Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: HFnrx4nteEdLTXXe9O2sxGYtvsTM+pP1uvF73W9aOVA=
Subject key identifier: 86:FF:1F:0C:4C:59:FF:44:EB:2B:94:B2:C4:21:E9:4A:31:F5:56:C3
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 019E1D22C3114A232EB9BAF089A440C6D3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 0573
Signing time: Tue 12 May 2026 17:01:17 +0000
Manifest this update: Tue 12 May 2026 17:01:17 +0000
Manifest next update: Wed 13 May 2026 17:01:17 +0000
Files and hashes: 1: amLES0luVq3iLHPQKyufyNQwgaI.roa (hash: UsdGqDJsnylUEzlDTC7n05/NMnzeFnVJjS3/bK29FXs=)
2: jIwaLjqt-xdZuLLeeQ6b9JM9ktU.roa (hash: NBpvqEDHRttth2lk+QrdtGdQaHXJVWBfDcwb8ITbXwo=)
3: u_iWvzN4ZsIj-85aLk82H6-rRe4.roa (hash: LwmASP5C8j7zpf+fcC+xGqEebuer0tW8AmUmigdVvI8=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: /m9l+vEOifUTvvSD1QCCLWgurdomtLLybjjfbpOPig8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:c3:11:4a:23:2e:b9:ba:f0:89:a4:40:c6:d3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: May 12 17:01:17 2026 GMT
Not After : May 13 17:01:17 2026 GMT
Subject: CN=86ff1f0c4c59ff44eb2b94b2c421e94a31f556c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:e5:98:b9:6c:23:4e:77:e0:07:e8:58:7d:
1d:f6:54:16:94:5a:7e:52:7e:ea:4a:c1:de:e2:2d:
22:01:d3:fd:59:8b:71:50:88:ec:80:78:cf:53:ec:
92:92:e5:50:d6:03:3c:7a:50:29:4e:ff:1d:8c:45:
e5:37:31:39:ed:2a:56:45:d0:50:7e:2e:d0:9f:b5:
17:ab:ea:49:86:4f:f7:ee:1d:1b:f3:8d:57:25:bd:
87:23:f6:44:63:ca:f8:90:25:e6:25:1b:96:0e:75:
76:3f:3a:66:8c:91:22:a0:7b:e3:6c:34:15:d5:73:
82:87:16:00:95:50:d3:cd:69:34:aa:66:14:2e:e9:
d9:60:51:c6:3e:68:5b:fc:ec:fc:08:9e:ee:bf:b2:
03:18:ec:c5:3f:aa:19:2b:8d:30:a6:59:c0:e3:52:
5f:b2:64:3d:3b:02:82:5c:04:ac:41:22:18:62:9c:
f5:6e:71:93:7d:c7:d4:8d:f5:2b:9f:86:0d:0a:ce:
f5:00:14:b7:80:0e:92:12:89:71:2c:61:f3:ce:31:
8d:ef:d5:14:0a:bf:f8:21:88:40:b0:bf:27:c1:90:
14:e8:20:b3:33:1a:09:2d:87:4f:2d:de:47:cb:60:
e5:cb:6f:cd:28:76:77:2d:b1:4f:93:25:91:be:f0:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FF:1F:0C:4C:59:FF:44:EB:2B:94:B2:C4:21:E9:4A:31:F5:56:C3
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e9:cb:3a:83:d2:4b:c7:f5:fd:7a:12:0c:82:34:d5:05:ce:
1c:84:e0:8e:5b:91:ac:58:72:98:55:41:e5:85:e4:11:e6:ae:
82:82:a9:9e:d3:1b:fc:e4:6f:31:2f:82:91:bd:be:e4:8d:9a:
84:ea:91:8a:ec:09:95:8c:f3:cb:51:b6:1a:2c:d8:45:c3:28:
b5:db:12:0a:bf:76:c6:8c:3e:f5:48:4f:71:64:3b:dc:7f:c0:
b5:6f:72:de:8b:7f:c6:5e:ee:68:ce:a0:7f:9e:61:10:9f:11:
97:1d:5f:c3:e9:c8:c6:e2:b3:e2:49:01:f9:e6:42:fb:6e:9b:
02:a3:8a:1c:12:08:64:93:1c:25:9c:33:ff:68:83:34:31:06:
93:ae:4f:74:dc:13:b4:51:af:bc:39:64:98:cf:f2:99:66:ad:
be:a8:ba:97:fc:30:63:38:ac:af:c0:b8:eb:ba:85:e2:79:fb:
ca:d6:df:3e:3a:26:80:ef:3a:14:29:f0:5b:d5:c0:a6:b4:1e:
65:5b:89:03:0d:59:bb:63:57:5e:52:64:37:9d:0b:4f:ec:37:
d7:db:20:b7:19:10:1b:45:d6:f1:42:c6:9d:d4:aa:7c:0d:24:
97:6b:2d:55:68:4a:c5:28:df:e3:c8:ff:e2:f2:c1:20:79:20:
bd:01:2c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:24:45 2026 by rpki-client