Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
File: yCIG9QbIJusQV-XCabNxDjiraWw.mft (raw, json)
Hash identifier: nYAZDHJ9UhdZ2IgHzd+yx+Ufj5MRJETQm4UG6C0i9/g=
Subject key identifier: A1:88:31:9B:B2:E2:8A:BE:9F:12:08:FC:6F:C6:5F:F2:CB:29:8A:01
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 019E1D59521FB7656FF975DE6157F63CA6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
Manifest number: 1599
Signing time: Tue 12 May 2026 18:00:53 +0000
Manifest this update: Tue 12 May 2026 18:00:53 +0000
Manifest next update: Wed 13 May 2026 18:00:53 +0000
Files and hashes: 1: XpT5bToAk2yVkGsD2H8QH-1k_10.roa (hash: JI3NSWFN+FxQXfayrhjb6MsXxtHXX0TFrMIY+QodmCw=)
2: k8WrCsZkBwLRgKzoNGa116-cnGM.roa (hash: m45ffB5vKpiDauwl+X5WHu+pBj6uWofTDtumkdwbyDA=)
3: yCIG9QbIJusQV-XCabNxDjiraWw.crl (hash: l0KPveVHSe967oYmQAOvIT99dy5RGgL4U+qymhicZwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:52:1f:b7:65:6f:f9:75:de:61:57:f6:3c:a6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: May 12 18:00:53 2026 GMT
Not After : May 13 18:00:53 2026 GMT
Subject: CN=a188319bb2e28abe9f1208fc6fc65ff2cb298a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:43:be:3c:c8:42:0b:04:a0:9c:29:88:37:
a6:17:cd:ca:c3:61:9e:17:f9:d3:2e:89:e0:5d:53:
05:38:f1:41:76:a0:01:b2:a5:2b:ed:09:06:af:76:
06:3e:63:55:bb:2a:bd:dc:8a:11:73:af:b7:c9:c3:
92:51:42:22:5b:8d:9a:96:cd:96:77:7e:b6:a7:64:
a2:4c:25:07:08:c7:6d:19:b4:51:57:72:2c:56:b1:
40:31:05:31:26:62:6b:94:ea:12:2b:60:0d:e7:e5:
e1:c9:c5:3b:6f:b1:02:8d:e5:f4:d4:9b:7b:6e:cf:
77:1b:27:64:c3:ca:5b:01:bb:38:b3:5b:45:c9:cc:
29:bb:b8:01:11:16:78:75:aa:f1:7f:54:41:2f:68:
40:17:9c:36:47:f3:b3:91:82:c3:b5:fd:57:49:00:
ce:f6:a4:40:cb:ca:09:8a:f4:ae:a0:02:23:a5:b8:
28:0f:e6:2a:14:ab:6a:e3:92:3d:1d:44:a5:0a:91:
77:be:f1:f6:2b:29:b5:5b:89:b6:1e:2d:8a:84:3c:
09:75:16:95:56:3d:4c:41:38:f3:ae:17:bf:77:8e:
84:73:14:2e:30:4f:57:ca:2e:92:6c:46:ff:1c:9c:
49:f4:08:01:eb:fb:66:c3:4f:f5:64:06:25:65:5e:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:88:31:9B:B2:E2:8A:BE:9F:12:08:FC:6F:C6:5F:F2:CB:29:8A:01
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:78:ec:a5:61:c8:63:7d:c3:db:b0:12:fc:a9:a9:3a:10:f0:
f6:fa:5c:7a:b5:66:14:47:63:21:fb:46:83:dd:ed:21:77:2f:
86:70:c5:78:06:f0:9b:03:8a:ea:c5:1f:21:30:7c:1c:f4:18:
d4:c3:ec:bb:b9:c0:2d:cd:36:96:ed:29:b5:a3:d3:f6:94:86:
61:dd:76:e2:bb:03:fc:e3:19:02:67:3f:43:ba:24:b1:63:07:
88:27:3b:e9:ce:55:16:e6:d1:cd:b8:cf:c0:83:46:5e:aa:c0:
5c:51:ce:66:19:eb:d1:f1:bf:8f:8c:77:a5:03:f2:9c:e3:cf:
7e:49:5e:7c:49:3b:d1:0c:0f:40:a3:2a:ab:69:24:f4:e7:9b:
76:75:56:ab:8f:50:07:01:e5:cd:a5:ec:0c:eb:44:c8:a9:4d:
7c:61:46:ce:03:ea:3a:52:03:41:26:ce:db:17:c9:d6:6c:77:
07:1c:53:76:03:34:3a:77:6d:03:61:5b:64:17:cc:33:15:1a:
e7:b9:58:be:df:f5:77:3a:cd:0a:0a:3b:36:76:a0:b3:ec:a8:
a4:31:f7:81:3e:35:ff:03:f3:1b:75:4f:40:31:b3:93:b1:67:
f5:9c:f8:60:f5:19:e7:86:3b:aa:9e:49:0c:17:cf:a5:f3:45:
7a:5d:50:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:43 2026 by rpki-client