Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
File: yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft (raw, json)
Hash identifier: zoTr2WkQwP9VScFaLtjIbkoF0ViwNLnIv/HzIH5r+Eo=
Subject key identifier: FB:00:BC:3F:CD:C5:1B:49:81:39:D7:24:75:D2:8D:2A:88:38:20:64
Authority key identifier: C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB
Certificate issuer: /CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
Certificate serial: 019D37BFFC8C6E673BDD7BCA3862A34C3C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
Manifest number: 044D
Signing time: Sun 29 Mar 2026 04:00:21 +0000
Manifest this update: Sun 29 Mar 2026 04:00:21 +0000
Manifest next update: Mon 30 Mar 2026 04:00:21 +0000
Files and hashes: 1: 8Z-EzuThtebO4TCJ4sXK6ZwkF-U.roa (hash: nLXaQxJqeWy3EVhvO0P+XRy5zmHbKG5lRbAYJ4bV64g=)
2: yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl (hash: XpKeoIXXJOAYpZEwLJaoygpy8a2zsU1vvfAEBTbFlk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:fc:8c:6e:67:3b:dd:7b:ca:38:62:a3:4c:3c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
Validity
Not Before: Mar 29 04:00:21 2026 GMT
Not After : Mar 30 04:00:21 2026 GMT
Subject: CN=fb00bc3fcdc51b498139d72475d28d2a88382064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:22:b7:a9:91:84:bd:f6:e2:07:f6:0f:3f:b4:
4a:bd:da:1b:87:57:b2:20:ff:c6:3b:8c:3f:ce:b2:
db:4e:20:73:70:9d:4c:d5:fe:51:8b:8d:07:5d:fb:
5f:ff:6c:32:99:8f:8e:44:2e:be:71:11:e0:56:5d:
c4:7c:b3:1c:81:5c:37:88:ee:b9:d5:38:a0:15:1b:
9f:8b:b1:61:db:66:a6:95:b0:eb:d2:bd:67:aa:bb:
ce:69:36:a2:1d:77:fb:ed:45:c6:92:e8:d4:c0:f0:
0c:a8:3a:cd:ad:42:3b:f1:86:6d:f4:d5:fa:90:30:
60:8d:a6:0a:c9:e2:6d:03:d1:13:58:f6:0e:0d:6c:
3c:d9:a4:b8:a0:9a:32:73:ef:8e:8b:fd:68:35:61:
68:a1:c1:f2:06:64:42:58:6c:5a:b9:b5:5c:39:fe:
23:aa:04:08:c6:19:57:95:34:00:a6:f1:de:f9:0d:
45:a9:d2:d0:a0:f4:e7:cd:7b:4b:b4:56:f2:8d:f4:
7b:45:57:81:fc:95:0e:d9:76:fc:29:24:3c:ad:46:
f7:8e:11:13:2c:92:e6:4e:41:80:ee:11:ac:22:a0:
16:6a:51:91:c6:57:22:96:f6:a5:7a:50:1f:b8:9e:
e5:9c:e3:03:05:c8:e6:b2:47:fe:62:bb:36:7f:ff:
fd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:00:BC:3F:CD:C5:1B:49:81:39:D7:24:75:D2:8D:2A:88:38:20:64
X509v3 Authority Key Identifier:
keyid:C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1d:67:46:30:48:5f:32:c0:ba:d5:c6:75:39:b5:88:75:cd:
d5:92:18:02:b7:f6:7c:a1:b2:fc:19:d8:96:fb:d0:14:1c:9e:
17:3a:1f:78:1c:c2:bb:51:a7:e2:20:c1:f4:24:e8:de:88:b5:
c6:6f:f1:d8:9d:a5:3b:ce:4c:9d:14:34:05:44:d2:d6:25:1e:
bf:9d:10:6f:fa:b0:0f:ce:5c:43:86:d9:62:45:5e:22:19:85:
63:1a:ff:64:47:fc:05:dd:0e:18:a3:82:49:eb:7d:34:99:5a:
24:f1:c9:1f:f7:f3:16:ff:a2:7a:09:0a:12:99:c1:a9:d8:3c:
09:61:e1:84:66:7e:91:46:9f:a9:a7:1e:70:3e:b5:61:a0:63:
98:e3:2b:77:5c:d8:13:d3:e7:3f:b3:71:dd:45:8e:0a:ae:00:
80:89:f8:0a:59:fd:20:74:06:fc:ba:dc:74:c3:26:54:83:26:
34:28:f6:aa:ed:8e:dc:79:c8:4a:62:21:f5:bd:a2:0b:43:74:
c8:fc:3d:18:9e:eb:4e:03:ba:e0:c1:d0:f8:e8:e1:ff:2d:a1:
bf:62:3d:52:37:7f:01:09:73:1d:a4:2f:df:d7:a6:7b:ba:4a:
f8:3d:ce:af:27:9d:7b:3a:1b:41:03:b2:7c:69:ae:09:0e:95:
8f:66:3e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:05 2026 by rpki-client