Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: 4vas9lugpTIwS30DuaKAvbEWP+GUAm3Dc7PVk+xr4+A=
Subject key identifier: BB:62:24:F9:FC:77:F0:15:42:5E:68:75:51:0E:52:18:5E:CF:73:6B
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 019D37F786EC36EEEF5FE1AF2955ABFAFDA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:01:01 +0000
Manifest this update: Sun 29 Mar 2026 05:01:01 +0000
Manifest next update: Mon 30 Mar 2026 05:01:01 +0000
Files and hashes: 1: 05Rdwr--1tnXZPfu13z1-r9tQTo.roa (hash: wM0ntv3W1SWKI6P8cH7TnrdrNZlJdigMYw8TmLb1CoU=)
2: aE8_gVmck-wD_VyyQXZL4UyhlMU.roa (hash: GaAIUgFsYTQaT7thc7zx4Q22k1Bx49GbLq0/1lvEmRM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: b1BNMXnbmUtNdgAd0UWUF2LbVv4b3WqkHYcMd9ifmSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:86:ec:36:ee:ef:5f:e1:af:29:55:ab:fa:fd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Mar 29 05:01:01 2026 GMT
Not After : Mar 30 05:01:01 2026 GMT
Subject: CN=bb6224f9fc77f015425e6875510e52185ecf736b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:2d:43:c5:59:25:f4:d6:00:96:db:6a:c9:
ea:9e:d0:f4:f1:66:b5:c3:fd:04:ec:d4:d8:bc:00:
a1:c8:1b:f2:4e:82:60:01:b2:0b:9b:da:e2:30:30:
53:3c:af:ad:a6:d0:83:bc:01:6a:3a:6a:b8:2f:41:
82:17:c4:e5:15:e3:62:ee:0e:e4:f4:7a:b2:a0:fb:
1a:ad:a2:12:68:47:a0:2b:f0:b9:b9:4d:b5:12:b4:
a7:ce:49:69:df:5e:64:7e:82:cd:b0:52:27:47:42:
b1:15:a9:24:71:0d:c2:2a:75:84:15:59:4a:54:33:
70:34:b2:2e:04:30:d9:40:9a:10:b2:37:42:88:f1:
37:e8:7e:0a:d6:ea:13:a4:a6:d6:19:a8:24:8d:77:
2f:aa:fc:71:71:b6:98:32:95:97:73:04:4a:11:f9:
98:c8:23:b7:e7:17:d8:ac:15:d9:e2:d7:c6:9d:5e:
f4:bf:f1:d6:07:bb:2c:0a:3c:e8:09:2d:1f:35:33:
1e:e1:6f:6b:7a:f7:c6:5f:cd:5c:ed:c7:a1:27:a2:
93:f5:2b:2a:9d:b8:c5:0a:86:e6:19:79:e6:7f:16:
53:8c:2f:2a:2c:1a:15:8c:52:c9:d4:1c:33:38:22:
76:b4:e4:60:bd:d6:d8:32:64:d0:bc:16:4e:59:f4:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:62:24:F9:FC:77:F0:15:42:5E:68:75:51:0E:52:18:5E:CF:73:6B
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:94:70:18:86:39:95:91:17:94:8a:15:40:83:4e:8e:92:28:
e8:97:61:3c:d2:a3:d6:65:19:4e:c8:96:37:66:df:fc:4e:28:
25:7c:58:b7:09:1b:01:54:32:48:d7:20:76:1d:aa:86:00:8f:
b0:ee:94:bf:78:38:c6:5b:21:9a:53:2c:3d:e3:28:05:d3:f5:
49:13:ec:db:dc:5c:bb:53:ab:9c:09:8c:c4:58:0d:4b:c3:85:
41:b9:58:78:53:6e:72:53:b8:9a:37:20:e3:84:27:33:c9:2d:
1e:15:4c:8e:55:0e:24:bb:54:76:ca:47:5e:c5:94:5d:29:ed:
3e:6b:c4:73:4e:a3:52:9c:52:16:a9:6b:32:05:a9:65:50:ce:
bb:d4:a6:99:69:5d:06:19:36:0f:01:b6:e7:5d:30:d6:05:99:
5f:84:c7:e4:93:4b:cb:6a:2e:97:97:64:42:ac:1e:20:a3:a3:
dc:34:4f:ed:62:c5:7d:12:63:f1:1e:0c:1a:65:9a:83:42:ed:
b6:02:11:68:dd:30:68:a3:31:47:67:1d:8e:c1:d1:8c:86:97:
f1:68:43:ee:f0:34:e3:e3:6e:56:17:4e:7d:7c:2d:4f:f3:c7:
e7:75:e5:90:9e:ec:87:4b:76:01:6a:d8:d9:ac:a2:b1:4a:cf:
bb:20:32:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:16 2026 by rpki-client