Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: I1GLJhFLzvFvxgIS4KZVlYvjfXQjby4Mg12Y4zaHp4M=
Subject key identifier: B0:C4:D6:79:E5:3F:48:94:C5:31:0F:EA:99:FB:1E:B9:4B:1F:FE:6B
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019E1DFE39E4D54FD96FE34A430ED39B5CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:00 +0000
Manifest this update: Tue 12 May 2026 21:01:00 +0000
Manifest next update: Wed 13 May 2026 21:01:00 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: 19qwbspB+BqeaCKX8Ok/wJft0eIK9kWZ9ikn8v3GeSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:39:e4:d5:4f:d9:6f:e3:4a:43:0e:d3:9b:5c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: May 12 21:01:00 2026 GMT
Not After : May 13 21:01:00 2026 GMT
Subject: CN=b0c4d679e53f4894c5310fea99fb1eb94b1ffe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:08:13:63:23:36:66:9e:bb:24:62:55:08:
9b:09:70:ea:e1:ae:8e:f8:6f:77:36:fd:91:61:e6:
86:a7:14:cb:ec:f6:b7:42:cd:b2:90:a1:83:20:dd:
2c:60:11:88:73:d4:f1:59:45:b3:b8:ea:fb:e5:5d:
de:d6:00:36:57:3a:4a:94:61:16:63:9f:98:ae:b0:
d3:a0:d5:1a:59:f7:dd:40:d3:24:60:a0:b5:6c:65:
f5:df:a8:d1:fc:a1:c0:09:f0:29:7f:18:9d:0a:07:
67:2b:4b:65:bc:de:f3:bf:cf:1c:1c:a4:0e:a9:94:
9e:97:3f:96:d0:3f:e4:e3:7d:1c:16:cb:9a:de:a2:
2f:f8:37:a2:1e:95:14:7e:70:1c:2c:ce:a8:0e:af:
6f:3d:7b:67:7f:61:bf:2b:d0:cf:0f:4f:50:95:42:
4e:54:a1:c6:76:47:b3:69:ef:e0:23:19:fd:2f:3d:
01:49:99:57:2d:03:4b:a9:d3:a2:26:eb:68:11:36:
ec:20:98:22:e9:4b:53:80:ae:ed:67:4f:b7:b0:9a:
95:45:20:fc:91:35:c4:61:3b:2b:11:d9:a5:8c:71:
96:65:a2:34:2c:63:ec:b8:29:71:c7:5e:b7:0f:3a:
95:ba:de:11:e8:1a:37:57:cf:a7:bc:7e:56:6a:6d:
68:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C4:D6:79:E5:3F:48:94:C5:31:0F:EA:99:FB:1E:B9:4B:1F:FE:6B
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:31:d6:d0:a1:c0:2c:d7:c3:9c:e0:a9:61:aa:da:ef:33:f5:
0e:c1:45:55:5a:8b:2e:b7:82:02:01:98:a1:68:70:1f:1d:1d:
06:6c:24:3a:12:ca:6b:12:19:d0:15:29:9d:b4:b3:3e:20:4c:
db:9b:a8:a2:05:8a:da:2b:46:68:65:62:07:84:85:bd:1b:bf:
27:74:d7:86:c7:44:c7:57:4d:18:54:c8:1b:5f:f3:97:a9:5f:
21:83:06:2b:2c:78:a7:8f:e7:af:4c:ee:4b:3b:59:ff:6d:e2:
ee:ee:b8:0b:02:77:0d:47:8c:3d:62:84:5b:09:e5:cd:fc:b6:
30:ce:cd:24:6b:65:31:60:b7:49:8a:9a:fe:d4:5a:ac:4c:5e:
ef:ab:0e:35:08:bd:c9:3b:57:a1:a2:58:01:8c:90:14:54:13:
35:79:36:cf:49:71:ad:28:c0:4d:43:63:c4:f7:4e:c2:74:36:
fc:c6:38:ec:f4:6d:ec:01:b9:c7:95:74:31:a8:53:23:a6:9a:
2f:f0:1c:7a:79:62:47:6d:88:10:06:8e:23:09:86:c4:50:b1:
c2:56:b6:eb:6f:b5:80:2d:40:12:c4:c2:d2:e8:ac:3e:fa:5d:
fa:bb:6a:29:1d:fc:7c:e4:92:b6:ed:e3:bb:28:e3:e4:21:17:
9a:05:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:27 2026 by rpki-client