Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: dTeeooPHRRZw4KU2mWfSZ3zdCUc1TV3DrAhLQd5Odps=
Subject key identifier: F3:21:80:CE:D3:5C:BF:C8:46:2F:E7:A8:96:C2:69:5C:99:AC:00:C6
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 019E1DC72AA4CB34CC180EB1E027760ADED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 11B4
Signing time: Tue 12 May 2026 20:00:52 +0000
Manifest this update: Tue 12 May 2026 20:00:52 +0000
Manifest next update: Wed 13 May 2026 20:00:52 +0000
Files and hashes: 1: 0Lwj5i1c4Zxo9S7reLT043tZQto.roa (hash: YQ43Pzm8kIwiUn3utvGc8HdrkEgRWVgYKvbGV3IgZ04=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: s3rpdo6+ZajTr0atseI0uKp6leVlVa9d/G5RUljIdPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:2a:a4:cb:34:cc:18:0e:b1:e0:27:76:0a:de:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: May 12 20:00:52 2026 GMT
Not After : May 13 20:00:52 2026 GMT
Subject: CN=f32180ced35cbfc8462fe7a896c2695c99ac00c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:ea:9e:98:80:53:6b:86:a8:6d:0c:be:71:
83:a4:da:cc:fb:04:50:63:75:10:a9:e1:06:9f:20:
f3:4f:0e:c1:dd:56:f8:1e:31:64:ea:53:77:c0:ae:
aa:d9:d4:ab:31:80:cb:b5:fd:94:27:83:45:ac:fb:
08:0d:bc:22:1b:c0:55:ee:0d:14:c8:2d:71:c0:e8:
17:f7:cb:1c:9c:e8:c7:39:31:11:b6:bb:6c:94:9e:
98:6c:4b:e5:2a:7f:66:71:2e:4e:7f:3b:de:79:96:
11:b3:bb:9c:e2:28:27:db:59:23:9d:b4:09:af:06:
32:d7:ec:51:b5:7f:5c:4e:14:ac:9f:92:5d:b5:26:
2f:11:89:00:f6:00:08:9f:2f:a3:a9:09:56:fd:5a:
b5:2e:bd:2a:51:c6:74:2a:21:5b:0c:6d:da:cd:1c:
59:8c:64:ca:14:40:ec:0f:a1:47:44:9f:73:d3:26:
b5:ed:c2:38:65:7e:88:6c:32:31:2b:08:44:a5:02:
3e:c1:b3:8c:91:49:e7:d5:7a:18:28:9c:7d:3e:7a:
2b:3c:63:3d:f6:3a:62:ad:b6:3f:e6:64:f0:61:40:
a1:97:1a:db:eb:7b:74:2a:fa:16:ca:5a:e3:a3:f1:
37:93:b3:f5:4a:e2:88:c7:b5:14:03:db:69:71:32:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:21:80:CE:D3:5C:BF:C8:46:2F:E7:A8:96:C2:69:5C:99:AC:00:C6
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:04:55:76:fe:26:67:7a:9f:1f:77:5b:91:28:b4:5e:43:00:
80:2e:9d:5a:68:a5:50:ec:ad:77:37:6a:cd:a6:19:55:32:42:
b3:fd:ac:23:c2:d2:3c:92:48:a5:7c:7b:80:85:d1:53:f4:e4:
f0:61:70:3c:f0:6f:1f:f8:f5:e3:5c:65:be:f4:6e:49:50:80:
af:9e:bd:72:e3:be:e1:44:66:ae:55:a3:96:42:2d:64:24:68:
6f:e4:37:d0:2f:de:a2:6b:01:66:4b:52:19:76:ce:75:af:a6:
44:43:58:ab:1f:53:57:18:1e:6e:b5:eb:c8:7d:0d:56:07:fc:
22:1e:f1:9c:16:aa:39:36:95:7c:ad:3c:e8:00:19:b9:26:be:
b8:75:61:bc:9d:91:a3:de:34:c6:92:71:91:25:b1:d1:39:a7:
62:cf:38:f2:dc:ae:e6:61:4d:c7:ba:d7:ea:97:3d:10:32:cb:
8f:8a:4d:db:9b:8d:a2:ea:e3:11:39:60:bd:91:6e:8c:02:96:
40:0d:2f:e8:0d:28:d6:46:54:5c:68:75:32:fc:04:8d:ef:8d:
55:cc:8f:cb:f3:92:85:6f:0d:59:19:10:df:f7:d9:c0:24:bf:
73:08:93:27:c5:72:c0:dc:3c:ac:15:55:18:c0:c8:8a:fe:1e:
17:c4:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:11 2026 by rpki-client