Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
File: ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json)
Hash identifier: HtpEY32M7OVYasar4r3Zh2lOSeD1NExo5KCHN7JyDx8=
Subject key identifier: D4:AF:AB:1E:6F:E5:10:40:F2:C0:FB:C7:2C:AC:6B:36:8F:3B:17:B7
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 019D39AE597F71A88A45DE401071DBE041E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 13:00:20 +0000
Manifest this update: Sun 29 Mar 2026 13:00:20 +0000
Manifest next update: Mon 30 Mar 2026 13:00:20 +0000
Files and hashes: 1: Tm9YQPK-QIZxd2ETnOjMjlrf5iE.roa (hash: whGszraZOmhpbIRFR+/A2z2SahEUdOmazsccBDJL8i4=)
2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: w/P0PKOoiKvMcIqm1BtXHuuiZQgJ7nXFS9CtWNjp0AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:59:7f:71:a8:8a:45:de:40:10:71:db:e0:41:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: Mar 29 13:00:20 2026 GMT
Not After : Mar 30 13:00:20 2026 GMT
Subject: CN=d4afab1e6fe51040f2c0fbc72cac6b368f3b17b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:fa:8c:63:6c:f4:2b:2a:08:1d:14:9c:b0:
b8:5f:76:21:89:d7:e2:64:7a:14:7c:3d:8f:17:61:
ba:64:3c:f3:1b:a9:7c:72:9a:c4:11:0d:26:e3:bb:
cb:48:39:1c:42:ab:6a:9b:47:7a:ab:e4:90:45:c6:
cc:50:21:fe:99:ab:d5:6a:f1:24:40:e0:e7:20:7d:
19:0f:f1:89:d1:39:89:e0:fa:51:33:4c:10:c7:e0:
61:1e:e7:49:44:c7:cb:0f:a6:ec:89:98:86:9f:41:
5b:09:20:99:53:42:c1:40:2a:e6:c1:16:99:63:69:
67:e5:0e:fe:2c:ac:f8:dd:a5:d9:db:6c:f9:f9:17:
4b:df:bf:6f:14:a6:5c:ab:ee:aa:87:4e:7c:92:56:
5d:a2:36:58:23:20:3a:5d:c3:e2:bf:b6:ba:23:82:
14:49:eb:ce:51:54:88:ae:d9:ae:f6:05:c5:6e:95:
5e:f0:1a:2c:3a:cf:6e:8b:df:63:08:81:24:7a:e9:
12:d9:a2:62:72:1b:b2:a7:64:9c:b8:a7:46:fe:ea:
23:cc:49:c4:ef:6d:98:33:e2:11:69:9d:34:fd:6f:
ee:6f:47:c6:b4:37:6a:54:02:3b:f0:4c:7a:ce:a4:
41:6c:84:fb:5b:4b:10:84:78:f7:91:56:48:6d:8a:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AF:AB:1E:6F:E5:10:40:F2:C0:FB:C7:2C:AC:6B:36:8F:3B:17:B7
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:42:99:65:61:5b:e1:70:9c:00:c7:1a:c3:d9:66:83:c6:32:
50:c3:6a:1b:75:de:91:84:ae:c1:58:aa:b4:b4:2a:67:f4:7a:
fc:cc:4f:97:8f:e4:e7:f6:f8:46:32:b0:e4:91:b3:c2:76:f8:
fa:44:06:b1:49:a8:23:89:5f:6a:7f:87:9a:ed:a9:df:cc:b5:
c7:9f:33:80:5b:b7:5e:24:db:e0:ae:71:f2:b9:95:65:b9:62:
a8:04:db:6b:d4:3e:73:d4:d2:32:84:42:54:5a:d4:a1:96:b4:
4b:94:d2:02:f5:15:f0:39:e9:fa:e2:17:4e:e9:db:e7:f3:23:
ce:9f:01:9c:86:1c:d9:74:69:df:63:88:30:7b:2f:43:cb:c0:
bc:4a:2c:a9:12:d4:54:a7:22:13:3a:6e:72:e1:c9:33:7d:07:
06:50:6a:c9:17:c2:6f:98:6f:f4:06:4f:96:31:9b:38:88:1f:
00:25:11:22:1c:bb:08:c1:e5:3a:bf:c6:18:ff:eb:20:1e:7e:
b9:7a:f9:fc:a8:88:ad:e3:f3:2c:80:f7:05:7d:05:04:dc:30:
f1:2f:b4:b1:55:a5:0c:7f:2b:82:3b:aa:a7:98:44:22:8f:fa:
8b:ac:24:7c:6a:96:9e:e3:ef:15:ca:32:15:3d:12:43:34:a4:
ff:6f:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:38 2026 by rpki-client