Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: WbXo3GcgNMEHKY7++D49pqewZZ05gJxoKYsPa7IlMU0=
Subject key identifier: 74:C4:FB:97:2A:4C:41:77:3C:E9:03:78:41:ED:B4:8A:B6:5C:41:28
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 019DECDAE8AD2DB765A1A613A9DC2FAF36CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 055A
Signing time: Sun 03 May 2026 08:01:02 +0000
Manifest this update: Sun 03 May 2026 08:01:02 +0000
Manifest next update: Mon 04 May 2026 08:01:02 +0000
Files and hashes: 1: amLES0luVq3iLHPQKyufyNQwgaI.roa (hash: UsdGqDJsnylUEzlDTC7n05/NMnzeFnVJjS3/bK29FXs=)
2: jIwaLjqt-xdZuLLeeQ6b9JM9ktU.roa (hash: NBpvqEDHRttth2lk+QrdtGdQaHXJVWBfDcwb8ITbXwo=)
3: u_iWvzN4ZsIj-85aLk82H6-rRe4.roa (hash: LwmASP5C8j7zpf+fcC+xGqEebuer0tW8AmUmigdVvI8=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: R9ZvANy7dFpRAkzOP75M5zHZ9If2PCRJk0+gL1y4F44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:da:e8:ad:2d:b7:65:a1:a6:13:a9:dc:2f:af:36:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: May 3 08:01:02 2026 GMT
Not After : May 4 08:01:02 2026 GMT
Subject: CN=74c4fb972a4c41773ce9037841edb48ab65c4128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:06:46:df:d4:74:3f:d7:94:40:92:d9:2d:
d5:8f:65:16:58:d6:b4:8d:71:89:21:a0:81:9d:d9:
10:86:dc:ec:ac:69:b6:0f:66:67:c3:0f:34:3f:dd:
1a:db:c4:28:a2:dd:f0:22:8d:88:a8:d7:81:12:ac:
da:68:e5:94:a2:1e:f7:c5:05:d4:68:6b:9f:56:05:
23:02:a9:cf:37:85:43:2c:78:8d:fc:61:7a:81:94:
d7:84:8a:71:7e:e7:b3:a8:13:b4:5c:5a:29:a9:7a:
26:68:53:37:91:b4:db:3b:dc:b3:73:a7:4f:af:d9:
87:75:06:3a:0a:de:b6:8a:fa:b8:58:b7:9a:64:43:
f9:1b:86:02:22:f8:c6:6d:b9:8b:75:ff:db:a8:d6:
c4:52:f6:ba:c6:a9:8f:08:f9:e3:fa:13:29:b1:d1:
05:b6:a1:4d:21:9f:f0:3a:5e:c8:4e:24:af:82:71:
26:90:72:a3:67:2c:cd:69:1f:65:57:a5:58:f5:fa:
55:57:50:bb:a8:ce:b8:68:c3:af:5a:d4:15:a9:58:
ee:58:24:8a:72:bd:82:05:c3:2a:3d:c5:c3:b5:1e:
ca:aa:cb:5d:af:e2:e5:06:2c:49:ee:98:1c:72:c4:
f0:f4:5c:e1:9a:fe:9e:fa:b7:43:54:86:fa:54:a3:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C4:FB:97:2A:4C:41:77:3C:E9:03:78:41:ED:B4:8A:B6:5C:41:28
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0b:26:5e:52:90:16:f3:c1:b9:36:49:48:45:83:c3:d5:31:
6f:cf:4d:16:64:e6:91:32:6a:d2:ab:b4:79:41:45:7e:fc:ad:
0e:f3:a2:3c:df:34:95:68:56:83:4c:02:78:d6:35:aa:1b:7b:
0e:b3:72:aa:80:6d:05:fd:00:2f:18:31:6d:be:0a:47:e2:e4:
e3:51:b1:8e:10:b1:be:df:8e:59:bc:a8:e5:52:18:ef:0a:87:
f2:69:fc:f6:55:20:c6:a0:de:2e:bd:7c:27:46:a9:7d:2b:72:
5b:18:df:b8:e8:f6:63:b4:50:30:09:86:a6:e2:1c:c5:9f:17:
9e:1e:40:2f:62:23:2b:9e:a2:89:09:f4:99:33:86:c5:14:ed:
f6:d7:7f:22:d9:88:db:11:05:4e:6f:74:78:04:81:28:73:d0:
5a:ba:ae:67:33:4b:e3:ff:52:be:58:69:b2:12:d7:f8:f7:99:
e7:be:7b:9a:eb:e0:00:9c:e8:c9:3f:47:fb:51:47:00:fb:0a:
29:ce:07:eb:81:f3:44:05:60:10:53:7a:95:b1:51:06:0e:00:
fd:d0:1a:46:be:a8:b3:34:a6:b7:bb:04:1c:e2:25:b1:e9:e9:
7e:39:25:79:4b:e0:bb:70:da:47:99:d3:b6:6e:da:23:2e:e8:
3f:0b:28:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:11:30 2026 by rpki-client