Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: rI79DSPEddPvCjpRrzJX9sHFbHlyQROVhVSegXS0FCY=
Subject key identifier: 99:81:5B:A1:BA:70:63:8A:DC:2C:C3:97:85:B7:99:34:56:6D:DE:D8
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 019E202416A166DF6A557BE4474F03B087F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 136E
Signing time: Wed 13 May 2026 07:01:36 +0000
Manifest this update: Wed 13 May 2026 07:01:36 +0000
Manifest next update: Thu 14 May 2026 07:01:36 +0000
Files and hashes: 1: OmKYv-eBNTYluusfNr4dZe7zC_c.roa (hash: w1Hd7iJpZYHQEo80iQwx2qNAI2ou5wncgHu/GLia0Tg=)
2: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: y5m7BskNFRwsiurzoYqwDhnhgmCvf7f3ZklyPCXC2Mw=)
3: l-QyBKePUGvgwvLYQ39xVIrG-Xc.roa (hash: BEyQW94VrHgV1DUmSXCji9F0XD6RgtTzxouMSqJBF3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:16:a1:66:df:6a:55:7b:e4:47:4f:03:b0:87:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: May 13 07:01:36 2026 GMT
Not After : May 14 07:01:36 2026 GMT
Subject: CN=99815ba1ba70638adc2cc39785b79934566dded8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:c3:a7:8b:21:a6:6b:45:a5:27:ba:5e:2d:
c6:1e:22:28:cb:f3:81:d0:9a:92:ad:86:3a:cc:df:
5a:96:62:87:fd:a7:50:c8:ba:74:10:7a:a5:2c:19:
ff:68:e6:01:38:f5:97:15:5c:8f:3f:88:4d:42:47:
5c:81:03:9e:78:f5:99:33:40:ef:0b:37:8f:60:e7:
0c:3b:87:65:5a:62:8e:54:8c:d0:bb:2a:73:2c:49:
e6:8a:f7:b6:56:51:a4:53:56:e0:06:0d:ac:07:28:
73:45:bd:2b:5e:78:7d:e2:fa:1d:f2:43:09:73:8b:
76:02:70:fb:2b:5d:4b:5f:4c:f0:60:61:67:73:06:
d8:57:23:41:90:ff:51:82:da:65:d7:3f:0f:f8:19:
7f:5e:19:d2:1a:9d:c6:1b:cd:cc:a2:0b:da:76:53:
07:5e:5c:d6:65:dc:e9:60:7d:fc:40:e8:92:82:50:
57:de:fd:e9:07:33:d3:ac:82:c0:15:f7:13:9f:fc:
a3:f6:5c:f7:9d:81:cc:79:1f:02:ed:1d:02:ea:bc:
c4:26:1b:ba:fc:9e:a3:70:ca:84:69:3f:8e:bb:b7:
87:0b:89:87:7b:75:d7:e3:35:83:5b:a6:e0:00:89:
04:3b:dc:07:b1:ce:41:11:6c:61:51:f7:9e:ac:af:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:81:5B:A1:BA:70:63:8A:DC:2C:C3:97:85:B7:99:34:56:6D:DE:D8
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:99:4d:e0:37:48:ee:32:89:78:c6:72:a3:bf:ee:a3:23:15:
d8:88:30:b7:84:9e:f1:dd:db:7b:0d:76:ad:49:ca:66:66:ef:
e7:d2:1f:37:55:06:68:d7:f4:87:81:56:b5:ff:74:67:ff:f0:
22:75:1b:49:07:c9:cc:c5:2c:87:e7:e2:c7:92:bb:2e:51:5f:
a5:e9:0f:9f:4f:ca:d9:c1:a1:0b:53:36:1b:c5:c4:aa:38:c6:
91:16:d6:71:14:13:4c:04:c6:45:7b:6a:be:8a:24:a8:34:f1:
ae:10:2f:bb:9d:f6:68:19:1e:13:70:e4:9e:d2:ee:8c:a9:ed:
4a:f1:b7:2e:1d:4d:18:dc:44:6b:0b:e9:7a:8a:d3:07:8d:4c:
95:cc:15:5d:0f:6e:26:09:fd:50:0f:0c:f9:0f:19:05:b5:fa:
12:94:2c:a9:0b:4a:b7:a0:65:7b:dd:d3:0c:32:59:0b:e8:71:
6d:17:24:e9:7b:76:74:bf:22:67:89:f9:0f:71:91:73:e9:99:
fa:c2:95:7c:2d:b1:4a:ac:60:e2:0a:c6:cd:1d:3d:e9:3c:ce:
31:8a:4f:70:d4:b8:65:75:d8:74:2c:b6:c0:55:b7:07:e4:1a:
eb:36:d5:9c:d9:f5:07:1a:75:b5:8f:fa:53:f9:67:28:b7:ce:
72:aa:16:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:34 2026 by rpki-client