Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
File: yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft (raw, json)
Hash identifier: cX8DM9YRsZtystiRp6E2wjcGx7QioTKhDBqMWoYoOMQ=
Subject key identifier: D1:38:15:54:DF:5C:60:12:08:D8:FC:BD:83:21:AF:E6:E3:70:3E:1B
Authority key identifier: CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
Certificate issuer: /CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Certificate serial: 019D375222443E0A50A93BC23344208FF48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:00:22 +0000
Manifest this update: Sun 29 Mar 2026 02:00:22 +0000
Manifest next update: Mon 30 Mar 2026 02:00:22 +0000
Files and hashes: 1: 7o6kpttFmNc2Q_Fb7CY0cMCx0Bw.roa (hash: ERfj8NBPhWtC0lRKzuI7aqZB4Hd5ZjiGJHFCXPuiqqo=)
2: yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl (hash: RNKJt7/mVinwyaj3GNXNHdJJGcV1TicCRmmEzU+l444=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:22:44:3e:0a:50:a9:3b:c2:33:44:20:8f:f4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Validity
Not Before: Mar 29 02:00:22 2026 GMT
Not After : Mar 30 02:00:22 2026 GMT
Subject: CN=d1381554df5c601208d8fcbd8321afe6e3703e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9b:d9:a4:5a:91:cd:eb:ff:9e:f2:76:a2:79:
81:a9:94:ae:b8:db:8b:41:48:93:22:6b:65:b3:1e:
05:fc:db:ac:4b:d7:05:b5:05:de:21:b6:b7:22:ad:
11:2e:5f:0e:43:29:9f:33:11:0e:03:98:35:04:51:
30:c9:63:3c:ef:21:b8:fa:fa:98:7f:24:66:fa:a8:
47:9f:d1:84:21:f7:2b:7a:26:90:73:39:a8:37:50:
d8:03:60:ff:9b:a2:ac:34:33:f6:df:85:cd:fb:42:
4d:40:61:f0:dd:51:33:17:12:7e:ed:80:4b:47:a4:
70:41:8d:83:96:c1:48:fb:e8:73:be:a4:0a:19:33:
90:3c:65:42:2d:e0:6f:2a:89:d6:20:f5:d2:31:2f:
c1:76:95:63:2a:c8:73:0f:eb:79:30:a8:5a:e1:ba:
4b:76:58:2d:86:ef:7d:4b:62:99:f9:47:fa:60:94:
48:12:25:9f:d8:ce:d0:aa:50:b6:7e:79:a3:83:b5:
e6:53:e3:aa:86:ab:e8:f2:01:a0:c8:b0:7b:33:73:
d6:cc:0a:a5:74:2e:66:9a:ac:3a:95:2c:0b:c0:a5:
25:31:15:08:50:2a:eb:9b:e6:9b:cb:10:08:cf:61:
34:a2:ed:bd:7e:a2:6f:7c:52:b4:cf:56:47:a6:3d:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:38:15:54:DF:5C:60:12:08:D8:FC:BD:83:21:AF:E6:E3:70:3E:1B
X509v3 Authority Key Identifier:
keyid:CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:59:3b:e6:c0:ff:0b:e5:62:2b:1d:70:b9:df:be:3c:84:88:
89:81:80:58:a8:2a:27:33:ef:9a:93:df:a1:71:73:49:d7:61:
ae:d3:2c:d7:e1:ed:a0:05:de:2f:21:9b:6e:4b:9a:5d:ca:b5:
0a:a0:d4:16:5a:4a:64:27:41:0c:9c:d2:37:e7:70:67:65:bb:
84:5d:68:f1:af:63:2e:5d:8d:bc:2c:27:8c:ef:d1:1b:84:5a:
b5:77:16:68:0a:71:60:ed:99:f5:47:04:8c:ff:79:4e:14:c5:
9f:d5:26:0e:7f:ca:7e:24:c0:e8:76:8b:60:d0:90:42:9f:ef:
8f:2b:95:24:89:64:aa:df:9b:d9:68:41:19:99:09:c9:ec:8a:
5f:1d:ca:0e:b0:5d:68:3b:8b:b1:a5:69:0e:13:30:3c:d7:2a:
bf:4a:0a:b8:5a:a6:52:17:b1:bc:96:45:c5:a4:ab:64:82:8d:
26:9f:a2:ae:e1:81:04:06:14:02:03:61:da:83:e8:0a:f8:49:
18:f7:42:be:47:b3:37:de:05:3b:63:6a:fa:70:6e:fd:a6:84:
9b:69:ff:5b:8f:d3:fc:d7:f3:da:2f:51:34:2e:e9:b1:40:ed:
d6:d1:17:7f:bd:fb:af:85:37:59:a5:c5:21:28:30:7b:f4:16:
8e:5a:dc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:16 2026 by rpki-client