Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
File: YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft (raw, json)
Hash identifier: BIz1JA0psPZrNN5Li7O8Pst0sjg6PbFQ+rFVODzSUCg=
Subject key identifier: BE:62:01:E5:70:FF:8C:EB:34:0D:73:17:6C:F1:79:5E:F2:2B:DE:92
Authority key identifier: 62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
Certificate issuer: /CN=6290e6b0cdd7f4986be518d890a8493153504eda
Certificate serial: 019E2994B767F4235EDB4286C68D95192D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
Manifest number: 013F
Signing time: Fri 15 May 2026 03:01:12 +0000
Manifest this update: Fri 15 May 2026 03:01:12 +0000
Manifest next update: Sat 16 May 2026 03:01:12 +0000
Files and hashes: 1: Ci_joaoGd-NiKdKN-xSlHZZHjsU.asa (hash: w5DoIaMOdhrQzX31C6GNjSJG7G7L2zsb0JalX8bgFEE=)
2: YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl (hash: /UO6pNlNeGalgzsMJ6WgaPupnYch+Or8+MhhDkhuNtI=)
3: jyKuE2XBeuJrzXa_q0tmSaVEGSw.roa (hash: /T26sfmgIuFdLLHz0t8HyV2eonc//D9WC+03dI2ySjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:b7:67:f4:23:5e:db:42:86:c6:8d:95:19:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6290e6b0cdd7f4986be518d890a8493153504eda
Validity
Not Before: May 15 03:01:12 2026 GMT
Not After : May 16 03:01:12 2026 GMT
Subject: CN=be6201e570ff8ceb340d73176cf1795ef22bde92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:d3:39:b7:97:0d:a9:b0:fb:0f:6f:f5:5e:
10:97:d0:57:1b:27:5a:71:8e:ba:56:5d:b7:ef:3f:
b1:1d:35:b1:e3:ea:cb:f3:08:30:85:ef:7c:25:e4:
20:1a:5e:7a:87:9e:60:2f:8e:48:48:1f:64:58:45:
2f:a9:ba:a1:43:65:21:81:f4:c9:07:43:a0:cf:ad:
ff:79:25:23:e4:0a:73:ad:1c:88:8d:5e:d0:46:0f:
c1:27:05:1e:c4:f3:e8:f8:01:73:b9:fa:8b:c4:76:
50:38:0b:aa:c8:f8:56:95:17:59:61:ef:ef:a6:8c:
da:39:20:b1:e0:3f:72:0d:da:21:e5:61:71:fb:f2:
2f:64:f4:98:93:57:12:f4:44:07:97:b5:4a:03:26:
cf:df:c0:93:91:5e:75:cc:db:44:1a:ab:cc:f6:5f:
b6:f7:99:41:4e:60:0d:58:ad:00:f4:80:32:2e:0f:
19:90:b3:87:1a:a5:69:4f:b0:95:fd:70:80:c6:73:
79:2a:ed:16:5e:80:be:98:0c:54:2a:d4:a6:76:bd:
e1:77:00:31:fa:dd:18:7c:60:19:ab:ab:9b:41:29:
94:a5:6d:2e:5b:6c:7e:5d:f4:1f:cc:c4:b0:4e:3a:
14:57:d4:89:8c:11:e2:78:e5:22:fe:d8:f4:2e:53:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:62:01:E5:70:FF:8C:EB:34:0D:73:17:6C:F1:79:5E:F2:2B:DE:92
X509v3 Authority Key Identifier:
keyid:62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8d:72:4b:ec:68:f5:01:22:2b:13:e0:36:a7:62:f3:f1:b7:
40:19:3b:74:cf:53:fb:a7:bb:47:2e:2f:50:23:5a:a8:3f:e2:
8b:83:eb:b9:0f:dc:55:06:bd:e3:e8:5f:56:7a:b3:fe:14:d4:
fb:69:22:ee:ef:22:ed:60:29:ec:20:5e:4d:d0:69:aa:69:18:
d3:e9:e1:fb:52:7f:db:76:fb:83:11:3a:ca:46:89:55:05:91:
8e:34:fe:ac:21:48:a8:d7:57:3f:c6:ad:6c:1f:01:4e:6b:0e:
cc:ec:83:83:e9:11:c0:c2:2e:0d:07:6d:76:e7:94:03:08:e8:
91:ab:ca:0f:9d:64:08:ab:46:8f:26:20:16:46:4f:bc:2e:bb:
71:ff:f0:5c:f0:fe:05:4d:83:47:23:95:c2:eb:a5:b5:49:61:
0f:12:c7:97:3c:7b:10:d1:e4:90:5a:25:bf:e2:a6:38:07:19:
bd:70:d7:82:ea:80:4e:08:c4:f7:e4:f3:e2:be:7f:a7:c7:f9:
af:85:57:91:fb:36:75:d9:17:85:0b:68:6d:61:9e:b6:8b:3a:
73:fc:64:7b:4c:99:7c:d8:96:a1:5c:4e:f0:fe:41:16:24:29:
89:ed:04:27:04:da:17:90:07:ab:37:43:8d:ec:b3:79:b6:8f:
4f:f9:ed:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:25 2026 by rpki-client