Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: BjR+K7UHxYTgCTubqClPxU2/u92l3RkrewBtf2aYF2E=
Subject key identifier: 3C:0B:3D:A2:2C:BC:37:73:E1:4C:28:E4:80:FB:1F:D2:05:E1:40:A8
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 01A13B24BCAD4F142A1EFF9D5FFD61076172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 1189
Signing time: Wed 14 Oct 2026 16:00:25 +0000
Manifest this update: Wed 14 Oct 2026 16:00:25 +0000
Manifest next update: Thu 15 Oct 2026 16:00:25 +0000
Files and hashes: 1: HXXJ5U9DGvbbZuWvDguPFDAOEkc.roa (hash: mEsE8YsZsxlgLGJIZIrrf3uSCgdInsp4ueGy7PdnCmU=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: XAznrYUr2lQ1KKbmusaEtrjK6BHh9bRdjlEr+uTbq0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:24:bc:ad:4f:14:2a:1e:ff:9d:5f:fd:61:07:61:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Oct 14 16:00:25 2026 GMT
Not After : Oct 15 16:00:25 2026 GMT
Subject: CN=3c0b3da22cbc3773e14c28e480fb1fd205e140a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:a8:34:6a:a2:58:11:05:3d:4a:ad:f3:d6:
03:bf:49:97:32:08:68:52:3f:e1:35:54:82:9c:7f:
5b:30:13:14:ef:a5:c7:4e:40:e9:7c:80:40:11:6f:
9e:3e:c4:7d:51:2b:ce:52:ef:3e:d6:d4:78:06:34:
b0:b4:68:81:8b:c8:60:01:62:fa:28:c8:85:5a:38:
f6:ce:0f:7d:47:6e:6b:38:13:fd:ac:58:1b:12:03:
b3:6c:5e:77:7e:0e:66:bf:b9:0e:9b:92:a8:cc:9c:
9e:06:d0:a3:3c:ba:bc:6a:e5:a8:76:97:ca:68:8c:
fb:c2:ec:d7:ba:90:ec:8f:36:77:61:cd:84:0d:e9:
69:df:be:72:d4:c8:c3:62:52:f8:cc:eb:a3:19:35:
cc:47:d0:e4:08:65:f0:4e:6d:a3:71:60:a9:20:0b:
bb:22:5d:9a:f2:e4:f9:9d:b5:41:bd:37:c8:3c:15:
cf:ea:8f:d2:a9:19:0d:21:5c:f5:82:a6:75:94:51:
50:b9:75:31:fa:1d:b5:a4:80:fc:1b:47:b0:1e:df:
13:cb:a4:de:4a:d0:f1:62:b9:fb:e5:27:5f:77:02:
e1:90:90:3f:52:d8:64:d9:f3:2d:ca:49:ac:4a:51:
94:1b:78:c1:3a:b2:13:13:50:f4:d6:6d:ad:90:e6:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0B:3D:A2:2C:BC:37:73:E1:4C:28:E4:80:FB:1F:D2:05:E1:40:A8
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ff:f8:a6:fd:f5:c0:7a:4d:fc:4b:21:94:4f:89:75:e0:70:
f9:7e:d3:d0:8e:6c:1b:58:d2:c6:68:a0:9e:fe:a2:be:31:3c:
68:fa:86:30:a2:ed:6f:3e:e0:06:48:5e:5e:fb:57:12:48:ad:
f1:fb:70:6e:85:16:60:3b:71:2a:b3:a8:24:44:ab:3b:b9:1b:
df:29:90:73:28:ab:1d:16:64:d8:81:45:ec:94:6d:af:9b:ff:
60:2c:07:6f:36:44:c5:2a:e4:26:27:b8:d0:25:8b:97:b5:ee:
98:81:f5:1b:f1:98:40:e7:b4:bb:0f:e4:62:95:38:fe:5e:e1:
3d:50:c1:d3:34:ad:33:22:df:f2:4b:3e:20:7b:39:d8:a8:b9:
c7:8a:a9:28:a9:4c:71:71:d2:13:74:72:a8:2f:7f:a1:c4:66:
49:23:2f:a1:c9:6f:71:a1:d0:9d:ec:65:cb:a3:1a:42:4e:36:
0a:03:c1:f1:68:e8:08:2c:e8:0a:13:3e:ae:a6:2e:24:46:ab:
a2:8e:c9:db:a3:f1:eb:26:cc:6b:9f:ac:f8:c0:fa:60:0a:5c:
1b:e9:f8:82:e9:99:90:65:fc:f2:54:4b:42:34:76:5a:b7:ef:
03:de:30:9c:56:2e:06:a7:89:61:cd:c9:bd:1d:9d:9c:d8:2a:
7a:b1:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:35:52 2026 by rpki-client