Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.mft
File: yt5exV7u1umhBlv3bCRzlARBqh8.mft (raw, json)
Hash identifier: GtGM7oXkNSbZOJY27ojQCtyjA2U03lN+OuRyHPmhEss=
Subject key identifier: D5:6E:53:AB:DA:C7:59:59:9B:E6:11:35:C5:DF:EA:0F:A0:75:0E:F3
Authority key identifier: CA:DE:5E:C5:5E:EE:D6:E9:A1:06:5B:F7:6C:24:73:94:04:41:AA:1F
Certificate issuer: /CN=cade5ec55eeed6e9a1065bf76c2473940441aa1f
Certificate serial: 019D26CCAA57262D675F33865E8292BE2288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yt5exV7u1umhBlv3bCRzlARBqh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.mft
Manifest number: 5B
Signing time: Wed 25 Mar 2026 21:00:40 +0000
Manifest this update: Wed 25 Mar 2026 21:00:40 +0000
Manifest next update: Thu 26 Mar 2026 21:00:40 +0000
Files and hashes: 1: gJJ6nGkdlWibyY0H2e5EXnsr4wc.roa (hash: 1bARVANifpQoHq/ju0Triq1Tp8AVUELm5oTGHy8n5vw=)
2: yt5exV7u1umhBlv3bCRzlARBqh8.crl (hash: rASmDko6RKj55LaZaEfdaQOKJxy4KGgKJoXDnwqRhkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yt5exV7u1umhBlv3bCRzlARBqh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:aa:57:26:2d:67:5f:33:86:5e:82:92:be:22:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cade5ec55eeed6e9a1065bf76c2473940441aa1f
Validity
Not Before: Mar 25 21:00:40 2026 GMT
Not After : Mar 26 21:00:40 2026 GMT
Subject: CN=d56e53abdac759599be61135c5dfea0fa0750ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c8:5e:ab:ed:d6:f6:e6:8d:76:6b:0a:0e:83:
7d:dc:1d:7e:ee:86:e5:a8:26:b0:74:63:85:a3:d1:
05:93:69:55:72:a9:45:6a:63:cf:d0:fd:8e:ac:5a:
da:2d:46:17:cc:5a:9d:c6:b5:b8:d3:d7:0b:89:cb:
0b:7c:de:f1:55:96:57:58:29:87:4d:f0:98:06:42:
55:86:cd:82:53:0d:aa:d9:68:48:2f:25:b0:a2:4e:
90:8b:c9:aa:53:bd:a8:38:2e:2e:9d:70:6c:76:24:
9d:04:78:47:70:d9:3e:92:c3:c1:2e:28:8a:7a:56:
4a:e1:ad:7d:da:b0:44:02:f3:9e:7e:29:77:3c:18:
a3:b1:4f:fc:83:a7:a7:c0:08:ed:d4:86:8b:e0:8d:
b0:82:de:7e:71:62:0e:71:26:a4:fc:99:50:7e:62:
30:f0:cd:cd:1e:39:27:48:2d:0a:68:7d:c1:a2:96:
11:b1:22:ad:02:60:8e:f2:d6:ac:e9:21:ae:81:81:
6f:de:25:f5:78:d8:35:4d:53:11:5b:9b:e7:9f:ef:
50:61:b4:ba:ad:e4:44:92:76:64:44:4b:ed:c3:7b:
5d:ee:2e:26:4a:8c:67:ac:fd:ac:c5:5b:ff:70:43:
cc:0a:7b:ba:17:c5:68:a2:00:bb:07:18:03:cd:33:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6E:53:AB:DA:C7:59:59:9B:E6:11:35:C5:DF:EA:0F:A0:75:0E:F3
X509v3 Authority Key Identifier:
keyid:CA:DE:5E:C5:5E:EE:D6:E9:A1:06:5B:F7:6C:24:73:94:04:41:AA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yt5exV7u1umhBlv3bCRzlARBqh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a6f1a1-0f33-4335-8eb6-f0ea712cda08/1/yt5exV7u1umhBlv3bCRzlARBqh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0a:6e:4f:a9:75:05:30:3a:fa:98:5c:3d:07:1c:27:23:a0:
0f:5c:42:52:90:39:21:48:17:b3:82:6b:d7:51:ac:26:a5:4d:
3a:68:a0:8b:08:01:ed:67:e7:94:89:2f:9e:1b:81:bf:96:85:
0e:44:8d:46:ac:04:24:66:4a:06:4e:40:77:ff:d5:97:49:10:
c0:aa:27:0a:f3:3e:ac:4d:ff:e5:b1:68:1a:de:64:83:4e:d8:
2d:a4:65:ce:0c:41:38:ce:24:63:f8:f3:81:50:f9:d3:0f:1a:
39:4a:d5:bf:ec:f2:3e:9e:43:d5:36:df:a2:f5:fd:8c:76:d3:
eb:84:0c:e1:6e:5b:6c:3b:c9:2b:01:17:b5:92:ad:8f:ce:e9:
30:ef:8f:0a:1f:e0:d1:7c:8e:73:b1:6e:20:f4:f8:84:21:6b:
0b:d5:18:a6:98:d0:9a:ea:21:f0:6e:df:95:dc:94:9d:16:69:
83:02:77:fa:0d:c1:02:80:18:f9:91:0b:4c:49:32:e4:6a:ce:
10:b5:99:80:80:25:0d:fe:e3:4e:1d:05:a6:bf:43:04:af:61:
85:2f:ba:53:79:ae:fa:bd:f2:e9:54:79:e0:26:23:f2:02:a8:
a0:46:f6:0d:07:6f:2e:42:95:e5:4c:fc:1c:5e:85:84:f8:90:
3e:ef:c1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:21 2026 by rpki-client