Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: rKEedA9eAX5cXXdRj/ISPUPwdIH+1j3NmtlKwRuJe0k=
Subject key identifier: 4A:80:05:E1:90:D6:E5:D2:DA:55:B3:EA:28:EE:11:4D:E4:FD:99:78
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 01A0B7D2709DDF73C20511C79212E00AC0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 1145
Signing time: Sat 19 Sep 2026 04:00:16 +0000
Manifest this update: Sat 19 Sep 2026 04:00:16 +0000
Manifest next update: Sun 20 Sep 2026 04:00:16 +0000
Files and hashes: 1: HXXJ5U9DGvbbZuWvDguPFDAOEkc.roa (hash: mEsE8YsZsxlgLGJIZIrrf3uSCgdInsp4ueGy7PdnCmU=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: lS7gbH++8LjMI47fOVsufPFRklK9oSFczCmQU7d1L/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:d2:70:9d:df:73:c2:05:11:c7:92:12:e0:0a:c0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Sep 19 04:00:16 2026 GMT
Not After : Sep 20 04:00:16 2026 GMT
Subject: CN=4a8005e190d6e5d2da55b3ea28ee114de4fd9978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:5d:a3:e1:6f:56:1b:a8:6b:d0:f8:fd:b7:
e4:02:c2:b2:0c:ae:2d:dd:cf:5b:d4:40:c7:b9:26:
5e:91:0b:35:88:8a:86:3f:55:a9:0a:71:58:77:61:
f3:2a:3e:1e:c5:4f:6f:25:39:99:0c:5f:0c:07:b9:
f1:e6:3c:c3:33:69:69:93:26:4a:f2:47:7a:36:9c:
5f:a9:05:ea:b1:de:41:70:2f:b6:b7:19:87:2e:e3:
88:d8:15:f9:3d:f7:0c:f0:e6:da:91:67:02:74:7c:
2f:d5:e0:90:48:96:24:0a:33:83:e2:13:67:8b:ca:
82:c9:38:00:1a:4a:18:1d:49:23:3c:e5:d6:d9:e4:
a0:c5:88:f9:5e:92:e5:95:0e:08:6a:8d:a2:09:6e:
a6:4a:67:57:56:49:47:fe:85:dd:02:9f:20:73:b1:
fc:24:40:36:be:4c:83:5c:62:8b:38:b6:f4:83:0a:
14:9b:dd:d7:65:9d:3a:be:c8:18:07:de:e0:23:cc:
5c:73:e1:c4:9d:a6:19:92:85:5d:5c:89:6a:02:93:
32:29:e2:45:bf:20:cc:e1:1f:81:8d:bb:d9:c8:10:
ce:67:28:e1:e7:67:bc:8e:97:3b:00:15:c6:55:7c:
da:b8:b3:4a:32:6a:94:0a:73:1c:5e:9c:87:45:ea:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:05:E1:90:D6:E5:D2:DA:55:B3:EA:28:EE:11:4D:E4:FD:99:78
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fa:88:d6:19:4e:d1:21:e4:4c:21:9e:b4:c7:09:c6:0a:08:
92:b2:31:83:09:61:c6:83:41:51:f4:17:1d:d6:36:08:63:50:
b1:9d:38:bd:9e:59:c5:ec:f9:ff:a1:a4:c4:10:27:a5:f7:aa:
62:b5:07:f6:82:42:1b:45:30:ac:02:41:25:1b:df:30:ed:cb:
58:6e:b6:9f:a2:c4:dd:b1:a1:e5:5b:b1:08:d3:1d:b0:7e:a7:
fd:65:07:eb:ed:c9:96:9a:4e:a4:aa:0a:0a:a2:43:37:25:1d:
eb:3b:82:81:09:35:c4:e0:98:83:ed:f6:43:f0:d8:77:d5:4a:
95:1f:5f:1f:8b:1a:36:9a:79:d0:8a:81:f0:64:09:7b:c2:c7:
ad:dc:7f:b4:ed:d4:86:3e:6a:59:f0:dc:26:28:0e:ce:ec:6c:
d5:d7:b7:01:86:b7:1b:b8:4a:a4:5e:b5:9a:da:39:47:f3:22:
a9:98:1a:c6:94:ca:2c:4b:97:c1:b5:88:a8:1b:2e:1c:4e:51:
e8:fc:47:ac:b6:7f:ae:b5:90:da:9d:5c:3b:bd:29:7c:ba:32:
84:a9:fc:6c:12:97:66:0f:cd:74:66:a1:ec:71:2f:90:d2:4d:
99:6f:a3:ef:f6:b9:c1:f8:92:e1:ae:7e:21:8c:fc:27:82:b2:
dd:21:ef:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:58:44 2026 by rpki-client