Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: c1T9KKR4ZrlCXOUEs+j4O/6S8ebE2ii+N/c6MeimqcA=
Subject key identifier: 24:2A:89:C4:7C:2B:9B:3E:F9:86:55:3C:5A:F0:8F:43:A3:04:B3:D1
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 019E2024441E2E914995AF868420FA0E43E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 08F0
Signing time: Wed 13 May 2026 07:01:48 +0000
Manifest this update: Wed 13 May 2026 07:01:48 +0000
Manifest next update: Thu 14 May 2026 07:01:48 +0000
Files and hashes: 1: ByyzWxM12G0BPucLG6JiwdJtgEE.roa (hash: 4G2lH2XdNKPJSfTS1f9mdoy30Er7U9NNS0wrRk3c+sc=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: zDPcuueL8uWYR/RuWAlFgZfQSjLWwhd5ETigA9bv6z0=)
3: lH39RLJn2Hz8-UQkPP2o_JvX24I.roa (hash: iB4qVFkaq5F/oZHjDXHDMbbQUo5Vscic17RgZki9i5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:44:1e:2e:91:49:95:af:86:84:20:fa:0e:43:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: May 13 07:01:48 2026 GMT
Not After : May 14 07:01:48 2026 GMT
Subject: CN=242a89c47c2b9b3ef986553c5af08f43a304b3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:d3:ad:b4:28:07:ad:67:f3:03:b7:ca:0f:
12:13:ae:85:2f:1c:12:38:8f:c7:23:7f:7a:a4:da:
19:ba:4b:23:90:b2:a2:af:eb:e5:10:37:f3:b9:e9:
6c:d9:69:45:dd:2a:13:ea:ed:c8:c4:5e:a1:9a:22:
d9:f9:32:02:25:61:16:0d:7c:de:97:9e:23:75:e1:
cd:b7:91:dd:d2:cb:b8:cb:70:6b:05:dc:40:bd:b7:
0a:49:d1:fa:ee:71:a1:35:4d:3e:08:4a:f9:00:99:
09:ff:a5:75:90:bb:03:56:af:9f:26:79:7f:be:4b:
97:7d:79:75:0e:cc:8f:2f:1d:00:31:d7:6f:5f:50:
0f:84:9d:67:3b:be:9b:9c:3f:04:63:03:e2:a2:0a:
92:7f:e0:8b:e3:45:ef:7b:26:bc:cb:fb:02:df:7c:
0f:a3:85:de:50:2a:d6:e6:ea:ea:fd:18:19:5c:4b:
83:32:06:cb:7b:f3:95:78:a2:c4:a4:fa:17:90:75:
47:e5:2b:50:56:7a:5b:1f:fc:d4:f6:91:86:a2:61:
95:e9:d0:10:37:7c:a4:2e:e9:6b:07:64:64:62:ef:
d7:c9:b6:8f:a9:67:8d:88:81:e5:5c:fc:af:5b:9c:
eb:59:94:55:2b:a6:c4:da:f9:5c:71:5f:ad:da:b7:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:89:C4:7C:2B:9B:3E:F9:86:55:3C:5A:F0:8F:43:A3:04:B3:D1
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:60:5c:f1:e1:f6:5f:9d:fc:39:48:27:95:5e:a0:85:2c:2e:
8b:8b:57:7d:77:37:40:57:90:2c:ab:85:66:9b:53:e8:ea:c5:
05:ab:8e:84:02:72:90:28:c9:da:2c:df:31:98:84:25:d5:c0:
44:54:be:c8:9c:82:7d:75:a2:1a:ef:1d:64:f8:2b:bd:fd:37:
fb:c4:d4:b5:ab:f3:08:60:da:aa:95:31:ce:b6:a0:8e:2d:cb:
c7:00:49:3e:2a:71:94:42:e4:14:54:7a:03:2e:4f:38:88:6d:
9d:5b:ec:23:3d:c0:04:14:3c:f2:a5:0a:a7:eb:91:07:25:be:
5b:9e:66:f1:7d:b5:20:a3:cc:3b:8b:49:33:8a:3b:21:6a:b6:
92:79:bb:58:23:91:78:7b:44:68:fd:ff:a5:03:37:3f:9d:72:
8d:55:5c:8c:ca:28:97:f6:b1:a3:35:3f:bd:6a:cf:43:90:23:
2c:9a:3a:55:b7:b4:ed:ac:84:87:b9:69:9d:e1:a6:40:2b:f8:
8f:5d:7c:b0:dd:58:4d:9b:a2:a8:ba:89:86:96:fd:e1:c8:93:
04:d7:b5:0f:dc:45:cf:e5:81:dd:de:a8:82:80:b7:ce:4e:94:
e9:d1:06:6d:31:b4:13:38:42:cb:8d:f0:59:78:a9:00:60:00:
be:f0:2b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:38:23 2026 by rpki-client