Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: 2rTcC+SaplYQy/0DZEpNTwcWTkBzHg+tjEMVFMzm+/E=
Subject key identifier: 55:3B:B5:D9:7B:74:24:5B:3C:0C:E8:81:55:65:E4:9E:59:CB:30:69
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 019CE2C784014B2BCC962633AD521E422019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 10BF
Signing time: Thu 12 Mar 2026 16:00:52 +0000
Manifest this update: Thu 12 Mar 2026 16:00:52 +0000
Manifest next update: Fri 13 Mar 2026 16:00:52 +0000
Files and hashes: 1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=)
2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: S8IoCIHulmyvXiPRlDJ7m57NR02BCAITto/D38dREI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c7:84:01:4b:2b:cc:96:26:33:ad:52:1e:42:20:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Mar 12 16:00:52 2026 GMT
Not After : Mar 13 16:00:52 2026 GMT
Subject: CN=553bb5d97b74245b3c0ce8815565e49e59cb3069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:05:70:bf:7c:1c:19:d1:3c:0c:8b:81:6b:
ac:bc:83:5e:e5:d1:19:d7:c9:91:26:e0:df:f0:f7:
f2:de:ee:e3:92:71:93:2e:8b:66:1d:6d:9f:db:d8:
68:03:02:92:fb:83:9f:6f:75:d8:f7:4a:ea:02:3c:
59:ae:a7:5f:af:66:67:e7:5a:1a:96:11:ce:30:fd:
40:1d:e6:8e:a1:7f:cd:1f:ac:b7:55:85:a2:4b:27:
59:c3:57:42:bd:50:03:d5:cd:29:14:cb:db:f7:b1:
a5:8b:4c:cf:20:c9:f9:db:31:69:bf:4e:aa:dc:62:
2a:f5:23:ac:c6:90:4c:ca:08:14:61:87:3b:0b:44:
36:77:98:e7:cb:43:7c:8b:66:4b:e6:ff:f1:c2:b6:
24:87:1e:de:07:0c:a4:e8:1a:d8:e8:49:33:c1:cf:
e5:12:5d:aa:ba:f7:f7:06:4d:b9:71:3d:6c:29:d1:
83:2a:0f:c8:ac:98:de:c3:76:e4:e9:a7:bd:c1:f2:
0f:00:d7:c8:b8:1e:5e:78:89:84:7e:df:f7:59:aa:
27:21:08:06:34:5a:d5:e2:00:c6:c9:44:bd:5b:0c:
3b:28:e3:b5:30:91:3e:db:29:4f:4c:6c:0e:fa:b8:
47:51:86:90:f5:fc:45:a1:d6:56:48:92:f8:ef:90:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3B:B5:D9:7B:74:24:5B:3C:0C:E8:81:55:65:E4:9E:59:CB:30:69
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8b:8c:67:8e:d0:c1:b2:f3:48:38:4e:9e:57:5b:51:d3:2b:
ad:2c:27:35:2b:95:e5:75:c4:98:62:88:37:67:aa:53:6b:8e:
d4:24:1e:43:7c:a4:a3:ee:1b:55:5a:f1:ef:54:9a:b6:4f:ae:
e4:00:7f:f2:61:3b:e5:ea:5b:01:72:71:18:71:af:55:5d:f7:
90:47:84:fa:a4:5a:03:75:57:6a:78:9a:b7:47:27:d7:f7:ef:
83:17:98:13:91:56:7b:15:05:d9:21:26:bb:4c:1c:79:38:5e:
15:86:5d:b2:c7:15:fc:29:f8:d8:52:d8:d6:d3:24:8b:b5:78:
79:e1:51:fc:f4:74:7d:d9:2d:3a:25:06:50:3c:91:c8:ed:02:
d8:91:eb:9f:3e:33:26:91:75:25:7b:0e:b6:d8:66:22:13:2f:
95:67:77:1d:ef:f5:3a:bf:8a:3d:9f:04:62:a5:f5:6c:68:3b:
ec:94:e5:04:8c:fc:9d:65:eb:8e:19:45:b7:34:34:47:ca:a2:
c1:0e:12:fb:dc:c9:42:f1:8e:f9:5a:c4:54:9b:05:bd:d2:4d:
e6:99:33:2c:dd:5a:c4:2e:05:39:ae:5a:11:53:d4:02:36:7d:
b3:9e:c9:2b:0a:f1:2e:90:b0:79:a3:a5:59:23:3b:62:78:ff:
8b:af:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:46 2026 by rpki-client