Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: 2Ir4zRYYYNg7IPP2WPlCF8K2pKS2KQL3LWD5Dhpe5lY=
Subject key identifier: 2A:1F:D4:A9:64:5C:79:FE:1E:7B:03:D3:68:0E:34:40:9D:F3:C6:3F
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 019E1F10A15EB9E63945ED4A210551357BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 02:00:44 +0000
Manifest this update: Wed 13 May 2026 02:00:44 +0000
Manifest next update: Thu 14 May 2026 02:00:44 +0000
Files and hashes: 1: Yo0ULWlGFniFl0kRIQzZJN8mg9o.roa (hash: j8hGB111jdt0RcgrUrjkuMAFRhv/pdlUdsj0AvFMkmM=)
2: jioszf8WkcygR-sUCmeQ22hRJBQ.roa (hash: GlPRmHwlYfAxgr1RqMrlQqRp2B9t9+qwJKez8uOIIxI=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: gSX17plapVY5PNC0Jck8+Zhc36MajK4ADZOLjnXroDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:a1:5e:b9:e6:39:45:ed:4a:21:05:51:35:7b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: May 13 02:00:44 2026 GMT
Not After : May 14 02:00:44 2026 GMT
Subject: CN=2a1fd4a9645c79fe1e7b03d3680e34409df3c63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:d9:09:d5:15:3f:50:99:ea:d0:6d:ad:06:
2b:c4:8c:3a:aa:15:60:74:dd:7c:1e:5a:10:b3:bf:
f3:f1:f2:3b:f2:4a:f5:4a:8f:bf:6e:d4:b1:aa:10:
5d:f7:f0:dc:9f:96:bf:ba:74:b1:55:fb:9a:d3:6e:
b2:94:23:f1:91:51:06:a4:b0:fb:df:c9:2b:b2:37:
4e:31:59:22:d2:63:c1:75:51:35:86:e2:d5:7b:71:
ab:83:76:12:4b:b0:12:b8:3d:1a:95:c7:ec:de:84:
e9:75:ba:3d:46:89:38:ed:c3:dc:1e:64:2c:e4:b9:
e3:71:9e:d6:23:c7:a1:ef:51:1a:0f:db:9f:05:2f:
5e:89:98:72:e3:37:c9:80:7e:68:96:69:07:cc:c9:
6e:16:37:df:21:92:be:42:4b:2b:2d:f9:70:45:c1:
03:61:ac:5d:8a:76:5f:ea:c5:7c:6a:08:58:ca:5b:
5e:15:c0:90:10:55:9a:0d:1f:a3:b5:5b:37:ab:a4:
80:c8:2b:8c:2c:89:6b:5b:b5:f8:88:4b:de:4f:3b:
85:37:7a:9e:04:3f:bb:60:d9:2e:81:e0:b1:22:61:
ad:b2:f0:4a:a3:7d:f4:55:0f:ea:c0:d0:b6:64:f3:
6a:82:4c:6f:aa:18:0f:e8:74:a8:86:e1:87:25:2d:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1F:D4:A9:64:5C:79:FE:1E:7B:03:D3:68:0E:34:40:9D:F3:C6:3F
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fe:8f:b4:9b:c7:35:6d:aa:be:85:9e:d3:4b:e8:bd:b4:87:
01:db:d0:c5:28:38:d7:e3:0d:f6:bc:71:0d:b8:f6:69:14:bf:
ee:26:76:77:b6:be:c3:17:d1:b4:5f:b5:c8:ae:d9:89:5b:19:
a5:0d:e0:71:3f:8e:cd:b8:7e:98:7a:48:ba:9e:84:49:ff:36:
68:86:e4:5f:8a:d2:03:f6:1f:d0:fb:82:2c:d4:9c:af:1a:b4:
52:b4:6e:48:8a:37:e3:97:d0:93:1a:25:30:37:3e:a2:e0:c6:
5f:c0:e8:6c:e6:d4:f9:49:7b:d1:e4:f3:d5:11:4d:71:34:0b:
37:5e:29:f3:07:60:af:b3:c5:cd:86:5b:f2:10:e2:03:56:22:
e6:ba:de:4e:7a:c9:45:af:9a:07:27:e9:9f:da:b7:6a:3d:ab:
65:33:e0:b8:07:e0:11:37:af:82:93:ae:7b:55:64:f5:a0:b8:
82:a1:9d:0d:2a:bb:4a:5b:69:2e:c0:4f:94:75:fb:6a:f3:0e:
1b:0d:b1:b8:8b:aa:81:77:b5:d1:93:bb:7d:ed:15:bf:40:98:
6f:5d:ba:ec:bd:cf:6e:c4:2c:f4:7c:c0:00:42:ee:b5:a4:a3:
b2:d8:7e:af:dd:06:79:83:ad:2b:65:71:f3:57:f1:83:27:48:
5c:dd:35:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:03:28 2026 by rpki-client