Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File: yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier: DzVtJEsVx+xs6EpLDmf6EFBt5Giz3p7xW5iL3OzgV5c=
Subject key identifier: 89:36:2F:BA:3F:47:A6:CE:CA:4F:2D:42:2C:4E:70:3F:8A:FA:A2:D4
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 019DCFE413D45A69AA8E5067D16F24491F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number: 15FA
Signing time: Mon 27 Apr 2026 17:02:04 +0000
Manifest this update: Mon 27 Apr 2026 17:02:04 +0000
Manifest next update: Tue 28 Apr 2026 17:02:04 +0000
Files and hashes: 1: F71lf1rO3_j_YrGDLp8vXCnWwNQ.roa (hash: 2T6cEG+G6vR7CgItj3CD3tb1JHo1M1LaioFUbAKMaFQ=)
2: KbGZziqCA41JgOpe8AUOSiv8rIM.roa (hash: MBAhT/6sVckMLfrlu1S3S4sTHwbcNuOAQSyBUhp+xNk=)
3: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (hash: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA=)
4: Wgv3nP3KPCzK8Vc3Ujwc5tCZFEY.roa (hash: sZiUtGsuan8lIISLSvNoUUBLxQveJeIACDPYwQFWZys=)
5: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (hash: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU=)
6: ba1PPFUfJQPbN0qUaPYUh_lra00.roa (hash: io880q/jxrQW2nbvQeP7+TanhHJv6EExV9pj2tnHEls=)
7: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (hash: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw=)
8: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: rSdE2y4LbOzRog96T1WOPza7zDL/9KTVwHLVRwFqn60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e4:13:d4:5a:69:aa:8e:50:67:d1:6f:24:49:1f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Apr 27 17:02:04 2026 GMT
Not After : Apr 28 17:02:04 2026 GMT
Subject: CN=89362fba3f47a6ceca4f2d422c4e703f8afaa2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:4f:8c:cb:1e:4c:44:88:17:e7:2a:12:f8:
34:02:5e:b6:23:2b:09:f4:9a:67:35:78:c6:68:35:
f4:13:41:e0:e4:4b:f1:cf:d1:d1:c9:a9:85:3a:1f:
ab:8a:8e:a6:52:89:bf:ee:ae:6c:42:29:53:01:da:
f3:aa:f1:dc:dc:3e:c7:0c:35:e8:fb:05:8a:38:f6:
54:10:29:1a:66:a4:83:2e:81:45:55:c6:57:a2:df:
e1:e4:2c:12:05:3d:da:ff:87:05:81:fe:82:72:a5:
cb:b5:ee:1e:bf:dc:cb:7e:e9:7c:39:0b:45:19:93:
67:ba:31:b8:86:40:e9:7e:1a:da:5a:98:b5:45:df:
b5:a9:fe:48:2f:7e:ba:cc:a9:23:41:2f:db:c2:1e:
d9:3a:35:c8:75:33:5b:6f:85:d4:32:ef:91:7f:2a:
eb:77:ee:33:4f:d9:b2:63:1f:80:fe:5d:91:a5:b7:
18:60:2f:a7:c6:e4:6b:5d:bb:df:15:4e:d6:fe:30:
8b:89:b5:72:32:29:db:66:11:0c:6a:3c:11:41:da:
2e:09:4e:55:4d:84:63:59:d8:c4:a7:93:83:03:64:
30:de:be:2d:66:5c:71:39:03:c5:02:98:dd:b7:f0:
cc:2c:d3:5f:8f:c8:e4:68:4c:12:ae:c1:e0:06:84:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:36:2F:BA:3F:47:A6:CE:CA:4F:2D:42:2C:4E:70:3F:8A:FA:A2:D4
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e5:92:b9:e6:ce:d5:9a:ab:aa:a0:ef:e2:dc:df:f8:d5:5a:
35:30:3e:43:62:c8:f5:cd:db:33:36:2a:2e:e3:52:4f:f2:fc:
4d:ef:04:88:6a:7b:c7:d2:9d:83:c8:b5:9c:54:28:08:16:29:
fc:cc:45:cc:58:9e:42:75:03:4c:a8:23:0b:61:39:0c:19:c9:
32:bb:5e:89:c1:fd:31:65:30:fe:ee:95:5e:cc:e0:2b:3b:f9:
a5:00:8b:8c:39:27:2a:28:6a:67:1f:26:81:51:8e:1c:a5:d3:
61:10:83:d8:a8:3b:b6:50:1b:ad:b4:63:83:70:01:82:28:9c:
e1:78:67:02:ed:95:96:be:e9:7a:16:76:44:43:99:b7:8b:dc:
94:f4:2d:5a:6d:ce:90:16:3a:68:77:64:32:e6:d0:a9:5b:a3:
5b:b3:ca:9e:58:0e:47:a2:b7:5a:cb:96:4d:c0:41:58:c8:19:
7b:33:79:04:ed:31:e4:b5:87:81:54:b2:e8:e9:f7:b0:8c:93:
5c:9e:c7:be:17:d2:3d:72:89:23:cc:e4:fa:0d:40:9c:da:42:
a5:0b:c9:54:3c:20:a1:e9:a2:b7:d0:76:c4:4e:b0:62:5a:77:
c0:47:dd:c7:2a:0b:d7:5d:be:d7:44:15:02:b7:5f:e2:21:9d:
5b:9c:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:38 2026 by rpki-client