Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier: aQbLTVRYeZN5ZW8XQLmetifJV8Am1MPzvde4KpH1VWA=
Subject key identifier: 47:85:6B:01:E3:EA:7F:7B:92:3B:9D:73:FD:35:C9:EE:C8:73:21:0C
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 019E1F10C927842DEA447D5630851A3439B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number: 1927
Signing time: Wed 13 May 2026 02:00:54 +0000
Manifest this update: Wed 13 May 2026 02:00:54 +0000
Manifest next update: Thu 14 May 2026 02:00:54 +0000
Files and hashes: 1: CpcMl2eeE4kivr7Y_KcbhMBQkho.roa (hash: 3J5pbfw99fV9VldJRwXaEGP1Raiiwe48ExCYD8L4uko=)
2: gECFr_lCurPKmYUZbnBME6fDRJI.roa (hash: zPv5BFtY7ZttrJvpLgH3TkAwwjvJ39/Ya/LcQ77bi7A=)
3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: Nfy55EIi854J0P4MGihsUbsc/F/TS39qjDt8BAH3RjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:c9:27:84:2d:ea:44:7d:56:30:85:1a:34:39:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: May 13 02:00:54 2026 GMT
Not After : May 14 02:00:54 2026 GMT
Subject: CN=47856b01e3ea7f7b923b9d73fd35c9eec873210c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:19:8f:e2:cf:e5:7f:c7:d9:ea:13:26:7d:
40:a7:d8:27:93:08:1e:59:7e:d2:65:f2:ed:35:21:
b9:77:ca:a5:11:c6:44:73:cf:d0:0e:ac:4a:ac:7b:
0c:ff:c7:a1:3c:1f:77:c1:d3:96:15:99:5f:cd:13:
3c:ef:6b:f6:84:b3:f4:ed:18:b8:dc:88:17:b5:96:
31:58:3b:38:ff:24:a2:0e:c5:d7:b8:fe:5e:1a:f0:
c3:59:ee:cf:bc:0f:de:5e:6e:79:55:8d:52:29:dc:
aa:a3:eb:be:f2:07:02:96:7b:db:3d:62:e5:bd:2b:
57:06:23:3c:6e:44:26:01:1c:c8:66:df:c6:5f:91:
ac:a4:3a:4f:88:c9:f2:3d:07:e4:22:e6:10:18:b0:
0d:0e:20:df:97:94:c6:8b:98:7f:14:ca:c9:56:17:
3f:dd:99:9e:ff:10:36:e7:ec:ce:88:14:bf:3f:39:
55:29:82:a3:23:70:98:c3:35:2f:fb:10:17:21:6b:
8b:37:01:eb:cf:d9:0e:ba:2a:07:17:74:e9:a3:7c:
8b:f4:d0:64:9b:0b:ea:07:e7:04:6f:11:d8:81:1b:
48:ca:1c:c5:0b:b4:d0:c6:42:2c:ca:76:f5:2e:f0:
17:20:6e:13:a0:b2:b2:31:7c:a3:1e:b1:08:80:78:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:85:6B:01:E3:EA:7F:7B:92:3B:9D:73:FD:35:C9:EE:C8:73:21:0C
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:52:4f:41:b4:84:d6:81:e2:88:28:0a:80:a8:90:bb:ae:ef:
ed:ec:56:b3:f1:6b:79:2f:e7:22:c4:ff:95:bf:e9:d7:65:e6:
84:75:45:48:23:a8:a1:3c:01:d6:d1:db:63:49:7b:7a:fd:08:
cd:b8:2a:a3:9a:08:cd:b7:a6:db:6c:a6:fa:ab:a8:89:59:b7:
24:14:01:ed:94:17:21:fd:49:d1:06:39:61:d9:3d:ed:6c:51:
5f:78:8c:e8:9d:5d:f6:a8:13:08:5a:92:9d:fc:4c:67:19:11:
51:4b:6e:57:38:7f:55:f2:5c:4a:e6:af:0f:f7:58:5b:6b:07:
5f:0f:08:d1:25:1d:6b:1b:18:4e:70:c3:f7:84:87:7c:ef:b4:
c1:92:a4:f4:fb:7c:6d:24:8a:90:e6:48:b6:33:2f:e1:7f:1b:
6f:30:28:aa:5c:25:d6:8e:1f:f7:be:45:53:8a:c1:8b:1b:bf:
ed:5c:18:79:36:e8:56:ec:e3:7c:ab:a6:9e:67:30:fa:2a:90:
82:72:e1:94:e8:a6:3b:5a:5e:3b:3c:2d:fa:67:2e:02:b9:dd:
1d:51:a3:34:81:29:0f:b5:17:32:68:db:17:f1:72:63:fd:d0:
f6:18:d0:f0:5a:b0:dc:89:ca:01:36:bd:7c:5c:fb:9d:aa:d7:
f8:a9:e2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:52 2026 by rpki-client