Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier: YcRSj/ad+hJvxt13mLwCXkdP4ybs4rJUW1esuIVSdO0=
Subject key identifier: 41:92:B8:A7:03:63:75:99:8E:B4:17:D7:5C:9D:AD:A3:8C:86:74:06
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 019E1EA38557CA2ABE9AB1E5BF39BE51CAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number: 1397
Signing time: Wed 13 May 2026 00:01:33 +0000
Manifest this update: Wed 13 May 2026 00:01:33 +0000
Manifest next update: Thu 14 May 2026 00:01:33 +0000
Files and hashes: 1: ObjrmTselcOgfHeqKSeC3ZkZE8M.roa (hash: h15edxf80NHDBsD89JncvBzL8sjznUrSp3Fp172V3UI=)
2: WrTCSuQUvxPpAUF0e5vDgZhjo64.roa (hash: +oAgf/l41Uj9PIOaXoHSTwcfDAsCiAHjtNGVMj4O9AY=)
3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: Q8O01AA3GaUz+wpxi0Hm5yQ2P0qtxbPZkGDHWxNUEY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:85:57:ca:2a:be:9a:b1:e5:bf:39:be:51:ca:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: May 13 00:01:33 2026 GMT
Not After : May 14 00:01:33 2026 GMT
Subject: CN=4192b8a7036375998eb417d75c9dada38c867406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:07:ac:09:6f:0e:46:15:8b:97:85:fd:90:
cd:11:40:ae:85:65:96:68:6f:a7:bb:85:65:00:49:
74:d1:c7:f6:bb:3e:c5:2f:b5:83:0f:de:b6:b4:53:
55:0c:55:d8:65:7e:9a:cd:d8:c4:49:01:80:62:19:
b8:6b:c7:00:2d:f4:b2:7e:35:2b:ad:a6:fc:e8:30:
b6:2e:d5:42:1b:1f:ef:5d:6d:32:ce:1c:8e:0e:3d:
dc:f1:27:2c:8a:e6:b7:ea:ed:ae:d9:21:47:cb:aa:
d4:60:83:79:62:27:ee:f6:5a:49:54:fa:f0:ed:cf:
5f:6a:60:a1:0e:fd:2a:b7:e1:ea:ab:a2:7e:22:8a:
da:d2:c0:b8:eb:98:0f:42:ea:c1:7c:f4:e9:fd:0b:
2e:b6:9a:a5:b1:e0:ce:a9:46:85:20:66:3f:f0:3b:
36:d9:91:6a:eb:2e:a8:30:94:4d:42:22:45:3a:66:
e8:67:7e:3e:21:cf:77:ee:38:83:bb:d8:44:fc:30:
a1:26:50:0e:98:bf:1e:06:e2:f2:7b:51:53:0f:d5:
57:81:36:f9:23:58:a7:8b:2c:de:e0:d6:17:58:17:
b4:8c:44:53:60:86:d4:c2:22:42:ce:91:9c:7a:c8:
8b:8a:17:55:0b:e3:ce:73:0a:fd:fb:e1:7e:c8:2f:
cf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:92:B8:A7:03:63:75:99:8E:B4:17:D7:5C:9D:AD:A3:8C:86:74:06
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7c:fa:c9:72:08:51:c1:91:6a:7d:79:10:e0:4e:d2:da:f9:
76:72:1f:b8:d6:45:29:29:5a:77:ed:10:9c:e5:e4:82:5c:65:
5f:b9:e0:5b:ed:0a:fc:3b:12:98:c7:c1:d5:16:6d:0a:4b:75:
3e:4a:4d:e7:1c:95:c6:ad:98:c8:b2:26:7b:80:ce:6f:3c:a9:
f6:5d:a0:0a:ce:78:3e:76:50:37:94:6e:56:cb:eb:e9:63:9c:
9e:94:fc:9b:01:25:c2:05:53:b3:98:7a:a8:20:74:97:32:f1:
61:0d:8a:fc:e1:67:93:53:d0:b8:86:75:df:79:23:cb:5a:e5:
f7:07:b1:15:9c:a9:4f:1f:5f:81:ca:1b:8c:46:d0:53:d1:b5:
32:c7:1d:00:41:5f:74:a2:47:48:d0:e2:72:56:17:78:f0:c0:
01:aa:d3:f7:ee:91:cf:04:b9:08:01:7d:30:77:41:74:c0:18:
ee:cf:ee:a6:81:62:0c:65:0a:b2:7f:df:ce:0d:56:2c:24:da:
67:29:98:23:30:9f:52:58:75:c3:f5:e5:74:f4:51:6c:03:c4:
67:f4:0a:97:d6:ab:04:aa:fe:a6:b2:97:55:3a:bc:e1:c6:f1:
d0:46:de:f4:9e:94:7d:09:da:08:26:fa:d6:55:4f:c5:d1:8d:
4b:d1:8f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:59 2026 by rpki-client