Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: Jwy7qzIUZX7G7X6cwrWEEMQVmDDfAI7Fq/F6WCc3OH8=
Subject key identifier: C9:FE:8F:BB:22:8B:12:8C:DA:67:2E:DF:5A:2A:07:4D:92:FE:0F:BB
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 019E1D90B1D5B05EC73C73F676195FE02ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 0F20
Signing time: Tue 12 May 2026 19:01:22 +0000
Manifest this update: Tue 12 May 2026 19:01:22 +0000
Manifest next update: Wed 13 May 2026 19:01:22 +0000
Files and hashes: 1: 4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa (hash: 0CyjN4fDt2gePEzz6GNI+6v2hHdu94zd3doXA9mCmrY=)
2: E7S8kk0v-3rKEWlslioybHa5U2o.asa (hash: CrfGOpfT92BFeNnmG2NLzbIsZjJeDSaj2z6bEyCVnBE=)
3: P5w8UdbfAfDa1DxOi4VrhWTzLpM.roa (hash: +0DQfwomOYLD75ppkH2FpMEhDzxTGpHuszvhO6Ri7kw=)
4: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: fRr0Mmw+qDSPsoPbLebj8wqEnGfpxa6jhVk+DaQxpCg=)
5: YrZcQqizcm-6Ws7265yR5ro3QoE.asa (hash: MFAOo3Xix00XFxAQiqGQoGajsrjp1l0fhfv38HvzhSI=)
6: fAgTSS_ONStFnLvEGPMgmGZBmpo.asa (hash: TOVMYJAfL34na7IHXLihlNeKoxMB/uFVliwHd1D3Uzc=)
7: i2ZN82VS7VSqjYAHCBTpFBgLiEo.roa (hash: gw1xxGQ0BqeQr6XFI4+gKsjUN/m1I0WJsAj9BQrH0uA=)
8: uq7KjFfupPB_i8cccfycTh05AaQ.roa (hash: q7ZkYvBa6WisIOhSf12hByjNMV7uSrIgT5csQL8UbvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:b1:d5:b0:5e:c7:3c:73:f6:76:19:5f:e0:2a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: May 12 19:01:22 2026 GMT
Not After : May 13 19:01:22 2026 GMT
Subject: CN=c9fe8fbb228b128cda672edf5a2a074d92fe0fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:fa:6e:84:ff:bb:a9:1b:d4:2d:3c:46:fa:
ee:0d:8d:38:2d:4f:a2:3c:ad:94:07:f3:ff:ee:59:
66:77:65:16:41:77:4a:e1:89:35:e9:a8:ae:50:e1:
23:83:9d:9a:42:87:23:31:01:e0:7c:e1:57:90:bf:
b8:c4:46:d2:ec:6d:fc:41:2d:ad:6c:64:d5:57:9e:
d1:ab:3b:6d:a7:2d:8b:b9:e9:1d:f3:47:09:0f:87:
b2:ec:ea:ac:25:cc:4f:38:fc:f2:32:7c:f3:39:52:
1d:29:8e:da:f3:72:62:8d:f1:5b:e7:1f:a5:f1:39:
ff:48:c2:d2:1b:98:4e:7c:14:64:b6:28:34:ee:98:
ef:52:16:01:c7:84:ab:33:aa:e7:41:06:a5:20:d2:
e6:d7:09:db:34:00:9c:a7:e4:fc:35:86:ea:ef:8c:
c6:ab:c2:4e:57:21:f2:49:5e:d8:b4:3e:5c:83:3a:
41:8b:ac:ec:ad:6d:38:46:63:b0:f3:24:13:e3:af:
fb:0f:07:dd:77:25:12:5f:24:ca:22:bd:09:2c:93:
15:f4:e6:20:00:54:1b:ec:ec:07:db:2a:30:28:e3:
80:5d:75:7a:ac:ae:ea:c3:ca:b6:d8:eb:34:f7:f6:
fc:7b:af:56:bc:31:1f:a5:22:fc:f2:0c:4c:f3:da:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FE:8F:BB:22:8B:12:8C:DA:67:2E:DF:5A:2A:07:4D:92:FE:0F:BB
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0e:08:ec:1c:cb:59:b9:64:2e:a9:1a:c4:f0:c4:0a:1e:25:
8d:c5:d3:06:bc:1d:2d:4f:ec:19:53:69:4a:76:7b:66:b5:bd:
ab:61:be:25:9a:45:71:f8:62:66:0e:8a:0b:fc:ca:a1:14:66:
e6:2c:75:85:3f:46:d6:5c:ab:50:8e:fc:06:e5:6e:2d:64:b1:
a5:ac:b4:e6:0a:5d:1a:d8:56:dc:6b:ca:bd:a6:db:09:e3:e8:
26:52:41:53:72:d5:bb:53:83:4b:c9:e7:b5:ac:4f:13:21:e3:
64:9c:76:6a:87:ad:49:82:27:ad:02:41:0f:cd:e6:ee:78:fb:
33:1b:e2:cd:02:56:9a:20:59:f1:31:85:07:0c:22:5d:7b:25:
e6:a0:76:84:16:3f:95:c7:54:60:d3:e3:e3:4e:44:3d:9e:5b:
c7:93:81:26:62:c3:22:3d:35:9f:b3:32:3a:3b:96:cd:47:dd:
f6:2d:d7:33:51:aa:c2:35:34:1d:6a:83:b0:f8:84:54:60:1c:
ae:c5:84:9c:72:3d:8a:44:87:b8:eb:5a:fd:21:ae:90:90:38:
d8:64:74:84:b0:32:af:db:25:dd:f0:fe:20:89:97:cf:9a:1a:
3d:50:98:2f:98:36:6e:3f:e3:11:cb:80:55:a5:83:a1:af:c5:
b6:76:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:37 2026 by rpki-client