Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier: 66GlafAS8n6FKxV5e+cHGSUq/FrnfgQqNJvPoPOCTHg=
Subject key identifier: C5:FA:CA:31:CA:3A:C7:2A:3F:F7:CA:FA:6D:72:A1:BB:58:08:38:BE
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 019E1FB564C6EBEA2879B7C278F45E5677FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 05:00:41 +0000
Manifest this update: Wed 13 May 2026 05:00:41 +0000
Manifest next update: Thu 14 May 2026 05:00:41 +0000
Files and hashes: 1: X_VAzsonJf2-Y0J7PUgtiVvr18s.roa (hash: omFujTcefEd3WWyYkvlLAE/INtwxFEvZh0pqgOeoURc=)
2: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: Am3ewFE3wHJ9PUxPSbQTPVkEU/QSaUJqnAZUBSsjdHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:64:c6:eb:ea:28:79:b7:c2:78:f4:5e:56:77:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: May 13 05:00:41 2026 GMT
Not After : May 14 05:00:41 2026 GMT
Subject: CN=c5faca31ca3ac72a3ff7cafa6d72a1bb580838be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:23:71:15:45:72:bc:38:73:d3:c2:a2:0d:
8a:00:07:0f:ac:6e:63:cb:b6:6f:df:f9:3d:fa:f7:
a5:8b:7d:58:bc:ff:1c:e9:9e:d1:f8:a5:7d:5a:a2:
b9:84:b2:c7:1f:b7:38:13:71:9f:d3:be:e7:c1:e7:
da:6b:c1:83:e9:4c:21:0c:f8:35:00:01:96:6c:bf:
5f:1d:86:b2:e3:df:2a:86:58:0a:9a:6a:d8:14:5c:
7a:c6:9d:d5:c9:da:4e:a7:8b:4e:70:7a:ab:13:22:
04:20:10:a6:fb:2a:09:08:8a:17:9c:be:d1:64:df:
92:66:b3:fd:fc:6b:48:70:e6:34:5b:5c:d6:80:b7:
49:cb:25:64:25:6b:06:53:25:ba:70:d9:fb:53:2b:
cd:15:4e:a3:67:4c:04:b3:3e:2b:bd:cf:73:e4:f5:
4d:92:33:cf:56:a1:9c:b2:45:c6:37:69:e6:f1:40:
09:a0:ab:0c:79:3c:ff:23:72:1d:be:c0:82:ca:85:
37:38:7b:5a:5d:0b:aa:59:b0:39:40:9e:9f:41:35:
d5:0c:25:88:23:cf:dc:7b:c2:c3:f3:3c:94:07:3d:
fd:14:7a:b1:9c:6b:4b:c0:e2:9e:49:35:1b:c6:c2:
4f:1a:3b:12:ee:09:10:da:2b:b2:e2:b4:78:6f:d2:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FA:CA:31:CA:3A:C7:2A:3F:F7:CA:FA:6D:72:A1:BB:58:08:38:BE
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7a:17:ce:ff:74:ee:29:f2:a0:d7:8b:f7:d2:e5:31:c9:db:
17:ab:28:8c:4d:56:ad:79:70:c8:f0:79:72:44:a4:6a:ed:73:
02:34:4e:5b:e4:99:11:19:8d:07:10:57:b9:cf:6b:dc:36:33:
84:fe:e3:1a:5d:b8:75:dc:34:6d:2a:dc:99:c4:52:e4:ea:ad:
93:d4:a7:39:e3:ee:d6:01:c9:90:4c:58:d6:15:a3:66:dd:eb:
b0:4d:a2:39:48:36:02:07:cb:d2:55:03:dd:22:c6:5f:05:4a:
07:f5:8a:85:93:13:01:ab:0a:01:a3:f4:8f:53:b5:d9:dd:37:
03:34:79:62:2d:7a:b0:f9:0c:ed:24:cf:c0:07:81:9f:f6:da:
a9:2e:3e:f1:19:28:f8:fb:de:30:98:61:ab:c4:b1:2f:6e:b3:
49:9b:7b:93:0e:46:8b:a8:bc:0e:04:83:ba:57:0d:5d:62:0a:
4d:ed:55:37:61:cd:a3:d8:e9:67:c8:b5:5a:22:74:ae:94:a4:
2d:99:d1:7f:cb:23:e9:21:2c:09:6f:eb:ca:43:b8:16:ac:c8:
40:b3:03:f9:b0:a9:26:14:b5:5d:ea:b9:c3:7f:a6:4d:89:93:
6a:15:4a:0a:ed:69:54:42:0c:3a:f3:34:46:23:cd:2a:ee:52:
5a:00:5c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:24 2026 by rpki-client