df:9e:7e:fc:a7:39:47:0d:d2:b8:9f:11:
16:3b:aa:ef:f0:25:ca:c0:ca:46:cd:56:ca:c1:ad:
90:5e:ef:74:1b:b5:cb:b6:95:68:fe:15:e1:dc:b6:
c3:24:6e:4c:dc:ad:f3:0a:7f:71:6f:44:2a:10:6b:
66:f0:e6:72:db:60:5c:ba:d1:84:c0:52:b3:d7:e5:
75:05:11:fb:96:ee:a5:02:34:c7:ad:14:df:53:d3:
ad:dd:0e:f5:70:df:24:5c:f0:21:30:30:b0:d2:70:
fd:33:8a:8e:1e:59:16:62:ab:ec:e0:36:13:cc:59:
68:75:05:c5:04:81:e3:26:11:60:19:9b:47:97:65:
61:bf:8a:3d:90:b9:bd:8f:03:9f:bb:a8:31:77:6f:
98:56:a8:14:b9:c8:ae:38:4b:60:b0:08:33:9e:55:
50:c6:df:25:0e:fa:86:8b:65:49:6b:a3:71:c2:66:
ed:ac:54:6a:45:c7:70:34:47:3d:aa:d4:31:71:e1:
0b:37:e6:f4:50:fd:f9:c2:36:96:eb:8b:0d:18:45:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7A:EF:EF:31:86:42:6D:D2:0C:9B:F9:87:99:77:CE:F3:01:26:F1
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:61:29:22:23:e6:14:ab:fc:94:9a:fe:0f:dc:ba:1c:bc:06:
60:77:1d:46:39:c9:55:e3:e4:fc:8b:53:60:f4:0e:be:53:92:
de:3d:bf:02:59:97:7f:b4:2d:29:bb:99:fe:45:9c:c6:57:99:
1c:30:2e:7a:5d:67:30:40:9a:d1:a8:6e:dd:9a:0f:65:8d:03:
ae:c1:2c:65:80:c0:94:30:90:59:37:c3:ae:82:de:16:94:b3:
a6:7b:c3:30:c9:80:f2:5e:3f:4d:62:84:ad:25:be:1b:c5:16:
84:5f:d8:ea:b4:3e:16:46:fd:6a:fd:b2:af:c3:a6:a3:f6:83:
51:a0:82:c8:8a:cd:79:e3:ef:cb:0c:b7:80:64:e2:f4:fe:83:
6d:2d:28:8a:aa:e6:cc:7e:71:84:31:00:3e:67:16:7d:7e:b8:
b7:8f:be:2d:54:55:e4:89:e7:15:8e:44:18:21:77:be:5c:46:
4b:85:d0:7c:2c:27:14:99:b8:db:a3:c7:7c:5a:c0:29:90:70:
ca:e1:99:aa:c7:bc:e4:65:43:1a:d7:12:12:02:94:e2:74:20:
5d:65:61:81:86:12:51:a2:45:97:71:c7:a3:0c:90:b7:3e:da:
a0:14:40:16:2d:b2:7a:99:d6:fb:08:9f:6b:d0:7c:a8:43:81:
00:fc:78:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:50 2026 by rpki-client