Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier: ZdoVB3rnHNoa64QdHr461EjHP6rjSBJenBI2bui+dBU=
Subject key identifier: 9A:BC:3A:8C:52:DB:2E:69:36:16:13:61:84:7D:5E:FD:C2:26:E8:25
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial: 019D3865AEEDCDF4A996098DB71F361E9EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number: 0B98
Signing time: Sun 29 Mar 2026 07:01:21 +0000
Manifest this update: Sun 29 Mar 2026 07:01:21 +0000
Manifest next update: Mon 30 Mar 2026 07:01:21 +0000
Files and hashes: 1: IggoS081L9PfSnoANLO8UPkw_zo.roa (hash: RstMLmB9/U68WoUS3YJFOjuTsGp4LpQVXF1KSqQUnnk=)
2: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: AKvzRkH1dSZIRFBDhEk2DoHRQ1y08sFi8VNUA31jiE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ae:ed:cd:f4:a9:96:09:8d:b7:1f:36:1e:9e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
Validity
Not Before: Mar 29 07:01:21 2026 GMT
Not After : Mar 30 07:01:21 2026 GMT
Subject: CN=9abc3a8c52db2e6936161361847d5efdc226e825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:42:17:72:7d:7d:fc:dc:4b:e7:51:8e:25:
01:11:72:f4:d6:0a:0c:3b:f0:34:e9:da:e0:6c:f2:
14:50:d9:ed:d6:0d:a9:44:fc:99:f0:e8:97:43:59:
a1:ea:8a:4c:f9:02:8a:20:0b:e2:3f:15:ee:0e:b5:
8c:4d:2a:37:c4:6b:1a:96:e1:d2:08:2b:7a:63:43:
8a:53:9b:e3:c6:70:e5:b6:58:97:e2:8d:0f:5d:79:
7a:43:91:65:9b:6e:7b:7e:90:49:48:1b:2e:27:39:
ab:bc:34:ef:38:c1:b3:12:82:ca:7b:34:27:bc:39:
0c:4c:66:c0:71:eb:b6:44:a6:91:36:80:a2:78:e4:
1d:42:b9:32:fb:83:ce:13:78:a1:0e:41:b1:bd:8d:
16:eb:75:bd:f2:37:20:e1:7d:57:b3:9d:77:3a:87:
4d:f0:77:db:1f:db:b4:92:c1:e6:39:ab:4c:38:ed:
1a:a5:92:0c:78:64:e1:6b:5a:d6:ae:ee:d8:3b:9e:
80:db:bf:01:8a:b3:55:30:5f:c7:19:24:f2:76:74:
b6:43:7f:32:a9:43:0f:62:4c:db:3f:8b:2f:84:0e:
fe:3d:ca:f5:d4:e8:5d:2a:49:48:0b:80:74:9d:96:
bc:63:4e:74:62:1e:d8:cc:8f:37:b4:c6:84:82:b1:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BC:3A:8C:52:DB:2E:69:36:16:13:61:84:7D:5E:FD:C2:26:E8:25
X509v3 Authority Key Identifier:
keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e2:bf:34:4b:84:06:e6:66:7e:ff:73:45:94:6e:80:aa:1e:
a5:a5:92:7c:43:d7:85:e4:73:8d:6b:67:7b:4d:1e:c0:3c:04:
39:ed:53:5b:be:4d:a6:34:68:6f:74:e2:6d:76:0f:86:09:38:
18:25:7b:49:d5:33:f9:2c:ef:4a:c7:fb:d8:b3:2e:46:de:1c:
e0:38:41:4e:84:d9:eb:73:84:96:d1:c8:d1:7c:41:09:82:65:
32:72:57:96:01:63:26:fd:f4:e2:f6:f3:75:a6:8d:26:8e:d9:
0b:29:96:48:12:e2:bc:ac:60:40:99:12:5e:d7:7a:e1:ba:c2:
e5:21:8c:9a:68:e2:7d:68:46:7e:83:d6:b0:75:e1:cb:ba:b7:
8d:8d:1f:f5:c3:ec:0b:a1:ba:35:84:57:ed:aa:4e:c3:24:94:
ae:45:73:94:89:3a:cb:bf:12:41:82:26:27:de:8e:f3:04:67:
86:c0:57:be:c3:b9:fa:c7:85:1b:1a:72:60:f0:cb:cb:28:e0:
6d:71:4d:1d:d4:e9:9b:4c:3f:39:65:e9:4a:02:15:4d:19:db:
b8:e0:d0:2f:c6:1a:3c:58:55:36:8b:7a:30:a0:42:97:c8:e1:
ee:f7:12:19:f7:6c:d3:67:ea:c4:da:90:62:16:11:fc:e6:69:
1e:01:34:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:23 2026 by rpki-client