Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File: ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier: jqMiK/Dpw0BomxvA99W+0GZnxczuucVLo/OaY5RnWdk=
Subject key identifier: 2E:29:6C:D8:A8:82:FC:90:C8:A9:E8:4C:50:BE:42:19:B4:05:7A:85
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial: 019E314DC38998EDE9E1A2DD8D05F63D7DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number: 18A3
Signing time: Sat 16 May 2026 15:00:40 +0000
Manifest this update: Sat 16 May 2026 15:00:40 +0000
Manifest next update: Sun 17 May 2026 15:00:40 +0000
Files and hashes: 1: 39TW_rteZEmG2yqgCNBCF7PjZJA.roa (hash: QiC1evAcCRcezlzRHbRvqDU6mKjNFQuGOEOLFGB1NnM=)
2: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: zEFCAVkXw4hGqXelY9wQ4HzyGtTRX/PG/KgWNx9BtbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:c3:89:98:ed:e9:e1:a2:dd:8d:05:f6:3d:7d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Validity
Not Before: May 16 15:00:40 2026 GMT
Not After : May 17 15:00:40 2026 GMT
Subject: CN=2e296cd8a882fc90c8a9e84c50be4219b4057a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a2:62:5e:8e:18:c9:b6:2e:06:86:0b:b6:3c:
1b:fd:23:b1:ad:d8:bd:72:de:fa:f1:b1:47:3d:93:
36:f1:7f:0b:64:5f:ed:8a:4d:1d:5d:ec:6f:41:65:
fe:86:40:23:af:0c:3d:c6:52:72:e1:94:49:43:bc:
50:c5:25:9e:19:1d:eb:c6:f6:87:27:07:7c:55:2b:
ad:e5:70:f6:7a:bc:d4:6d:19:ff:27:42:de:74:b9:
c2:2c:b6:6d:c6:93:f1:8b:9a:ca:54:5c:bd:f9:a9:
65:e0:20:5c:96:ae:fa:8d:e6:ec:2d:6c:be:b1:99:
d5:71:82:0a:6e:c1:bd:81:57:04:3f:c7:91:81:b0:
e6:e3:4c:c3:b7:53:0c:6a:74:88:12:59:ea:67:7c:
39:f0:49:e4:af:a3:90:6c:7a:1f:da:97:ad:92:26:
4b:6c:c5:cb:0c:0c:90:6d:ab:da:49:65:43:76:1f:
b2:67:bd:0b:a4:75:c1:9c:06:83:ba:4c:04:74:ff:
d3:53:18:74:41:80:bb:26:1d:a1:1d:d8:6f:f4:50:
9b:79:8c:68:6c:70:9e:dd:d2:10:32:64:5b:60:62:
71:6b:ac:19:d5:67:f9:6e:5f:47:83:9c:c3:c7:29:
58:b6:0f:dd:ae:b7:5a:b3:2e:85:ff:81:3d:3c:92:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:29:6C:D8:A8:82:FC:90:C8:A9:E8:4C:50:BE:42:19:B4:05:7A:85
X509v3 Authority Key Identifier:
keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:76:c0:55:df:c5:88:8b:b4:70:91:64:d0:47:6c:07:32:df:
04:df:d7:26:7c:b6:30:15:81:4b:4f:99:c4:60:38:f9:95:d3:
ae:e2:39:84:5a:2f:79:9b:97:32:1a:1a:2b:84:e0:8a:53:28:
cb:e7:ca:d7:c6:50:c9:19:e1:9e:45:c3:b1:eb:19:5c:e7:24:
37:d4:55:1a:d7:8d:49:57:e2:2e:23:44:82:b1:73:02:23:8a:
4b:cd:2c:b6:b7:79:94:2f:9a:de:2e:ee:57:7c:c4:b3:1a:0d:
6e:97:b3:46:33:d0:ae:0f:ac:5d:73:c9:14:7c:6f:b8:17:3c:
32:e3:00:6e:6c:0e:35:cb:5a:e3:00:95:55:35:74:5a:41:fe:
88:bf:63:5e:6a:84:c5:d0:6e:f7:41:88:c2:44:41:96:51:59:
24:ec:2a:c9:79:e6:52:8a:25:5f:58:50:64:5c:5c:b4:3e:51:
b5:6d:c9:70:2b:bb:35:df:f4:1c:52:1c:3a:69:91:af:58:5a:
48:2a:f5:26:84:3e:1b:00:a7:b8:89:a5:33:52:2a:18:1c:1b:
40:f0:c9:e9:22:dd:95:a8:62:88:66:bb:da:f6:a3:b8:37:13:
f2:1a:13:4f:b1:94:dd:52:7b:ae:bb:dd:9e:7d:73:28:ed:94:
14:09:dc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:18 2026 by rpki-client