Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
File: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft (raw, json)
Hash identifier: FIt0ZAr68khs3j8ulkpbcSq6lTao1c2oqBy8Gy+PB3c=
Subject key identifier: B0:A4:9C:24:46:52:B5:F2:5F:9C:11:7F:BA:29:63:B2:33:05:1C:25
Authority key identifier: C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
Certificate issuer: /CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Certificate serial: 019E1C46B5BBD68AFD5B292FBDD620F777F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 13:00:56 +0000
Manifest this update: Tue 12 May 2026 13:00:56 +0000
Manifest next update: Wed 13 May 2026 13:00:56 +0000
Files and hashes: 1: DQIguyk5vsbJ0WUq91-VKOsHIzc.roa (hash: 7wVw6qQqVdHA1hWjDiCXVImmM58vnAnP1SdP0652WV8=)
2: iMRV9NXr5k8zAqOBO4S0jdl29Sc.asa (hash: TVMdwIlpOvO/2aMdNbNnt4sElpinwCTHk7HOCPzOcpk=)
3: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl (hash: PPnttCn5BW4NVqLVS313vbvlXKeG6h2fa6bvqQhKoFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:b5:bb:d6:8a:fd:5b:29:2f:bd:d6:20:f7:77:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Validity
Not Before: May 12 13:00:56 2026 GMT
Not After : May 13 13:00:56 2026 GMT
Subject: CN=b0a49c244652b5f25f9c117fba2963b233051c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:a7:c5:73:52:c3:f8:59:5c:88:3f:99:b7:
96:f8:17:2a:15:9d:c4:91:6d:9a:24:80:55:f2:10:
bb:e5:7d:4f:5d:3d:20:38:e6:b4:8e:40:3d:07:a8:
51:c0:b3:9f:fe:e2:c9:00:9f:f0:07:c6:44:f3:a2:
df:2a:f2:8a:ec:14:1d:a3:18:f8:cc:8d:2b:9b:dd:
d7:bb:f0:1b:65:71:42:5e:8b:b1:a8:17:2e:12:9c:
1e:94:2c:64:9e:22:10:eb:54:17:0d:80:7b:39:ea:
33:43:f8:d0:42:10:d4:19:a6:1b:c0:04:63:03:ec:
0c:6b:8d:fe:7d:0e:52:b3:78:ea:10:45:95:7c:65:
c3:85:01:46:3d:d4:89:ac:88:da:9f:a3:b7:7d:6c:
98:88:04:ff:e8:01:aa:fe:a9:77:6b:b1:13:e8:5f:
95:ad:d7:5f:a7:19:d1:da:d1:48:d2:0a:e6:48:ec:
eb:c5:7b:21:22:67:96:5e:71:18:10:f2:c4:0f:eb:
37:36:47:84:7b:b6:7b:37:8f:e2:f4:71:62:fb:5d:
16:88:94:be:bd:0c:24:40:be:a5:e5:70:60:3f:ec:
3a:07:db:d9:19:d7:62:2a:ed:67:3a:06:03:4c:fc:
36:ef:8a:78:65:ab:f9:4a:ff:0c:cc:b5:59:5e:bd:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A4:9C:24:46:52:B5:F2:5F:9C:11:7F:BA:29:63:B2:33:05:1C:25
X509v3 Authority Key Identifier:
keyid:C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:28:d2:98:f0:bb:c6:51:3c:e0:99:de:41:05:63:1a:4a:3b:
34:02:87:ed:d2:58:f2:19:c4:7c:a5:1e:c0:66:49:fa:e6:d7:
ec:a8:0d:c5:89:99:fb:4d:3e:4c:88:3e:ef:c5:f4:2a:6c:cc:
f5:29:8c:7a:51:05:f6:5b:3e:5e:89:7f:67:0b:58:8d:42:58:
c9:28:28:81:b9:8e:68:b2:87:6e:d8:ba:22:bb:1a:5a:ec:96:
89:0b:66:4f:2c:52:d0:72:da:22:0e:78:0e:02:b0:e7:8d:81:
35:d2:9a:48:fa:52:10:fd:ac:70:e7:e2:14:bf:9f:00:83:5f:
d7:69:c1:03:23:f1:6b:9f:be:25:31:aa:7c:cd:80:93:b5:26:
fa:65:ab:78:8e:d6:0d:4f:d7:0c:23:59:c9:1d:13:d0:5f:8d:
7d:f5:87:88:22:31:28:f2:e5:ef:19:07:52:4d:ce:cb:e1:18:
e6:ae:30:01:e1:8d:57:b4:21:44:de:c6:d8:03:54:a2:6e:3f:
ce:81:c1:76:86:3c:7e:c5:7a:04:12:ad:23:8c:d5:e1:79:2a:
eb:12:c9:e1:de:6a:71:37:15:1b:ee:51:fc:dd:e5:92:6a:81:
c8:74:d3:a3:91:9d:aa:b9:08:39:8e:23:f5:d8:a2:93:35:57:
60:08:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:53 2026 by rpki-client