Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: 4wiW9aKbb0e0HNP5pezW3e0qdABLBoxNOL+2xpFdxkU=
Subject key identifier: A2:89:C9:F6:EC:B9:D3:F9:DD:19:5B:38:AB:80:62:CC:E0:FA:07:F4
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 019E314DBC05B545C1FEE7850A8A9841B1C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 15:00:38 +0000
Manifest this update: Sat 16 May 2026 15:00:38 +0000
Manifest next update: Sun 17 May 2026 15:00:38 +0000
Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=)
2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=)
3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: IqX0BFgmU68xhbaeFBbk6Qg8xf+nsu6nGcPy0FzUfdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:bc:05:b5:45:c1:fe:e7:85:0a:8a:98:41:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: May 16 15:00:38 2026 GMT
Not After : May 17 15:00:38 2026 GMT
Subject: CN=a289c9f6ecb9d3f9dd195b38ab8062cce0fa07f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:53:79:2f:07:2e:5d:7c:59:cf:b0:5e:15:
07:21:95:55:32:c6:e7:26:5c:26:1c:fa:7d:4e:c0:
60:e0:87:4b:76:9e:9b:7a:85:87:31:62:5b:13:9e:
96:1a:2c:62:ed:65:e1:ca:1f:33:c4:2e:82:00:03:
cc:49:ac:bb:10:e5:6d:73:2a:97:7a:f6:75:24:18:
03:01:8b:80:83:a6:37:b0:9f:24:da:13:9e:da:7b:
8d:c5:65:75:40:60:e8:be:a3:ac:15:e6:15:5e:61:
8d:d9:0c:44:79:12:f1:02:7e:d6:cc:06:1a:27:83:
e1:38:cc:b9:ff:13:e0:da:92:02:c1:62:b5:66:20:
96:0f:fa:c0:a7:f2:56:6a:0e:0b:ac:46:e1:5a:01:
a7:3c:f5:5f:21:49:fb:84:a5:21:81:f4:e7:9b:fe:
10:25:9c:f5:ef:45:b0:9f:cc:36:f0:e8:c6:e5:36:
79:3e:ea:32:bf:d7:49:d2:fe:50:0b:9e:7f:2c:68:
76:6a:11:38:e3:71:7b:6b:9c:f0:ee:7d:49:5e:80:
b8:81:4d:60:aa:a5:04:4b:d3:47:c0:28:50:a4:40:
8d:99:77:03:d4:52:45:86:fb:11:20:28:bc:62:13:
97:81:26:e4:2b:a6:99:f1:ef:9c:cc:cf:11:52:75:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:89:C9:F6:EC:B9:D3:F9:DD:19:5B:38:AB:80:62:CC:E0:FA:07:F4
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:00:34:df:ed:6c:34:7e:15:e7:a0:b7:23:c8:5a:eb:0d:0b:
1b:45:f7:bc:07:c6:91:eb:1c:95:0a:95:12:f1:09:84:3b:66:
3f:1d:48:6e:56:3e:fb:49:3a:c7:d0:2c:e6:5a:b4:ea:56:51:
a5:cd:d0:f0:5a:3b:29:f9:5f:05:0c:fb:d4:9a:e2:a3:0f:12:
16:f4:a2:d0:6e:d0:9a:18:3e:ae:f6:75:e1:41:74:9f:b7:e5:
22:c6:46:e7:8b:74:e4:bc:b7:d2:0d:cb:84:aa:d5:a9:1e:96:
d7:aa:6e:d2:9b:62:76:83:50:53:7e:0a:c4:94:23:aa:8d:b3:
0a:12:ad:11:57:36:4e:f4:54:a5:31:5e:40:4b:4d:f1:72:98:
7f:20:5c:7a:a4:da:3a:12:4a:42:0a:6e:83:70:9f:d8:74:18:
dd:4e:dc:30:67:05:d3:d9:0d:74:0e:1b:04:47:c2:67:33:76:
fb:6e:f1:95:00:f2:7e:85:36:d7:b8:a4:84:49:2c:e8:b9:73:
03:c6:bf:3f:cd:5a:87:14:25:70:67:a6:06:e2:91:9f:38:6f:
a4:a0:1f:98:f7:af:37:0a:52:1c:cc:91:fa:38:39:ca:ae:be:
57:e8:ce:5c:25:d5:94:bb:07:b1:ae:5d:9f:bc:01:e1:51:3c:
71:bd:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:28 2026 by rpki-client