Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
File: yhmr64q55jiQoiPC_WulaEmL27o.mft (raw, json)
Hash identifier: hdrUdUsUttx4mPaZXB6OYqmowjMMRftRjFfUYmjVQJw=
Subject key identifier: 65:06:1F:EE:7A:E9:3B:C3:CB:C1:B1:50:02:28:AE:E7:A1:63:04:BA
Authority key identifier: CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
Certificate issuer: /CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Certificate serial: 019E21362149360077CC24B6EBC512A5792E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 12:00:55 +0000
Manifest this update: Wed 13 May 2026 12:00:55 +0000
Manifest next update: Thu 14 May 2026 12:00:55 +0000
Files and hashes: 1: GEzUOZiRURxvXNLAUBjBDJ3ZpbY.roa (hash: YiX7Qs2KST8thxfSYFwxFXSaSOJJEYBSqj0X1pLOywI=)
2: yhmr64q55jiQoiPC_WulaEmL27o.crl (hash: IjgaMLDZoc+0l1HXUpk+MrhfKykAMJFje9GX4X+uP9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:21:49:36:00:77:cc:24:b6:eb:c5:12:a5:79:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Validity
Not Before: May 13 12:00:55 2026 GMT
Not After : May 14 12:00:55 2026 GMT
Subject: CN=65061fee7ae93bc3cbc1b1500228aee7a16304ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:33:ab:4b:fe:b1:a1:5f:24:ce:a2:08:ad:
da:03:d2:b6:7a:29:99:9d:7e:97:48:80:0e:e8:95:
bb:b1:9f:72:8c:76:97:fa:e1:41:1f:56:76:e3:b1:
b7:92:42:db:b7:0c:57:2f:c5:62:81:03:6e:55:52:
13:31:ea:ab:58:68:c0:69:a2:cb:a1:5b:f7:19:1f:
26:8f:5f:b3:b7:3a:1e:eb:e2:4d:1d:3f:74:19:a0:
a7:26:9f:ae:1d:5b:68:ba:73:b3:ed:aa:94:dd:12:
fb:72:49:f8:31:74:77:2f:31:2a:00:26:cb:71:4c:
7a:7e:55:69:d4:d4:18:f3:13:bd:25:c2:c1:6f:37:
d0:24:9c:af:7e:5b:dd:26:d4:e3:6e:19:9d:7c:34:
16:57:54:aa:5c:69:ad:13:08:3d:96:cd:c7:4e:ab:
e7:b8:ca:9d:cc:c6:4e:02:92:1f:2d:85:df:af:4c:
e2:39:c1:e7:93:3a:24:67:34:89:12:12:cf:b0:96:
2d:f5:17:dc:84:03:6f:c2:4f:14:c2:f1:11:7f:1d:
49:bf:53:54:ac:0c:b3:6b:3b:ca:45:4a:f3:b5:5f:
2a:6b:b7:4f:2a:32:54:6c:45:20:69:32:f2:1b:9c:
8d:3e:ff:fb:d1:20:de:b2:8f:a6:16:f7:17:c5:01:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:06:1F:EE:7A:E9:3B:C3:CB:C1:B1:50:02:28:AE:E7:A1:63:04:BA
X509v3 Authority Key Identifier:
keyid:CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9e:45:cb:6a:de:b3:50:d8:f4:78:3f:56:01:b7:dc:d1:20:
c1:9b:f9:bd:19:d4:01:44:ef:39:89:d4:63:9a:cb:4b:d1:07:
3a:12:6d:aa:0a:96:ff:f0:5f:e9:5d:b4:77:4c:3a:27:8c:e1:
65:13:fd:2c:48:43:0b:69:19:e2:f6:c7:10:c4:10:a2:b6:92:
c8:7c:c8:8e:25:ff:87:32:92:a7:86:b6:ca:ff:e9:31:c0:65:
cd:f9:05:ab:32:d6:ce:72:02:5b:67:e2:a2:28:e3:29:6b:a9:
77:42:01:1d:d8:ac:ec:cf:0c:fb:69:8f:f0:74:88:3a:3d:26:
61:0c:67:52:33:7e:e3:f7:30:42:4e:c5:5f:a4:8f:a5:fa:d2:
b9:52:e7:01:e5:d1:8f:81:c9:0b:d3:96:2d:bb:09:c9:d7:74:
1e:7e:af:44:31:68:ed:a2:ac:39:f1:d5:a1:33:f1:1b:75:64:
fa:2d:30:aa:62:93:b6:6f:2f:86:0e:db:29:c3:23:e4:ea:5a:
24:fe:f5:b9:79:40:65:11:f7:3c:fe:7e:f3:76:ca:60:1c:dc:
04:e8:bd:96:2a:28:82:34:d2:c3:79:b9:fa:b0:56:e0:38:39:
93:b1:ee:98:8b:43:9b:fa:d4:58:74:5c:a8:fc:f5:b5:91:82:
c4:ab:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:21 2026 by rpki-client