Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: bkD3ZZaekZVmpayLKDkA4TtutOMO1sVrRTxSsoX5Bes=
Subject key identifier: E0:B4:73:30:1E:22:B3:9F:47:A5:40:24:3D:86:68:D6:2F:91:83:03
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 019EC148D6AD5212A23BBBFD845975BD8313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 14:00:36 +0000
Manifest this update: Sat 13 Jun 2026 14:00:36 +0000
Manifest next update: Sun 14 Jun 2026 14:00:36 +0000
Files and hashes: 1: Yo0ULWlGFniFl0kRIQzZJN8mg9o.roa (hash: j8hGB111jdt0RcgrUrjkuMAFRhv/pdlUdsj0AvFMkmM=)
2: jioszf8WkcygR-sUCmeQ22hRJBQ.roa (hash: GlPRmHwlYfAxgr1RqMrlQqRp2B9t9+qwJKez8uOIIxI=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: ccdCfIQOCZvegIWUEZiO7VVYsVVcxVkk7AEAHj4SseQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:d6:ad:52:12:a2:3b:bb:fd:84:59:75:bd:83:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Jun 13 14:00:36 2026 GMT
Not After : Jun 14 14:00:36 2026 GMT
Subject: CN=e0b473301e22b39f47a540243d8668d62f918303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f4:e2:ca:82:73:f7:bc:2b:b6:33:60:fd:da:
85:57:38:05:50:e4:9f:88:4d:0a:1c:a2:9f:f3:7f:
59:f0:3f:e4:ba:93:f2:a1:85:10:93:f7:1b:0c:ea:
50:e8:c4:92:aa:fd:19:c5:9b:cb:09:05:1b:68:f1:
55:44:2b:43:2b:53:4c:5f:eb:38:32:11:4c:e2:df:
ef:2f:7d:82:9e:4d:dd:9e:00:1d:4a:f9:63:39:56:
e4:28:23:75:db:2b:0d:6d:b8:26:de:26:94:9e:7d:
72:ea:be:50:1b:68:2f:4e:32:8f:88:b1:c1:05:90:
e3:17:d9:e6:70:7d:8a:7a:54:dc:2d:e6:f6:c7:6c:
e2:f3:00:e0:5c:d3:7c:1c:21:c3:28:e9:b9:db:9b:
a4:53:28:76:7d:a4:ee:6c:8e:8f:0b:d3:6f:48:6f:
9c:b5:4d:f1:d0:88:43:20:38:8e:af:c0:37:d0:31:
92:80:46:22:d4:a2:12:7f:ac:08:e0:74:24:d4:91:
8c:90:25:8c:c9:79:17:e1:9c:ce:b6:6b:98:91:6a:
4c:25:e2:67:66:b9:8f:2c:90:63:e1:07:8b:43:e0:
73:e8:a2:6c:09:b7:13:20:25:a9:4a:ea:3a:42:43:
a0:e7:12:2c:50:02:52:e3:bb:c9:2f:02:6d:f9:2f:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B4:73:30:1E:22:B3:9F:47:A5:40:24:3D:86:68:D6:2F:91:83:03
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:76:16:9f:46:98:b8:b3:99:99:85:8f:ab:d2:3b:af:c1:84:
bf:de:26:4a:b4:3e:c4:cc:b5:86:b7:dc:57:c4:11:fd:d8:f0:
6f:2e:50:be:44:29:76:ff:ce:66:ad:36:c9:66:04:21:9c:d7:
fc:78:40:ca:02:8f:61:76:57:7f:b9:c6:47:c7:f3:b2:b1:ca:
c0:88:21:9b:0c:07:84:98:5e:9e:3e:00:44:aa:2a:a4:0b:b2:
9a:35:f9:db:ea:fa:8d:81:ec:ce:8c:ee:6c:a1:b3:94:4a:84:
59:50:ff:f3:08:c8:c1:7c:50:11:e8:a2:ad:37:c6:c9:95:b4:
ee:60:f2:c4:23:83:eb:fe:4e:42:09:8c:62:d1:9c:6d:38:71:
09:54:5f:f6:9b:8d:e9:94:84:f0:7b:e1:61:b8:44:19:a7:35:
85:8e:d4:aa:9d:a7:2b:6b:53:49:75:89:47:04:52:9c:37:97:
30:16:5d:5b:4b:d5:c7:e6:7d:0f:51:ee:f7:3d:e6:0c:d5:46:
3b:57:a2:33:e3:89:8c:07:e3:12:42:ec:ac:af:f4:3c:57:bf:
15:86:d0:b0:85:7b:3a:1b:cf:04:92:f4:fd:41:1e:30:e9:d3:
90:61:14:c2:f2:a9:0c:bc:0a:de:a9:13:80:2d:f3:3a:33:df:
40:15:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:19:33 2026 by rpki-client