Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
File: yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json)
Hash identifier: JJB7wigTFiUhIZ+9qqrTZU0wkKPuDoU9MCqOBA6B2NY=
Subject key identifier: 90:AC:8E:0D:B1:19:3C:33:5A:CE:C0:CF:F3:B7:6B:1B:FC:7D:D7:05
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 019E1D910BF2B72C1FB31EF56AD6C6D65DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
Manifest number: 0D30
Signing time: Tue 12 May 2026 19:01:45 +0000
Manifest this update: Tue 12 May 2026 19:01:45 +0000
Manifest next update: Wed 13 May 2026 19:01:45 +0000
Files and hashes: 1: CitEHd6r_CsQSgbionGA1eBcMLU.roa (hash: 1rANra1AzVxMgl8VcJaThBHrC2EUS4bUsTwEZ+EKh0w=)
2: GcvVWNFfgF0wu0Nfjs_BudGQw9Y.roa (hash: KB0pqrvO6Erz4/rIYGhqqlfhiTfb86tI38IPNb7s0Ow=)
3: WubjxHCSaP4QHue8QiWJLn9wu24.roa (hash: gOCleJwqwii3IPAc/S3k490GMZ5rkPiOH6rY9OCeZlc=)
4: cP554_mw0i_-2i5ondqs4ybL7Sk.roa (hash: 2BFM3dBYEA6Al1rq89/1sEyXAEFO0eUAmQaufDFqA9A=)
5: ktjIcji8JZjmvPNVbyNsDh1AaNI.roa (hash: OhINTejQ3OUauCVxjnxjYQBZeRf8l4Bc1ZHLwTdPGVQ=)
6: mYlVHFIkWhjce6SZlz3waAY66A8.roa (hash: 4EmaIQp2LaV/4WUzCFLlD6HjVOOnifTa9SWdZEfSqzY=)
7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: vEJ1nn+mUKqGqvbcSHUcnxGM8xknEzuXOuoyGks/uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:0b:f2:b7:2c:1f:b3:1e:f5:6a:d6:c6:d6:5d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: May 12 19:01:45 2026 GMT
Not After : May 13 19:01:45 2026 GMT
Subject: CN=90ac8e0db1193c335acec0cff3b76b1bfc7dd705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:09:4b:b3:46:d6:bb:1a:73:e8:1a:d3:5b:e6:
38:ba:59:df:c1:02:6e:15:51:af:82:aa:78:35:c3:
e6:37:8f:57:21:c7:ff:cb:80:d7:2b:bf:5a:b4:87:
5a:7c:0e:ea:1d:9e:d7:5d:2c:80:e3:3e:30:05:5c:
42:93:fd:49:ac:93:e0:ac:8e:5d:a5:07:62:ed:de:
ce:6c:11:c6:b9:b1:27:3d:85:84:ca:89:b7:72:99:
fd:91:5f:e5:56:f3:a2:44:06:94:da:81:6b:30:cd:
c1:33:b9:e0:54:7d:c1:67:58:19:b6:4e:f2:96:6f:
8a:f1:35:ea:cd:e7:3e:c7:ee:84:eb:43:13:a5:9c:
bb:14:6a:cc:91:7a:b7:8a:7d:2c:72:81:fd:f4:0e:
fa:f8:29:24:81:ee:42:c1:52:83:d2:55:bb:1d:6e:
ed:2b:30:27:87:b1:e3:85:3b:75:cf:25:25:52:41:
d0:8c:da:95:d5:6d:6b:eb:63:8c:1c:be:f7:ab:72:
bc:2e:3a:0f:c1:58:7e:68:2b:a3:cb:85:7f:c9:07:
3b:de:52:9a:63:0c:c1:0a:1d:b3:01:ec:69:89:d9:
99:88:24:78:fd:7a:79:2f:85:21:c9:cb:e2:b4:a8:
0e:dd:d0:16:1e:33:54:cc:cf:7c:4a:c6:54:b1:b3:
99:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AC:8E:0D:B1:19:3C:33:5A:CE:C0:CF:F3:B7:6B:1B:FC:7D:D7:05
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:50:38:0d:87:80:2d:f0:27:06:51:2f:c6:9d:f2:7f:29:c4:
b0:05:31:e8:b2:26:b1:00:fe:50:9b:5a:b2:3b:1b:17:9c:ef:
fa:a7:2d:87:56:d1:a8:27:37:c4:5b:44:dc:7c:cc:b0:8c:b4:
16:24:ce:83:c2:5e:86:61:b6:ba:70:4b:38:c1:bc:01:9a:04:
a1:02:a2:44:11:16:09:bc:f1:ac:79:78:34:80:92:1b:91:d3:
cf:92:cd:32:c5:20:00:94:40:01:f6:65:de:2a:5e:15:af:9e:
29:ec:dd:54:99:4f:c5:5e:2a:47:35:6a:6f:c6:81:98:8e:d2:
8f:fd:61:4c:d3:2f:58:aa:b3:69:20:70:ef:fe:61:74:82:b2:
01:92:c8:d7:88:62:ef:32:fe:ab:da:b9:77:d4:33:55:13:02:
fb:d2:67:18:8b:e8:bd:6b:82:5e:39:58:bf:20:19:30:8b:e8:
8e:77:a0:61:91:1a:ce:a1:7b:be:96:97:de:b3:35:2f:84:0e:
57:e9:d8:9f:89:6d:de:78:b0:35:81:77:58:76:38:86:70:c4:
af:ad:ce:8d:08:e4:fb:9b:82:7a:0f:1b:59:a2:95:91:3d:73:
3d:5d:a7:25:6e:0c:e1:5b:36:fc:95:66:c9:be:ee:5e:0e:b8:
cf:b0:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:17:59 2026 by rpki-client