Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: rwDUsdI6uY/DMTZ+o/2TxBWsmCIvo31oWnbJZHGw4N0=
Subject key identifier: CA:31:03:56:00:40:07:DF:A2:78:06:E2:21:38:2C:0E:0B:A8:2B:74
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 01A003CC01135EED5A90D611C05511D14168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 1A00
Signing time: Sat 15 Aug 2026 05:01:36 +0000
Manifest this update: Sat 15 Aug 2026 05:01:36 +0000
Manifest next update: Sun 16 Aug 2026 05:01:36 +0000
Files and hashes: 1: Yo0ULWlGFniFl0kRIQzZJN8mg9o.roa (hash: j8hGB111jdt0RcgrUrjkuMAFRhv/pdlUdsj0AvFMkmM=)
2: jioszf8WkcygR-sUCmeQ22hRJBQ.roa (hash: GlPRmHwlYfAxgr1RqMrlQqRp2B9t9+qwJKez8uOIIxI=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: k3IVdkytryLWzNZo1hJCX4ehorTtRNekdosFluaWV3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cc:01:13:5e:ed:5a:90:d6:11:c0:55:11:d1:41:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Aug 15 05:01:36 2026 GMT
Not After : Aug 16 05:01:36 2026 GMT
Subject: CN=ca310356004007dfa27806e221382c0e0ba82b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:e7:93:88:11:09:32:06:77:4a:9c:6f:11:
c4:82:32:88:bc:e6:17:65:e0:c7:5e:d9:ea:da:90:
c8:89:38:39:3b:59:fb:da:0b:ac:94:86:52:fe:25:
77:df:a7:34:1b:9a:3b:17:c6:5b:ef:b0:6f:49:da:
5b:7e:0d:8c:7d:19:ce:d4:b2:29:31:c7:bd:fe:89:
84:52:e8:72:1f:47:34:49:89:5e:3c:c8:72:2b:a3:
ec:ff:36:c0:ea:49:75:e0:47:b9:32:d5:64:7c:dd:
c0:88:16:bc:2e:9f:fa:cc:f1:0a:ce:62:dc:ba:6c:
81:57:cf:46:f9:85:53:a0:7b:d3:b8:7e:94:99:05:
66:1d:cc:61:26:64:58:90:6e:cb:90:e2:0a:35:8d:
e1:e1:d5:7c:f8:dc:03:e2:f2:48:0c:70:82:d8:99:
42:84:65:10:c1:8d:96:21:3c:45:43:38:86:77:ab:
54:56:2c:71:4b:b2:a0:0d:09:2d:70:27:23:7a:6b:
2c:bc:1a:ff:53:07:53:bd:3c:e7:41:54:ff:5a:c6:
76:26:02:a0:54:64:7a:07:ec:6a:35:96:4e:54:b7:
2f:9c:a2:c2:24:f6:a1:15:84:66:01:46:bb:1e:0f:
e9:a7:ed:b7:f7:d6:f0:70:fe:c4:b8:53:3d:99:fe:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:31:03:56:00:40:07:DF:A2:78:06:E2:21:38:2C:0E:0B:A8:2B:74
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:74:cf:a5:08:7f:d3:4a:3c:b1:6e:8c:19:cb:8e:cc:c1:10:
64:20:a2:e4:f8:40:2a:0e:12:6c:e9:8d:c4:47:88:75:19:9c:
49:fe:4b:e2:90:a5:81:e1:74:38:78:4c:93:cc:53:23:90:77:
18:b8:02:5e:be:d1:25:ad:0e:ef:86:ca:6e:f4:91:21:af:3d:
57:5b:81:fe:b1:01:f9:26:f2:28:ba:b4:1e:5b:91:9d:59:3e:
1f:91:80:d5:48:69:72:10:dd:03:04:05:c9:14:2b:f9:08:22:
f7:52:4b:38:81:bc:34:7f:f7:b7:56:48:5a:6a:c6:ad:8a:2d:
d7:f4:a8:86:2e:cd:a4:10:10:a3:76:9a:08:0f:69:a8:1f:08:
70:2a:29:84:51:34:f8:16:df:b8:9a:c2:de:86:eb:4c:44:7f:
5f:2b:21:a3:64:da:a8:4c:ff:cc:43:c1:cb:ea:98:ea:6a:47:
06:b1:ef:b5:e4:f5:da:45:87:ec:77:27:e9:b4:ff:99:29:aa:
68:f9:f4:b5:cc:13:19:3a:19:fd:63:a8:e4:3b:53:82:51:d6:
1c:c6:2e:c8:2b:64:db:c3:f7:f2:fc:19:4e:9b:93:ce:bf:81:
51:52:ec:59:ea:a5:3c:1f:a1:eb:e5:cc:95:9d:ba:ac:9d:5b:
a4:4c:ad:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:28 2026 by rpki-client