Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: NKmdhRug33f0AnkqGlljFBdtZgaPch3zfsHHPYgTg64=
Subject key identifier: D9:EC:3D:B0:B1:19:B1:BD:74:23:55:0E:20:9C:A5:FA:3D:B1:65:C7
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 019E292707028AF12B11856563C396F9F0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 0F26
Signing time: Fri 15 May 2026 01:01:23 +0000
Manifest this update: Fri 15 May 2026 01:01:23 +0000
Manifest next update: Sat 16 May 2026 01:01:23 +0000
Files and hashes: 1: 4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa (hash: 0CyjN4fDt2gePEzz6GNI+6v2hHdu94zd3doXA9mCmrY=)
2: E7S8kk0v-3rKEWlslioybHa5U2o.asa (hash: CrfGOpfT92BFeNnmG2NLzbIsZjJeDSaj2z6bEyCVnBE=)
3: P5w8UdbfAfDa1DxOi4VrhWTzLpM.roa (hash: +0DQfwomOYLD75ppkH2FpMEhDzxTGpHuszvhO6Ri7kw=)
4: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: aC0mQ3aKFiLdMYgM8UbcyZnDvXVHYxDdMmt8pvO7XzM=)
5: YrZcQqizcm-6Ws7265yR5ro3QoE.asa (hash: MFAOo3Xix00XFxAQiqGQoGajsrjp1l0fhfv38HvzhSI=)
6: fAgTSS_ONStFnLvEGPMgmGZBmpo.asa (hash: TOVMYJAfL34na7IHXLihlNeKoxMB/uFVliwHd1D3Uzc=)
7: i2ZN82VS7VSqjYAHCBTpFBgLiEo.roa (hash: gw1xxGQ0BqeQr6XFI4+gKsjUN/m1I0WJsAj9BQrH0uA=)
8: uq7KjFfupPB_i8cccfycTh05AaQ.roa (hash: q7ZkYvBa6WisIOhSf12hByjNMV7uSrIgT5csQL8UbvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:27:07:02:8a:f1:2b:11:85:65:63:c3:96:f9:f0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: May 15 01:01:23 2026 GMT
Not After : May 16 01:01:23 2026 GMT
Subject: CN=d9ec3db0b119b1bd7423550e209ca5fa3db165c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:82:3b:be:f9:56:fa:52:d5:a7:4e:86:a9:e0:
b4:b7:09:ec:d8:bf:bc:28:97:ca:4f:b5:5b:ac:f8:
4b:5b:d0:49:3e:66:c1:85:c0:8c:32:c7:ca:a9:4a:
72:9e:e4:f8:1e:51:38:29:f7:b4:8f:50:e6:88:40:
72:e3:df:e2:8f:8f:de:fc:12:37:0f:a3:af:24:00:
f3:31:82:58:a8:50:84:17:a5:5e:de:63:c0:a0:42:
8c:8f:6d:72:ce:65:75:bb:ea:08:da:14:f9:a4:da:
dc:95:3e:18:ed:77:d4:48:7d:09:62:90:7f:76:6c:
f9:6a:a0:e5:62:9f:2c:7b:78:c8:67:66:ca:76:94:
0a:fa:3e:e1:5d:eb:2e:41:64:6f:e2:33:07:0d:1b:
a7:0a:59:5a:df:d9:39:8d:9e:82:b0:d1:e8:e6:18:
44:d5:0f:78:0d:73:f9:ac:88:e5:ab:ea:bd:ea:00:
52:31:22:aa:b2:d1:e7:55:42:fa:87:c3:61:b7:4e:
38:4a:86:8f:0e:0a:64:2c:26:13:dd:e8:81:7b:d8:
2f:a4:4f:0e:aa:79:31:27:b3:e6:09:bd:6a:fc:87:
1b:b4:f0:1c:22:c7:fe:9f:30:24:dc:d8:91:13:b5:
9c:9c:aa:f5:d0:50:20:3d:f5:ce:1a:d8:4c:e1:e9:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EC:3D:B0:B1:19:B1:BD:74:23:55:0E:20:9C:A5:FA:3D:B1:65:C7
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:93:32:cf:d6:ee:e5:d4:11:df:2b:df:47:fc:e9:61:ad:10:
da:8c:5a:bf:47:cb:4d:1e:7a:9d:d9:86:7f:91:b4:f5:b3:07:
a9:9a:72:a5:43:56:0a:18:55:89:0d:1f:b6:e0:0b:52:99:8a:
22:8a:09:96:ad:b4:e1:6f:86:80:b1:41:9a:a3:cc:b6:03:86:
e1:50:fa:25:ba:cd:fc:38:b9:f3:bb:12:76:5e:14:4a:3d:8c:
9e:eb:d9:34:41:07:72:3f:4c:4a:88:9a:fe:29:1c:8b:6a:1e:
b6:f0:35:8f:be:ce:30:90:73:49:26:4e:d2:9a:c2:84:db:41:
4a:1d:25:8f:c9:93:72:15:d3:de:6c:de:e6:7d:11:34:7a:3b:
f3:47:79:5b:c1:07:6b:57:4a:41:07:42:c1:51:c6:15:2b:fb:
bc:32:43:79:7b:22:50:f5:d5:8c:c7:f4:7e:ae:6f:c9:08:55:
9f:64:3e:88:98:cb:a2:2a:8f:18:1f:6b:da:fd:7c:e4:4e:bd:
92:bf:00:f3:e5:23:8c:c3:b3:f4:60:d0:12:05:c8:83:f1:83:
ea:3a:45:e0:6c:80:f5:1b:dc:84:69:d9:22:98:2f:b3:df:c2:
28:7f:de:a2:3e:95:10:d7:51:f8:ba:56:3a:5a:78:21:26:d9:
f4:47:fb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:43 2026 by rpki-client