Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier: NAumu/vvki8vHXbqImkk710/pykqI2JD15atS6rc9mg=
Subject key identifier: CE:D5:5D:DE:80:D3:5F:27:91:7F:6D:6B:D2:EE:29:86:82:1B:23:3A
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 019E1D90AC4F50ABB690B8593DFB8D2E5676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number: 148B
Signing time: Tue 12 May 2026 19:01:21 +0000
Manifest this update: Tue 12 May 2026 19:01:21 +0000
Manifest next update: Wed 13 May 2026 19:01:21 +0000
Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: mpHGWeU5UCaMPwbRp+X1lHSP/2dcd+bbxvf4vv/9Vw0=)
2: oIFDamMFsaAUv3_QXk-wIETOecI.roa (hash: R//1hT9e0Lq7We4cMvCWKxDCXrukd4OXlMU1MKxnozg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ac:4f:50:ab:b6:90:b8:59:3d:fb:8d:2e:56:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: May 12 19:01:21 2026 GMT
Not After : May 13 19:01:21 2026 GMT
Subject: CN=ced55dde80d35f27917f6d6bd2ee2986821b233a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:13:a8:d4:53:ee:4b:7e:73:6f:de:be:2f:
a0:53:e9:e9:a7:fd:64:94:ef:cb:14:d2:a0:88:ac:
1a:f3:a3:19:1c:19:96:74:8c:06:80:b2:5d:f6:e2:
6b:c7:ce:bd:91:28:e2:5a:01:f5:6f:cb:db:ab:4f:
64:33:ae:7e:bb:c8:68:5d:50:c5:fa:4c:75:ff:0b:
bb:a0:45:b9:b4:5d:08:27:8d:fb:0d:4e:a7:5a:96:
56:b8:dc:6c:d1:c2:c5:4d:74:4f:85:96:31:46:c4:
72:eb:25:a5:21:92:28:62:83:ba:20:62:cf:a8:d1:
1c:83:67:38:8d:84:4b:b2:37:6f:17:16:b3:0b:4d:
ce:16:5c:91:aa:49:91:95:43:72:1a:78:1b:76:03:
e4:e6:56:3e:4d:ac:f7:b4:02:7f:3c:ad:61:a3:f7:
cc:d5:f2:ba:e0:e6:3c:da:ad:3d:17:c0:8f:8d:2f:
c2:30:e7:0b:28:66:9d:bd:56:06:9b:2b:ed:d3:32:
58:02:9c:2b:49:1c:68:35:bf:cf:2a:22:6b:ff:df:
97:c1:22:05:03:de:21:27:43:ad:99:c6:b3:7b:d5:
f7:68:11:b3:1f:62:fb:a1:30:83:7e:c1:72:32:34:
1e:62:26:fe:5c:bd:c0:31:3b:97:e8:ea:f5:46:7a:
f4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D5:5D:DE:80:D3:5F:27:91:7F:6D:6B:D2:EE:29:86:82:1B:23:3A
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e2:9b:95:4d:70:49:5d:0a:93:39:09:21:86:e2:d8:41:61:
48:82:0f:d8:fd:83:5c:16:4e:11:64:dc:55:88:f3:00:e0:69:
34:f1:e6:6f:2c:e8:96:60:43:03:54:d3:f8:54:61:7d:5e:b4:
3e:2c:2a:e8:4d:5b:e3:4f:ed:fc:a9:d6:d3:0f:2e:9d:ac:a2:
c4:dc:ba:be:84:e5:ce:8e:cf:aa:66:35:c4:01:d3:e6:a3:1d:
7b:d7:7f:2e:71:9a:72:46:dc:f8:ba:af:3e:a4:67:cb:c3:6d:
8f:96:36:1a:54:48:9e:a0:fc:9b:61:30:f9:50:22:be:bc:1b:
c6:c5:7d:86:ce:58:99:05:d3:d2:7a:d9:72:22:fb:40:95:45:
a7:0d:ee:48:f2:c4:a6:2a:c4:18:41:9c:07:f5:5d:25:46:3c:
dd:61:01:44:77:4c:e6:73:f2:33:f6:ca:52:21:9f:e0:76:d5:
25:a2:f2:48:50:07:1d:4b:73:bb:76:99:0c:e1:22:da:3f:16:
94:e9:37:20:d6:e9:73:3d:ab:0b:84:22:6f:13:e4:dc:8d:a6:
b5:b2:ab:ec:14:ca:51:22:a7:cd:bb:9d:c7:56:68:8f:08:f8:
e5:34:84:e8:0b:8e:c4:6a:8c:96:3f:bd:b8:ad:df:0c:c1:5e:
82:53:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:11 2026 by rpki-client