Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
File: ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json)
Hash identifier: CA+EGUfkAYrXKftKFZ2LbCyub2j++iJhQPLskMOj+4E=
Subject key identifier: 4C:FC:D6:9F:26:B2:D3:9F:BC:0C:80:D5:DD:0B:27:BC:7E:70:BE:85
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 019D38D36CB3E698EF933B258F9DA39CE971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: 1I5pS-KyF91INpSvz4UTgvSLQM0.roa (hash: kUre6FGJxo0oVZmAH7QT5SEnqBChJ7h9HJs3PKswLaY=)
2: E2f-QrvVPeeVaSg1kFFd2ljgv_U.roa (hash: z/R9QyEuD/1u1pxIWlMmu6tFOTJDdDVTMoz5pzQhZoo=)
3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: gVEatFgCzkh0oZCdOimr8JxohCs6qA5mnUVzjkGi84U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6c:b3:e6:98:ef:93:3b:25:8f:9d:a3:9c:e9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=4cfcd69f26b2d39fbc0c80d5dd0b27bc7e70be85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:6e:42:46:f0:f2:55:9a:2b:c0:f0:e1:e1:
b7:55:cb:39:52:ce:27:0e:fe:ab:27:5a:1e:b5:62:
c9:61:2d:99:2f:7e:f5:5d:9d:09:ef:6a:aa:54:25:
de:19:cb:29:3a:ad:15:4b:5f:c7:c6:53:19:75:d1:
c8:6d:98:bb:7b:3c:ef:0a:75:08:42:2b:09:fe:1c:
8f:86:d7:77:a9:b1:8a:f3:63:85:35:46:9c:ec:fb:
06:d2:90:df:84:40:19:b0:3b:50:b8:ed:de:ce:05:
c3:26:16:c0:1f:b2:91:91:af:d2:0d:1b:3d:64:3f:
ef:5a:fe:59:28:cf:7b:e2:87:f3:c5:cb:69:aa:02:
0a:1b:a6:5f:71:e4:4d:12:8f:00:e3:16:6e:14:ff:
a0:bb:77:f9:5c:49:38:7d:aa:64:93:7f:04:08:fc:
74:f2:3a:f1:24:ea:a7:25:42:4c:06:6c:9b:85:f1:
d0:bb:f4:05:bd:d5:c5:ac:07:92:24:ae:f7:5c:a3:
be:fc:d2:9a:f3:c9:5e:91:a5:59:57:40:2f:28:d3:
74:48:63:a1:37:e1:d5:f8:ac:31:cb:3e:2e:8c:e3:
8a:ce:37:c3:f4:e7:b9:33:fd:8c:88:e7:b6:64:64:
6a:41:df:c3:89:8f:25:26:a5:9e:e8:00:89:d1:30:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FC:D6:9F:26:B2:D3:9F:BC:0C:80:D5:DD:0B:27:BC:7E:70:BE:85
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:16:48:2e:53:20:bc:8c:83:66:bf:52:24:bb:d2:50:96:bb:
47:d7:0a:94:4d:c3:c8:4d:ea:b9:6f:d7:0f:c4:a9:74:11:5a:
a6:5f:73:1f:2c:79:f0:89:4b:d7:c1:9e:dc:1e:61:c8:bb:b2:
f0:16:b5:4b:c5:e5:6c:9c:20:c7:1a:62:c0:81:2b:17:14:06:
aa:da:2f:3e:86:72:3e:3c:bd:fb:f9:13:8a:c8:ef:3b:6e:33:
6c:09:a9:de:58:39:08:1d:9d:12:3c:f5:f8:f1:a5:27:6e:91:
d9:22:ee:4f:5f:ab:73:2a:a2:8a:62:b3:11:32:99:33:2b:e8:
f6:c6:81:ab:6c:41:c6:f4:c5:15:db:c6:bc:3c:25:3a:3f:41:
11:dc:cb:be:d3:19:90:84:70:b7:32:49:18:e4:83:00:df:8f:
30:32:5b:5f:5d:96:30:9f:89:25:53:78:bc:30:13:49:0d:03:
ab:da:79:79:f8:57:a8:2c:07:db:c8:e8:a0:eb:a7:f2:b9:f4:
54:be:78:62:6d:7d:c9:e0:4a:41:16:28:69:10:fe:51:de:96:
a3:e5:7a:6d:56:3c:82:34:13:05:9c:46:2d:7d:0f:65:95:c8:
dd:5e:88:8a:38:63:d6:f5:6a:17:45:e7:1c:b7:84:e5:9a:51:
3f:c7:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:33:57 2026 by rpki-client