Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
File: ymFHjk1lm-zoIDxei6jo-C8EcNc.mft (raw, json)
Hash identifier: tgU08NkevtHM8CPqX3PCnWtXC6CFnYLRLnXVaqH9Mx0=
Subject key identifier: E9:18:75:A1:1D:6B:BE:A3:A0:4D:08:96:8D:20:74:CE:C3:04:6C:37
Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Certificate serial: 019E314DD692E36C0350087E5807289B4780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
Manifest number: 0338
Signing time: Sat 16 May 2026 15:00:45 +0000
Manifest this update: Sat 16 May 2026 15:00:45 +0000
Manifest next update: Sun 17 May 2026 15:00:45 +0000
Files and hashes: 1: 1Fk04mxHWiQyArs1LutFgzh8wJI.roa (hash: fEoTYA52qtwHCVar7eg2OPgHFtSf1SmbEKWBVALe3L0=)
2: 9vsi3nCV1gkad2D_R9PGQ4_aUds.roa (hash: WlJCdNUrXcUzq+V2kFSnXZd+7HPYbq2YI6LmfD3u5nQ=)
3: ymFHjk1lm-zoIDxei6jo-C8EcNc.crl (hash: y/KQZJLmKrEHnOSyAMiW/4zaI5E3qn4823eEDecXU6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:d6:92:e3:6c:03:50:08:7e:58:07:28:9b:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Validity
Not Before: May 16 15:00:45 2026 GMT
Not After : May 17 15:00:45 2026 GMT
Subject: CN=e91875a11d6bbea3a04d08968d2074cec3046c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:d8:a4:31:a7:75:46:4f:03:99:6d:19:7d:
6e:97:01:68:5f:f8:96:20:39:92:6f:3c:bf:08:44:
3a:7a:b8:58:19:b7:76:c8:08:90:4e:94:c1:ba:ab:
38:fe:04:89:90:6a:3e:2b:7e:77:27:df:f9:5f:ea:
09:39:09:d3:06:d6:ac:76:b5:75:10:a2:42:95:9e:
19:1e:55:3d:72:bc:22:74:1f:d6:7c:2f:f5:79:d4:
8a:45:28:96:68:c4:62:c9:dd:ea:b5:3a:49:02:53:
b5:88:49:31:c8:5b:69:f1:ae:be:e5:cb:fc:5e:30:
7d:47:09:04:e3:a4:89:8f:df:94:e9:0a:c7:3c:7d:
c3:e5:d7:57:1f:92:63:f2:4e:22:18:94:4b:39:2f:
1e:1b:de:b6:c3:cc:76:d8:2e:d2:78:f2:0d:b9:57:
13:e8:35:5d:94:d4:c9:72:b7:6c:b1:0d:35:c3:54:
b4:b4:b0:b5:40:c0:1d:12:57:c0:1b:9d:de:42:4f:
f8:96:59:7e:1e:ee:9f:e3:99:33:9d:57:53:62:87:
e7:21:7e:23:36:36:73:b4:3c:5f:39:43:a1:27:35:
cc:3e:31:55:a6:06:4f:16:aa:44:5f:62:d7:29:02:
5e:b8:04:a4:5a:41:af:e6:f0:82:79:b1:e3:41:0f:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:18:75:A1:1D:6B:BE:A3:A0:4D:08:96:8D:20:74:CE:C3:04:6C:37
X509v3 Authority Key Identifier:
keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ed:3c:90:31:be:6a:9a:7b:85:54:12:e7:ef:71:cd:e1:7e:
54:72:74:ca:d1:1b:8f:7f:28:d4:b9:e7:45:4a:a0:94:a2:09:
73:4a:19:78:a7:89:fa:6a:9a:b7:08:31:23:2a:5a:ec:da:85:
fb:f2:e8:23:81:5d:4f:d8:94:dc:dd:8f:1b:e7:93:27:c5:53:
c8:4f:db:81:b6:31:cc:4d:c7:76:65:ab:56:c7:64:d3:5c:65:
9b:95:4c:f4:d6:f5:87:52:04:59:de:b8:a4:1a:d2:80:bc:5f:
25:33:82:d8:07:bd:45:38:cd:aa:d5:d6:7b:b2:4d:e2:75:a4:
7c:53:df:b3:5d:62:0e:02:a8:9e:2d:46:b7:4f:69:0f:6d:5b:
17:80:fd:07:23:c3:0b:38:ea:7b:c0:1c:2e:a5:7c:34:06:8a:
27:f3:45:5e:7f:b1:8f:30:3a:49:3e:eb:90:00:6e:26:47:44:
f8:27:00:80:04:d6:dd:a4:6d:d0:2a:35:53:bd:48:c6:42:65:
66:0d:bb:28:1d:70:a3:81:3b:aa:14:19:50:9b:2f:4d:b5:2b:
59:87:d3:8c:7c:6a:8c:58:08:80:80:cc:9a:98:e7:c6:cb:69:
2d:c0:74:d5:0c:cf:af:16:a5:14:b2:c4:67:c8:dc:f1:78:0a:
1d:48:5a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:32 2026 by rpki-client