Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File: ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier: IWf/Xn3gSMA3oW7jq99Lpr9WgeJFM/23ba1E3QFDIsc=
Subject key identifier: B9:01:D0:E5:4F:F5:CD:B5:72:18:24:15:84:9A:DE:FB:3F:04:81:2D
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial: 019D382E26DB40D0745BB702172549E0AE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: 39TW_rteZEmG2yqgCNBCF7PjZJA.roa (hash: QiC1evAcCRcezlzRHbRvqDU6mKjNFQuGOEOLFGB1NnM=)
2: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: 8zsfihzrPNy+nnTsbd2AzyXGwgKc0iS1qaMKgw6lLgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:26:db:40:d0:74:5b:b7:02:17:25:49:e0:ae:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=b901d0e54ff5cdb572182415849adefb3f04812d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:c6:90:93:62:2f:6f:31:28:c5:f7:e5:af:
74:57:66:cc:74:6d:77:ee:37:17:62:08:50:29:25:
2a:ef:2c:72:fd:5d:46:90:78:55:e4:47:b5:fd:3c:
94:57:40:0b:93:fa:e4:67:c6:83:09:05:d3:eb:c1:
27:0b:62:6d:1d:d8:e8:90:12:bc:77:69:44:1a:91:
e9:ce:4f:77:82:a9:d2:bd:e5:ee:3d:f2:b9:25:91:
74:1b:22:91:8f:ec:82:34:91:52:43:9c:cd:e6:52:
12:69:25:2e:98:17:25:e9:fb:bb:e9:47:94:9e:c1:
48:6f:6f:b1:6c:ab:80:e5:c0:28:ec:ea:1d:37:fe:
2f:3a:49:16:27:2e:1e:f3:e5:ee:2e:9f:04:09:97:
b4:c5:44:85:fa:7c:88:a3:3c:61:57:d6:f7:fd:93:
d0:d8:3c:5f:e6:80:95:55:bf:58:65:f1:a0:55:7e:
6a:bc:ab:d9:4f:47:ae:d8:9f:dd:ad:a0:cf:9b:d2:
38:71:53:6b:6d:0f:9c:9c:9c:c0:85:fc:46:d2:5b:
b1:11:f4:be:3e:e0:27:e1:a3:5b:55:9e:94:6f:2d:
3f:33:f9:39:52:2e:76:11:b4:b7:44:b8:50:5f:ee:
52:5a:1b:0c:e4:a6:57:3f:67:5a:a1:ea:bb:52:fc:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:01:D0:E5:4F:F5:CD:B5:72:18:24:15:84:9A:DE:FB:3F:04:81:2D
X509v3 Authority Key Identifier:
keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fd:eb:9e:30:9e:14:8c:41:a1:a5:4c:84:fb:9e:ba:c7:1a:
0c:f5:10:8a:87:b9:13:67:53:23:8f:77:01:d4:d9:b3:7f:7c:
cc:42:0c:1a:65:41:35:5e:7a:37:90:ea:ad:69:0f:03:48:7f:
84:9f:9c:c4:64:0a:e2:8d:7c:a5:48:ff:76:0c:50:2c:a2:6b:
a2:b7:46:7b:49:b8:f4:47:2d:f5:18:f6:0a:b9:29:17:f2:21:
f9:50:db:4c:fd:89:63:da:0f:95:58:93:0a:67:51:df:0c:2d:
13:64:90:0e:71:38:9e:b3:8f:f5:0a:0e:76:60:48:09:fc:b0:
38:ab:d1:24:5a:01:6f:8b:25:1b:21:73:6e:4e:78:5b:1c:96:
d9:80:67:53:54:e8:8c:a4:8a:b9:3f:2e:1c:26:17:5d:91:0d:
23:49:e4:a8:de:70:71:03:62:ac:f7:96:d3:52:cf:3c:77:90:
06:7e:01:81:87:4a:80:61:3e:dc:65:0e:da:5e:a7:f3:fc:33:
a1:bf:fb:4a:ae:3d:92:f8:07:24:84:97:19:a8:1c:2c:a4:04:
82:90:a9:a4:43:64:c8:0d:0b:9f:33:40:7b:58:9f:73:6f:f2:
42:59:e7:47:3a:21:d6:e9:ad:2b:a5:fc:2e:b1:b7:3b:ce:2a:
0f:0b:43:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:54:40 2026 by rpki-client