Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
File: jYkvTe2SJX5nunTxdiyLyRTr1hw.mft (raw, json)
Hash identifier: JbMa2X7TYUKGSc/33T9uSStgeAyKQSmiQjDetN8W7Ck=
Subject key identifier: 54:55:A6:3C:EF:DA:1B:C2:9F:4E:39:AD:7A:F7:E2:96:65:13:84:5F
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Certificate issuer: /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial: 019E1DFE83F2204FB1DC9AD255F3301CE249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 21:01:19 +0000
Manifest this update: Tue 12 May 2026 21:01:19 +0000
Manifest next update: Wed 13 May 2026 21:01:19 +0000
Files and hashes: 1: 75-KqODx3w8CvM9m5Nq3kRsXyMo.roa (hash: A6bAUCVGwzASuTY5FNYElUtdHA4J3zfHfU7IL2XZWu0=)
2: jYkvTe2SJX5nunTxdiyLyRTr1hw.crl (hash: aWtniYbW91VCru5XvT+zSp4/lSWsOHyQENjIq5rhhBs=)
3: kN8sJaIrd98steTWsu3vc7sEjKI.roa (hash: MkLW8K9XVhuTwi22jPlIAzX7VARe0fbKX4ZjMGnmNrI=)
4: tTnZl8uF6ADN5gv_dFCnGczPy10.roa (hash: yFxKga5LtYoglKO/yUWDlJacjL9nZm+MXR5rVDyXPDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:83:f2:20:4f:b1:dc:9a:d2:55:f3:30:1c:e2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Validity
Not Before: May 12 21:01:19 2026 GMT
Not After : May 13 21:01:19 2026 GMT
Subject: CN=5455a63cefda1bc29f4e39ad7af7e2966513845f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:85:b7:bf:41:f8:e7:27:af:c5:6a:63:07:
a6:c1:05:07:ff:61:55:04:0e:dc:3c:2f:2e:2d:a0:
7e:ab:a6:e9:c2:c9:34:70:b8:67:65:b0:bf:4c:f4:
48:43:c8:f5:c8:89:c5:a0:92:74:df:6c:86:30:4f:
41:4b:5a:e6:ea:d8:18:88:e2:f1:4f:59:84:cf:75:
b7:50:f8:8e:ae:06:af:25:3d:b6:4b:86:2e:13:1f:
c4:f3:fd:d3:b0:a3:b9:fc:0a:51:ac:68:e7:f4:56:
30:11:60:ae:ee:64:85:66:67:6c:2d:4d:49:c6:55:
40:db:f5:d1:a3:3c:2b:9c:75:15:a6:25:3c:73:60:
77:e0:4e:e1:18:e9:6b:97:ca:9d:2b:f9:77:37:ac:
9b:a5:8b:b0:a1:57:91:aa:79:a1:1e:75:b0:70:61:
a6:97:ed:68:fd:64:0d:87:b9:e1:d9:ef:1e:80:85:
da:b7:2c:af:66:92:5b:ac:dd:9e:9e:22:a1:a7:29:
35:d2:a5:4a:a8:d3:10:65:8d:4e:9a:d1:7e:c0:ce:
ee:59:8b:ec:15:0d:99:0e:48:be:80:7b:77:4f:93:
d6:48:30:5c:3d:32:ce:b2:37:8c:71:54:36:aa:37:
f0:ae:d5:a6:9c:4f:71:14:bf:ed:ed:f2:45:43:2f:
9b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:55:A6:3C:EF:DA:1B:C2:9F:4E:39:AD:7A:F7:E2:96:65:13:84:5F
X509v3 Authority Key Identifier:
keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3d:70:3a:cd:d2:97:9d:6b:0b:32:46:01:c3:06:9f:03:65:
6c:74:c8:62:fc:ca:ef:d0:33:8d:1a:1b:28:c1:5d:bf:2d:a3:
af:f5:07:b3:50:e6:19:4c:66:a0:40:36:bc:09:4c:02:04:ab:
38:83:0f:39:62:93:ac:28:6b:e3:cb:0d:e4:c2:9c:a1:8c:77:
03:02:1f:29:f6:e5:e7:94:36:41:13:b0:70:f8:09:01:70:96:
ff:08:8e:e0:da:28:85:c4:db:ed:73:62:27:b7:84:52:4f:61:
3c:7a:a3:84:27:9f:39:d7:a1:4b:28:57:0a:9d:25:ac:c2:c4:
60:50:7f:1e:29:cb:57:e2:f7:d8:aa:d4:f8:80:73:89:e4:ef:
4f:f0:98:be:46:2e:4d:e5:9d:a7:74:3a:6a:42:2e:60:e3:e4:
74:01:bb:07:6a:e9:17:61:5f:e9:8d:f6:53:a3:50:79:aa:a4:
63:b0:e5:27:16:b7:12:54:bb:ff:ba:fd:d3:56:41:f3:99:33:
99:bf:10:e0:63:66:9f:8e:1e:f8:63:d5:18:71:e9:00:24:14:
e6:2e:83:26:17:f1:48:28:2b:25:63:2d:51:3b:ce:bb:a8:d6:
10:88:d3:41:1e:e1:fe:f0:29:34:ca:0f:bf:b3:03:d4:4f:bd:
24:90:0d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:40 2026 by rpki-client