Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
File: ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json)
Hash identifier: HKrEjYHuseHcJe/KGN6rQzxgl2z2nSvCK4o9UY0FeVA=
Subject key identifier: 4E:5F:A9:91:54:CF:CA:C7:20:FA:99:6E:2D:8C:5F:75:FF:5F:2D:04
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial: 019DEA486FB3DD8737FD7CE1D12ADBFAAB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
Manifest number: 18EC
Signing time: Sat 02 May 2026 20:01:48 +0000
Manifest this update: Sat 02 May 2026 20:01:48 +0000
Manifest next update: Sun 03 May 2026 20:01:48 +0000
Files and hashes: 1: K2muBRhSzEeWwEOKyiaVJYw5K3c.roa (hash: 9FMIKD8yGkaykJTy68XJ8mxhdE87R0V7qtYcMc3oayY=)
2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: sZhotcGWQSLLteRQ8GIU44shZfhZvVNpC6YvrfEJymw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ea:48:6f:b3:dd:87:37:fd:7c:e1:d1:2a:db:fa:ab:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Validity
Not Before: May 2 20:01:48 2026 GMT
Not After : May 3 20:01:48 2026 GMT
Subject: CN=4e5fa99154cfcac720fa996e2d8c5f75ff5f2d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:81:40:7e:41:02:fb:63:b5:8e:53:68:4e:
10:77:39:0f:72:23:91:5c:1c:81:c0:15:48:e2:00:
db:64:10:31:65:33:bf:2c:6a:87:fe:94:cf:0a:92:
df:cb:01:3f:6b:75:44:f6:46:68:56:40:a6:6f:ec:
84:78:8e:9a:1e:f7:e8:8e:7d:a9:1e:98:28:2a:c4:
6c:d5:10:a9:d5:7b:23:aa:3a:0d:52:a7:f2:1f:cc:
32:18:03:fb:d4:ff:d8:25:d3:17:cd:38:e8:5f:1c:
32:cd:0a:4c:2a:98:6d:7f:f2:3a:22:7c:8e:16:ea:
77:50:cf:f6:33:9a:ca:f9:8b:f6:7b:40:93:7a:0a:
43:52:24:0f:15:b2:d7:bb:c7:35:24:a0:9b:ec:60:
bb:a3:75:9a:d0:01:55:46:45:93:4f:7f:dc:5f:f4:
9c:35:93:40:d6:f9:91:38:78:b3:02:5c:26:ea:9d:
b6:c3:19:68:96:5a:1a:c0:31:7a:e2:4e:cf:36:2c:
7c:a0:5d:78:ce:f7:00:05:92:30:94:5f:96:b7:1f:
6d:c1:b4:bb:78:f3:74:58:8f:95:ca:73:a4:8b:09:
ff:e8:ae:7a:52:6f:d4:d6:f5:dd:41:b0:a4:3e:07:
96:7f:00:54:dc:77:96:71:87:ea:96:da:99:54:89:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5F:A9:91:54:CF:CA:C7:20:FA:99:6E:2D:8C:5F:75:FF:5F:2D:04
X509v3 Authority Key Identifier:
keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c4:88:40:cf:43:c5:8d:a6:6b:b2:b9:19:9f:c5:d0:53:77:
ab:45:d1:49:e3:ee:07:36:64:ac:21:44:f2:d7:41:fe:12:97:
cc:b7:e3:e4:df:ef:cd:a1:53:89:3d:fc:cb:06:58:35:4a:52:
e3:91:6c:1e:90:70:fe:76:48:94:b0:33:01:86:81:96:09:f7:
f8:27:e9:cd:1f:72:6a:34:3b:5d:ef:9a:e5:98:21:e8:e8:da:
86:c5:6b:aa:f2:50:78:f0:40:09:0b:ec:9a:db:dc:9b:f6:78:
fe:b6:ac:bf:b8:bc:06:10:4e:ac:7e:79:4d:e8:2e:f5:c4:32:
99:23:b7:ca:1f:3f:98:12:c1:40:c4:93:be:3d:fd:04:8f:17:
4a:79:bf:82:2b:d1:2e:02:46:0b:d0:2d:f8:eb:1b:ab:14:8e:
ab:42:c6:38:8a:ab:b6:74:7d:b2:62:d9:aa:84:e9:4f:a1:81:
4d:f8:ec:1e:63:ef:d3:47:50:3f:31:19:67:f5:09:c5:a7:bc:
ac:e9:b3:5d:b5:03:96:2f:4d:86:17:8d:83:e9:5a:99:61:90:
79:8d:05:3a:4a:c9:73:52:c2:5d:f6:c5:6d:58:08:3a:14:25:
cb:9f:cb:fc:4d:05:ad:1d:e5:cf:71:26:dd:5b:43:a4:1c:7a:
d0:65:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 05:14:02 2026 by rpki-client