Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
File: YmqokTLSpoTY0qGj9-QPIjRjbzg.mft (raw, json)
Hash identifier: 6WyntwG4RL1NmGF2FKVhdL2DfdQV7ga7P4Mc3ML1W7g=
Subject key identifier: 3D:7D:00:E1:03:13:9D:67:58:2F:90:1B:D4:17:ED:3B:B9:16:A1:B6
Authority key identifier: 62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
Certificate issuer: /CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Certificate serial: 019E1EDA2E6FD78FEF90DA7AE017420877AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
Manifest number: 16E3
Signing time: Wed 13 May 2026 01:01:15 +0000
Manifest this update: Wed 13 May 2026 01:01:15 +0000
Manifest next update: Thu 14 May 2026 01:01:15 +0000
Files and hashes: 1: WCWp0vmGJYt70q-YkfGeiqk74HA.roa (hash: WWuYuPcraJwNveZ8Pjl950Glgpk1p9KqCUVVhSjy+fs=)
2: YmqokTLSpoTY0qGj9-QPIjRjbzg.crl (hash: RBxgT4LRTjAz2GO45QBemtcojUXflz+xEkr6jp+TuP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:2e:6f:d7:8f:ef:90:da:7a:e0:17:42:08:77:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Validity
Not Before: May 13 01:01:15 2026 GMT
Not After : May 14 01:01:15 2026 GMT
Subject: CN=3d7d00e103139d67582f901bd417ed3bb916a1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:69:07:8f:67:95:76:bb:e1:4c:89:a4:13:
fb:62:cc:90:bf:d7:7b:2a:36:35:76:df:3a:5d:85:
20:b4:9e:cb:b9:79:6c:b4:84:98:c2:cd:3a:f0:cf:
95:89:30:5d:61:ae:2a:ac:63:53:d2:06:4a:22:3c:
fb:88:3c:47:e7:43:68:43:1c:68:80:a0:f3:44:1f:
15:f2:f1:51:6d:e4:ba:fd:0f:8e:a8:b0:ec:81:15:
f8:a7:95:1a:c8:df:bc:6a:ce:2b:62:02:3e:3a:d7:
b2:62:e6:56:e3:d9:f0:ab:74:77:24:33:d7:b7:da:
04:25:a6:5e:f1:10:ca:ea:6f:f0:00:d3:01:4a:a7:
30:73:82:d7:c6:67:d9:1a:0b:18:6e:c5:00:81:ab:
d4:fd:8c:eb:09:66:4d:75:80:cd:38:16:0f:8c:45:
dc:c5:30:06:95:b3:96:02:30:c8:6d:17:71:a3:a7:
2a:02:84:16:2f:ca:54:ee:cd:5e:22:80:6b:19:c2:
f2:f5:0a:8a:aa:61:9f:94:0a:8b:68:e6:45:37:0b:
a2:03:24:7a:58:e5:61:06:39:14:0d:fb:4d:88:24:
d0:e2:c9:52:fc:96:2f:38:3d:b1:90:22:65:46:5c:
c9:10:d4:cb:8e:d5:66:bc:8d:65:9e:89:41:0e:50:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7D:00:E1:03:13:9D:67:58:2F:90:1B:D4:17:ED:3B:B9:16:A1:B6
X509v3 Authority Key Identifier:
keyid:62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:52:94:2e:03:95:c9:b7:e8:6d:44:15:3b:08:bc:f7:fc:2a:
2f:64:59:b3:c8:b1:a7:f9:dc:b2:8e:2a:df:63:3a:3b:c5:d2:
11:03:55:3a:f6:78:db:39:13:8b:58:ef:17:78:a8:89:fd:e9:
5b:6a:77:7e:3f:73:61:29:ba:b4:6d:37:dd:67:93:79:8b:f9:
37:94:07:73:62:18:d7:92:0c:c6:9b:04:b3:ea:d9:44:e5:92:
d4:f8:66:72:bd:70:f1:e1:d9:ef:a0:c7:a0:c1:6f:44:e6:fe:
e6:71:55:4f:32:f3:43:7f:3f:cc:9b:ed:af:26:1c:5c:04:4e:
e4:ab:f3:0f:e0:90:fa:a6:32:99:02:6e:5a:c1:b6:ea:88:2a:
9c:c9:fc:47:fe:ab:33:3f:6d:13:f7:ab:58:c9:35:1e:40:3e:
0d:2f:f0:68:69:a8:94:c7:25:1b:ac:52:3c:3a:28:66:c1:f5:
cb:62:27:b2:02:cc:d7:0b:ed:6a:69:2a:f9:10:13:df:20:4f:
e6:4d:13:d8:65:6c:2b:36:a5:6c:a5:5e:e9:55:61:7c:68:73:
1a:92:3d:d2:a7:9c:b6:8f:e9:8b:26:6a:c8:2d:47:3c:93:42:
d0:60:d4:6b:39:b0:61:a1:06:3a:5a:76:5e:3b:92:24:95:42:
21:3d:20:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:21 2026 by rpki-client