Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: INHvzzerP/AtGgIUk0MPq21qefDY77jsZ0q97btifBI=
Subject key identifier: 8B:A4:EB:BE:9C:0F:2A:CF:9B:23:07:75:2D:0C:E6:C7:78:78:E2:87
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 019E1E35D75B769B06A3DFB29AFA7C3104AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 09B2
Signing time: Tue 12 May 2026 22:01:45 +0000
Manifest this update: Tue 12 May 2026 22:01:45 +0000
Manifest next update: Wed 13 May 2026 22:01:45 +0000
Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=)
2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: lnvc/4FrmanuBH9rFYU5cQ7bX9CvCcRX33LShwz7qhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:d7:5b:76:9b:06:a3:df:b2:9a:fa:7c:31:04:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: May 12 22:01:45 2026 GMT
Not After : May 13 22:01:45 2026 GMT
Subject: CN=8ba4ebbe9c0f2acf9b2307752d0ce6c77878e287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:e7:3f:2a:2d:53:ec:b6:99:45:33:79:27:
16:d3:b7:f5:f8:2f:65:10:cb:f3:e1:ff:29:55:c0:
dd:ae:76:2b:64:0d:23:c9:6a:16:64:04:50:99:66:
48:e0:37:7d:48:46:40:b6:fa:69:62:00:6e:7c:e4:
44:26:50:81:e4:62:e7:6f:35:77:cc:b8:0e:b8:be:
07:29:ff:5f:bf:87:88:a9:ff:23:d5:5f:3b:18:b3:
63:bf:00:41:16:8a:c7:69:b1:2d:ae:b7:2f:a2:ed:
c9:0b:f5:e8:ac:fc:f3:14:8b:24:05:95:2b:25:f1:
55:f7:fe:6a:09:96:5c:63:ed:e5:6e:12:bb:16:a9:
94:6d:bd:37:bf:e1:f4:b4:94:c0:7f:44:15:d4:20:
de:f4:93:74:7a:42:d1:00:6a:06:6a:9f:40:be:94:
e3:e3:00:61:8d:8b:c0:7e:c8:1d:f9:57:c8:88:c4:
8a:c4:62:b5:d1:68:1a:da:a7:a4:10:f2:59:6d:0e:
74:28:0d:8b:67:af:2c:df:f1:01:05:4e:f9:1b:0d:
97:d1:d4:1c:4a:d9:6e:ef:f4:c5:aa:f5:bc:fc:a5:
23:b3:16:e5:2d:92:19:5a:64:ae:18:ff:7d:f7:f4:
2d:fe:6f:50:3a:fa:26:2e:f3:c6:01:dd:aa:39:8c:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A4:EB:BE:9C:0F:2A:CF:9B:23:07:75:2D:0C:E6:C7:78:78:E2:87
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:99:3a:a4:29:4b:c0:d7:c9:95:db:b0:3c:e6:9e:2f:6a:19:
ff:b1:c6:7c:38:56:09:01:3b:66:a3:1a:a0:42:b1:b6:aa:31:
49:ae:be:5b:e9:78:15:03:ed:58:4b:ca:9a:eb:2d:12:50:f7:
8a:36:c2:73:c6:c4:61:56:db:57:2a:8e:c9:9d:e0:75:1e:e4:
f0:a4:47:81:13:c7:fb:69:8d:1f:79:0b:08:d6:61:a0:fe:03:
83:a9:9d:31:20:d9:77:99:30:20:65:80:20:ed:9a:57:a7:fa:
d4:1c:7b:fd:e2:be:3e:16:ca:ed:2d:ea:32:58:f2:9a:28:73:
e4:f4:f7:5c:05:8a:0a:ec:1b:d7:da:26:ec:74:b8:44:31:22:
ac:5f:f0:79:87:50:d8:d1:45:c2:2b:cf:c2:e4:a1:44:35:f7:
d3:28:2a:c4:99:d4:a9:29:7c:12:5e:e2:b3:32:29:6d:2a:bf:
cf:bd:cd:da:38:af:ee:30:c0:66:7f:89:dd:38:65:f2:02:29:
90:71:77:0b:97:30:d1:41:ff:2e:84:79:40:ae:ba:2f:6b:6b:
f5:30:e3:da:93:07:2c:09:d5:d3:69:da:02:ba:91:86:91:52:
68:ba:fe:e0:c0:c5:3e:89:72:93:62:f8:8b:77:22:c8:6c:8e:
41:df:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:31:03 2026 by rpki-client