Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: mIl6i17yJrWjDPOzf5hDU7o/t7b8tgg7/uASR0LRE9o=
Subject key identifier: 2A:25:95:9E:C9:E2:B3:8E:71:86:1B:C0:B1:C7:25:6C:3D:06:5D:F3
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 019E1D910298D4B2E73B44B5F575284FC3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 19:01:43 +0000
Manifest this update: Tue 12 May 2026 19:01:43 +0000
Manifest next update: Wed 13 May 2026 19:01:43 +0000
Files and hashes: 1: 2BMOpp_wwQldET06QZPy2wGLMZE.roa (hash: o3jxLcUWsaBV2UnbMYTOzdFwg6geCgqlvEJuA1VSTfU=)
2: hoZI_9EArI1Si7uz13Ke8OnteiE.roa (hash: LayP+QLnOj4vcYwwGf7M4XCZtnOUkpFaK8bKqcrT3zA=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: BdJSVsDXCxjgCF1tCt+hcUqV01G/VkBsywukMevjTc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:02:98:d4:b2:e7:3b:44:b5:f5:75:28:4f:c3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: May 12 19:01:43 2026 GMT
Not After : May 13 19:01:43 2026 GMT
Subject: CN=2a25959ec9e2b38e71861bc0b1c7256c3d065df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cc:c7:b2:18:4c:65:0f:8a:99:87:ce:a2:ce:
d8:34:42:b3:d0:e3:7f:3d:90:1f:2e:f5:7a:d7:80:
dd:8d:74:30:f8:da:e4:c7:4a:9e:b0:0a:93:85:de:
26:2a:c1:45:d6:98:96:27:56:20:4e:12:55:d6:91:
ab:1f:f7:6b:db:36:3d:22:b1:87:d5:a7:74:27:b8:
f0:bf:18:8e:6a:61:91:ad:cc:55:1d:e9:f3:96:ab:
c4:cf:67:77:f3:4d:32:10:c7:95:d3:50:ed:3c:35:
e1:76:21:7b:e8:b5:b5:c0:d1:4b:72:0f:53:8b:15:
ce:22:82:cf:c8:e2:35:10:d1:0a:d8:86:c0:1e:e4:
61:c8:2e:1c:52:b0:65:c4:57:6a:9b:46:6a:4f:4a:
0f:bd:5a:eb:4c:02:41:eb:bb:49:02:ef:b5:e2:5c:
55:f1:e7:e6:35:68:3f:a5:0f:a3:ea:b6:d4:1e:36:
18:64:53:3d:82:8e:6b:cd:cd:1a:60:bf:c3:22:a2:
e0:38:96:88:08:d0:5e:97:f8:d8:7d:1e:3d:db:d2:
8c:08:19:28:3f:83:95:da:3c:81:fa:2f:a8:15:f1:
0a:3b:c8:59:a6:4e:67:97:b7:79:3f:07:0b:00:0a:
e9:86:67:6b:7b:fa:08:03:67:12:12:82:12:85:f8:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:25:95:9E:C9:E2:B3:8E:71:86:1B:C0:B1:C7:25:6C:3D:06:5D:F3
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0f:ca:11:0a:78:8a:a8:62:21:eb:c8:ad:45:8b:93:12:e9:
a1:20:bb:28:a5:5e:ef:e5:79:9f:88:98:55:dc:62:02:14:4c:
b8:df:b9:78:4c:e5:88:d0:7a:bb:85:26:43:0a:de:37:cf:3a:
98:57:c1:98:a3:df:86:ab:0a:86:23:fa:c9:7e:46:58:72:4e:
a8:fd:cf:64:4b:39:c0:26:8e:a8:1e:a1:a4:5d:1b:85:66:7b:
4f:01:f6:be:94:2e:7e:7c:af:df:4e:a8:04:c6:0c:fc:96:8b:
a6:cb:bd:d0:9e:28:5f:9d:ad:05:e5:d4:7e:08:26:a7:cd:f7:
a4:b3:b4:f8:fa:ad:53:ae:b6:63:47:11:c4:af:98:42:41:38:
c0:da:ad:c3:c6:72:5c:ae:4e:cf:34:61:28:8e:d6:2b:65:ca:
00:a1:a6:58:a6:dd:b2:6b:d6:6e:7b:f0:44:89:a9:04:05:3a:
8c:63:ba:b4:ed:7a:be:68:fd:5c:a1:43:15:93:04:f1:07:9f:
4f:8b:5c:b9:5e:e5:0a:81:5f:22:5a:fe:a4:60:91:57:92:72:
75:2a:f6:1e:a9:02:f7:93:df:1b:83:0b:69:48:ca:5d:7c:53:
2b:0d:df:15:1b:22:8d:cc:a6:4d:54:1f:78:43:56:db:26:c0:
83:64:aa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:00 2026 by rpki-client