Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: 8fFC4+Mf5Bb801xQ81WIVjeSOFJzuTsjNaQzDMTjH3I=
Subject key identifier: DE:C0:D2:8E:FE:02:E4:67:46:28:26:A8:E4:A5:4F:7B:2B:60:B6:AC
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 019E3F0A5E20228D2E02167430FE9005F50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 1919
Signing time: Tue 19 May 2026 07:01:44 +0000
Manifest this update: Tue 19 May 2026 07:01:44 +0000
Manifest next update: Wed 20 May 2026 07:01:44 +0000
Files and hashes: 1: duVPwRuDqX3QDkaKIyT4P6ztbz4.roa (hash: kMA3LqVtrh17srYO2maurS2CA2PcrI4sa4rbcd9ehyQ=)
2: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: f7L6a/ornF9LQzxnCuFkJthYk9lZpQICiL2m1d4T08U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:0a:5e:20:22:8d:2e:02:16:74:30:fe:90:05:f5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: May 19 07:01:44 2026 GMT
Not After : May 20 07:01:44 2026 GMT
Subject: CN=dec0d28efe02e467462826a8e4a54f7b2b60b6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:b3:e8:f1:cf:69:2e:fd:ed:8f:2e:69:66:
bc:8d:0f:53:95:3d:8b:7d:04:61:85:59:07:b2:e6:
46:c4:09:24:82:c9:c1:24:cd:6f:84:a1:1a:ca:0f:
61:e3:f1:67:28:8e:b1:86:6b:e2:a7:9d:57:e0:6b:
91:50:09:ea:b1:31:fe:7f:59:38:ff:d5:87:ed:ea:
10:ab:16:3e:e0:5d:c5:53:69:5c:6e:7d:9c:59:0e:
e5:c9:9e:65:af:70:bb:3f:ef:37:bb:6d:fe:ea:43:
a0:fd:74:78:1e:32:fb:1e:4e:62:31:6c:55:31:02:
c1:02:de:e7:ed:18:bb:f9:64:81:46:85:5e:93:9c:
02:06:48:94:cb:94:a1:e7:dd:88:67:dc:8d:c1:98:
4d:b6:72:cf:34:b6:b0:d1:6b:63:19:73:6c:ec:57:
e4:56:c7:3e:61:ba:d6:71:63:0a:d5:3c:87:f6:29:
8d:a6:73:1c:c5:19:69:fa:21:cf:f8:f9:cf:0f:8f:
28:d7:e0:3e:b4:a1:f0:c5:6d:eb:02:dc:e4:af:51:
44:fa:eb:18:03:fb:ba:4a:a9:38:7e:d3:db:5b:e1:
92:13:d8:e1:98:50:76:59:b6:8f:11:c9:3f:b2:42:
c6:4f:34:6e:3f:00:d0:0f:d6:58:e5:4e:b9:73:a3:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C0:D2:8E:FE:02:E4:67:46:28:26:A8:E4:A5:4F:7B:2B:60:B6:AC
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:6c:26:6c:ef:52:74:43:a5:bb:e5:c1:96:59:8b:6e:0e:a3:
b8:cb:22:bd:ca:24:f6:71:d9:79:3a:fb:10:f3:c3:27:78:1c:
42:b1:8c:66:ad:87:98:cb:85:62:95:6b:da:58:28:6c:e3:45:
d6:da:72:b5:13:dd:1f:9b:4a:bb:f4:9e:ad:55:3f:68:48:1f:
4c:d8:7f:7d:1d:9d:e2:58:8b:6b:38:64:a3:6d:eb:13:45:bb:
49:3d:bc:f1:04:9e:f3:01:6d:a4:e6:34:7c:15:99:51:b9:a7:
6f:4c:2e:0d:0a:f8:9a:75:f2:a0:bb:94:6a:24:4f:0c:5f:22:
8a:1b:3d:d0:fb:ba:87:4e:95:6d:7b:82:7e:f5:f8:7b:7b:d3:
83:66:76:85:35:77:5f:30:55:bf:1f:b1:83:12:86:18:b7:69:
cc:21:99:3a:b9:17:e1:e0:ca:1f:98:d0:fa:38:95:15:2c:2d:
03:11:77:09:f9:e4:21:6c:20:da:0b:2d:6e:fa:bf:a9:89:0d:
c0:98:57:35:8b:41:df:b6:8e:71:69:f5:43:30:49:64:a6:29:
ac:0c:78:41:03:be:84:40:ec:ce:e0:c5:2e:d9:b8:d6:b3:c2:
75:eb:38:a7:9c:e8:eb:93:9f:dc:d2:9b:96:88:85:20:6b:a1:
a4:d2:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 17:13:15 2026 by rpki-client