Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: z60x0ynn+SzppwLhq1ePeNALnoJQBgZAXoRGBZDPMB4=
Subject key identifier: 44:B2:23:90:6B:CA:08:68:0B:72:FA:91:4B:5C:2F:93:3E:95:3B:95
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 019F12658DC6A1F920EAD3BF5F240AFF082E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 1983
Signing time: Mon 29 Jun 2026 08:01:13 +0000
Manifest this update: Mon 29 Jun 2026 08:01:13 +0000
Manifest next update: Tue 30 Jun 2026 08:01:13 +0000
Files and hashes: 1: Yo0ULWlGFniFl0kRIQzZJN8mg9o.roa (hash: j8hGB111jdt0RcgrUrjkuMAFRhv/pdlUdsj0AvFMkmM=)
2: jioszf8WkcygR-sUCmeQ22hRJBQ.roa (hash: GlPRmHwlYfAxgr1RqMrlQqRp2B9t9+qwJKez8uOIIxI=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: Xy7UUFkGpqcCM4zBQKP1O9sfLxlVsp5BW1Ez7eEvCl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:8d:c6:a1:f9:20:ea:d3:bf:5f:24:0a:ff:08:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Jun 29 08:01:13 2026 GMT
Not After : Jun 30 08:01:13 2026 GMT
Subject: CN=44b223906bca08680b72fa914b5c2f933e953b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:c6:30:99:3f:3d:a3:e3:44:54:9a:8a:83:
83:a3:16:54:da:18:a7:4d:51:8e:fe:20:9a:09:23:
5a:dc:25:f2:b1:ae:05:3a:58:95:13:ad:54:56:fe:
0a:bc:8f:48:d3:dc:52:69:0f:d1:fe:a8:7f:9e:1e:
c9:74:84:62:8a:bd:5a:63:68:93:8b:4f:b1:ad:bd:
5a:ed:99:82:f1:32:ae:c1:a6:71:57:e3:80:77:aa:
87:fd:11:76:d2:84:1d:7c:ea:d9:7d:15:e7:f3:ef:
95:66:5a:22:ba:83:55:84:cf:8b:dd:e5:d5:f0:92:
91:33:04:b2:7b:15:12:cf:d1:0b:b3:d5:71:0c:4a:
aa:be:96:be:dc:48:96:b1:04:8e:12:99:39:a1:0b:
34:d2:cc:43:4f:d3:8c:4a:fe:37:1c:82:0c:c7:ae:
55:17:47:d4:d3:e1:6a:b4:92:10:e6:17:be:df:b5:
58:c8:c1:ff:23:ed:2c:aa:68:f8:f0:ec:b2:92:fa:
17:03:6c:be:d0:22:47:32:12:28:a7:97:f4:25:d7:
15:ef:e0:af:d8:94:da:68:58:7b:86:9f:d0:42:71:
72:2e:af:89:e3:04:1d:dc:d2:d7:9f:6b:d3:65:b4:
51:5d:0c:6c:93:c5:ca:78:00:cd:7c:cd:d6:08:09:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B2:23:90:6B:CA:08:68:0B:72:FA:91:4B:5C:2F:93:3E:95:3B:95
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3c:a0:5c:dc:0a:f5:fc:be:61:f9:ad:7a:6e:1f:a0:23:5d:
7e:f0:64:f6:11:21:04:2c:2f:68:63:3f:60:df:8b:06:c6:38:
22:32:98:bd:4e:9a:7e:0d:5d:9b:04:92:38:2d:82:dd:31:13:
a9:d7:1e:03:2d:5c:99:47:e4:dd:c8:f5:6c:11:40:5e:03:35:
f5:cd:29:f7:3a:ed:98:85:28:02:6c:b8:dc:32:30:f3:dc:09:
34:71:db:64:f2:1f:d7:e2:51:7f:50:c0:3e:ee:11:3e:ef:cf:
45:4c:48:9f:8f:42:d1:55:42:a4:1a:96:49:c3:d4:6d:b5:fa:
0c:b8:7a:6e:70:df:84:4a:5f:64:82:8f:5a:5f:23:3c:da:8c:
19:3c:ba:5e:b4:2b:4e:09:aa:67:1a:64:08:bc:ec:92:87:be:
96:c9:bc:15:f2:66:be:0a:52:33:9d:31:c2:68:fb:ec:8b:be:
d6:4c:45:cd:a7:dd:ee:f2:ef:a8:8c:3c:1b:c7:7c:a3:87:34:
ec:c5:b7:57:ce:48:0b:62:3e:53:ba:f9:0f:27:27:35:f5:0d:
3d:07:09:45:ae:41:85:b0:42:7b:22:87:41:d1:ad:ef:66:5a:
42:78:57:08:02:b6:dd:02:d6:62:96:73:e2:4b:9b:55:c3:0e:
62:2f:8c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:45:14 2026 by rpki-client