Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: PTgdXRcwlc8+zRwJCxNN9GNcGmDqcRsd/BP7lxJjVl4=
Subject key identifier: 26:FC:9A:05:CF:0E:7A:8E:F4:59:8B:69:1E:67:7B:6C:4C:3B:CE:2B
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 019CE55A8889F7A9B39F417A54C78B1D974A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 0998
Signing time: Fri 13 Mar 2026 04:00:41 +0000
Manifest this update: Fri 13 Mar 2026 04:00:41 +0000
Manifest next update: Sat 14 Mar 2026 04:00:41 +0000
Files and hashes: 1: 820vIRF1IvHmMeX3TIHoslLaymk.roa (hash: nxsc5hiaKPfRF3Jfau9U9QFL2zAQ/W9nSHpc/OJ2IbA=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: cfoKeNItK4QoXPEXKLEFh9Dbid+TCEj4Lan4b9cCRlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:88:89:f7:a9:b3:9f:41:7a:54:c7:8b:1d:97:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Mar 13 04:00:41 2026 GMT
Not After : Mar 14 04:00:41 2026 GMT
Subject: CN=26fc9a05cf0e7a8ef4598b691e677b6c4c3bce2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:5e:4e:34:9d:bc:b6:b6:b4:ab:16:8a:dd:
39:45:c5:16:c4:58:8d:98:a8:8d:81:8b:e3:9b:0e:
c3:6c:e4:e7:79:ba:e6:57:7e:b8:c3:ff:92:61:f4:
b5:d0:07:92:30:bd:d2:53:c7:75:d5:db:4f:97:70:
7b:4c:8e:3c:28:e2:c9:b6:1e:3f:ff:b8:93:0f:d1:
6b:47:46:ad:82:00:8c:ac:eb:2d:54:d6:71:c1:a9:
05:c7:63:e5:89:2b:06:d6:ab:76:96:c8:d7:85:e1:
bb:75:5f:0e:a0:88:29:d6:72:ea:d8:8a:0b:50:e9:
52:4e:a2:d0:91:9f:d1:b4:8e:86:44:13:1b:13:d0:
3f:b7:f3:b1:95:df:d0:24:3b:79:c4:32:3a:b1:38:
58:bb:f5:40:b5:c1:62:9d:e6:aa:61:1d:60:3e:3c:
60:91:1d:61:ee:ef:bc:42:81:00:60:90:24:0f:7b:
9b:f1:4b:85:fa:e9:7c:4a:2b:fe:c9:c6:08:e9:64:
d1:66:7d:61:f0:15:cc:29:ad:ce:ae:49:a0:b0:6f:
c7:ae:c9:37:8d:73:62:b4:98:83:83:4c:e4:d6:1f:
52:1c:40:30:d1:7f:69:89:26:76:7e:9d:be:b5:17:
89:a8:99:c2:eb:32:66:c7:19:26:4a:26:51:fd:cb:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FC:9A:05:CF:0E:7A:8E:F4:59:8B:69:1E:67:7B:6C:4C:3B:CE:2B
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:04:af:20:2e:40:ba:4e:fa:88:59:d6:f8:4d:17:3a:25:58:
78:63:ed:1f:a6:f1:72:e7:78:89:ae:07:54:77:ab:a6:f0:2f:
c5:6d:dd:2b:72:be:97:4b:ee:ff:52:a3:8f:59:e4:69:3d:84:
31:39:63:b2:32:b8:8c:ad:2a:9f:d1:73:ae:04:d7:5c:7f:d8:
61:75:09:31:5e:89:bb:7e:44:a4:7b:8b:52:8d:3d:30:cc:20:
7a:77:e9:a4:27:98:d8:7a:a6:17:17:7b:c0:27:3a:e0:32:e3:
a2:7c:b7:64:d4:55:e6:0d:4a:67:20:29:ff:f1:cf:72:62:6c:
75:3d:90:e2:5c:13:dc:b8:02:03:0b:6d:55:8f:eb:39:68:f3:
33:77:1c:bc:9a:51:8a:71:ed:66:0e:5e:9b:97:a6:a9:a6:06:
9c:f1:ae:14:1f:01:13:bc:5d:8d:ad:2f:59:af:a9:7c:cf:43:
69:49:4a:1a:9b:38:7e:d9:53:b5:10:8f:e9:5e:c7:cc:55:01:
0c:6a:f9:d8:d5:6a:3a:93:64:1d:78:54:e4:1b:69:4c:b5:e9:
4d:3b:6c:27:51:fc:4a:79:aa:84:4a:c1:a5:9d:eb:c1:e2:44:
8d:14:13:f0:c9:80:e4:21:34:8b:84:ca:0d:b0:c0:16:d2:0b:
22:c4:1d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:21:10 2026 by rpki-client