Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: 2AFrJ/WeeETQ2KH8jWY6r20G8CAAiRzMTgKbfm6+8iw=
Subject key identifier: 57:D9:15:99:44:C0:60:0D:3A:03:5C:8C:12:FD:10:90:6A:EF:72:5F
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019E2C95B94F2664F9601AFF440BCC21716B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1910
Signing time: Fri 15 May 2026 17:01:10 +0000
Manifest this update: Fri 15 May 2026 17:01:10 +0000
Manifest next update: Sat 16 May 2026 17:01:10 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: wYp/rkDepM7yuEZyFMf5nGVEQzj3JaGiBxcOBVKDaCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:95:b9:4f:26:64:f9:60:1a:ff:44:0b:cc:21:71:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: May 15 17:01:10 2026 GMT
Not After : May 16 17:01:10 2026 GMT
Subject: CN=57d9159944c0600d3a035c8c12fd10906aef725f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:2b:77:79:70:c3:0b:4a:0a:f4:0f:e7:c7:
4b:be:d8:b1:96:4d:90:1c:37:49:10:d1:75:45:dd:
16:0f:8e:56:1b:6c:db:35:ad:c2:55:fc:a1:a1:49:
c9:ac:e0:cd:85:70:45:ed:07:f4:7d:1c:0a:22:ba:
aa:1f:61:6c:c8:8d:4e:79:c5:71:4c:88:ab:d0:c0:
c6:e5:f8:e3:38:8e:32:e0:ed:5d:c9:39:a6:a1:60:
dc:a7:8e:78:46:e2:03:c6:da:be:d5:fa:3e:68:ed:
bf:32:72:8d:c2:e6:f5:1b:87:56:60:21:00:71:f0:
d6:dc:91:a1:5b:8d:ae:0c:e0:d2:3d:ed:bf:fd:35:
5a:38:b6:ea:7e:0a:50:a6:62:57:08:b0:a9:26:98:
f0:a9:94:45:9d:2b:35:eb:fc:01:32:7f:02:97:5e:
36:f3:62:59:24:27:f9:b9:45:17:a4:95:b7:ef:2a:
b5:40:8e:8b:01:99:c3:ab:cf:24:12:f0:61:ec:39:
10:65:d3:a3:80:7f:66:b9:d1:87:07:b1:73:a5:cd:
d4:b1:24:09:ac:43:8a:95:bb:94:c9:ff:31:19:61:
19:21:cc:41:63:49:5f:29:4c:a7:22:e5:59:e2:0a:
42:d7:2e:a0:49:2a:51:d8:5f:d2:8e:13:b4:d7:39:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D9:15:99:44:C0:60:0D:3A:03:5C:8C:12:FD:10:90:6A:EF:72:5F
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:11:cf:51:62:88:e3:c4:e6:2c:4c:8b:d6:20:44:61:c4:e2:
14:0f:7a:5a:61:8e:f6:37:11:d7:46:de:8e:36:12:73:36:41:
29:ee:cc:97:c5:b6:70:0a:49:d9:1f:58:a4:85:85:d2:68:a8:
85:8c:fb:20:81:44:85:b9:76:7c:22:4c:8c:db:d2:fc:4b:07:
96:09:fc:ca:45:74:cb:15:6e:29:59:93:c3:29:ea:58:2e:49:
c6:2e:80:cd:24:74:30:08:a1:0e:50:43:14:14:77:81:f2:3d:
e5:99:89:eb:7a:1b:fa:11:81:ee:bc:e7:c9:f5:13:27:a7:dd:
48:f6:cc:57:94:44:94:be:44:d1:e3:0d:d1:ea:ca:c3:c0:db:
7d:52:48:f9:19:9b:c5:1e:b0:b8:a5:c4:08:41:4e:b0:a6:f8:
48:be:30:07:47:a9:d9:16:0b:5e:53:a1:73:fa:9d:26:18:18:
97:0f:be:c4:5b:0a:72:87:d1:3e:8c:e5:eb:3a:0a:95:d6:46:
6d:a9:f1:12:09:a3:3c:22:5d:a0:23:72:2f:c8:3e:3b:55:32:
f7:97:23:df:55:83:8e:86:8b:f7:1f:37:98:d7:b7:5c:32:b6:
2a:a9:25:cd:79:39:f3:d2:72:59:e7:a0:6e:7c:19:d7:c8:c3:
05:27:a8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:07:13 2026 by rpki-client