Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: DKY2LSgVhPg39VpQxU7jNgYQ+I1pRTarkjGKrY8Gk7w=
Subject key identifier: 7F:E3:11:3B:73:B4:37:3E:B4:2D:B7:D3:82:46:F0:C1:D6:63:4F:1D
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 019D375317C5475F860BB3E3385B244D1B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0C22
Signing time: Sun 29 Mar 2026 02:01:25 +0000
Manifest this update: Sun 29 Mar 2026 02:01:25 +0000
Manifest next update: Mon 30 Mar 2026 02:01:25 +0000
Files and hashes: 1: 1JivGUDnbvvAALdPLWmN3LnRPUU.roa (hash: CFdTUCMz6IqAjDVASJIEHVZNQPU5MvWCKn0J2DxXzcY=)
2: mDQRP_41vCpTv8zEQtwrpsMlm6o.roa (hash: wP6wE0fEKqnHP4YtC1NM+FHDVJbGLAERsWmmC8DpUK8=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: hhWir3brgdfmis/ShW0Vg2L6jBPu1xNNiy8JKS/HPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:17:c5:47:5f:86:0b:b3:e3:38:5b:24:4d:1b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Mar 29 02:01:25 2026 GMT
Not After : Mar 30 02:01:25 2026 GMT
Subject: CN=7fe3113b73b4373eb42db7d38246f0c1d6634f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:58:49:21:d9:53:e6:33:fc:ea:2c:31:a8:46:
21:5a:97:ce:99:f2:22:90:4a:e2:d4:4f:05:da:5b:
9d:25:0a:6b:2a:b4:8d:8f:4f:9c:32:e2:9e:12:f2:
fd:c6:68:26:38:48:e3:4e:43:6c:d0:51:4c:56:3e:
63:b2:d0:e3:b3:da:4f:54:a6:cf:80:b0:f3:00:10:
63:a4:a3:ae:a5:ab:33:62:9e:49:2e:34:71:4b:c0:
0f:f8:f9:fc:07:3d:ca:53:1b:b7:2e:83:2b:8f:0e:
6b:ca:c3:d4:fe:b2:45:a4:f9:ff:fd:45:68:c0:c8:
7a:70:1d:da:48:3b:80:01:55:49:1d:f4:70:65:3c:
c6:32:e3:c5:64:f8:58:6f:c3:f3:aa:ce:0d:d1:45:
ba:d8:24:db:ff:d9:e0:26:9c:a4:92:89:e6:eb:47:
e3:01:70:60:a6:1c:40:00:bf:dd:04:8d:47:55:4f:
f6:ae:c5:f2:28:de:e6:0e:c9:3a:4e:c3:b2:2e:21:
ea:bf:4a:12:58:08:02:78:e2:aa:c1:20:4e:da:65:
0b:0d:ba:26:6b:eb:02:29:f1:0e:1c:06:bd:a0:92:
ca:45:ce:12:e7:e9:4b:39:25:43:40:39:38:e0:d1:
b4:b3:df:d0:da:70:45:d5:a7:19:11:28:17:13:bc:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E3:11:3B:73:B4:37:3E:B4:2D:B7:D3:82:46:F0:C1:D6:63:4F:1D
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f5:b4:f4:61:a5:18:89:b2:58:b7:e1:6f:09:4b:44:e6:1c:
5f:42:9d:ec:eb:05:90:84:95:56:b3:44:a4:a9:da:72:5a:26:
d3:27:cd:08:55:79:e1:e7:90:d9:40:75:2b:0d:05:1c:b7:78:
17:0b:57:76:dd:76:ee:ed:28:45:cf:43:ca:55:b9:20:af:0a:
d7:35:ce:08:ad:13:3e:6d:b3:a7:74:b7:12:94:15:30:d8:ba:
a6:5f:3a:17:ef:ff:ef:38:af:d0:85:74:bf:81:8d:35:d0:ae:
fa:c0:84:c8:26:97:07:7d:77:a4:a0:61:2a:0f:8f:c9:2c:87:
08:0e:ae:ec:91:d4:43:0d:b9:b9:86:14:54:2a:31:04:92:17:
46:66:53:64:bb:b7:3e:37:c0:58:b4:fe:f4:ed:1e:9e:d2:72:
8f:b3:d0:34:ab:ad:24:94:db:e6:1d:27:17:4d:80:c5:aa:17:
b2:63:c7:11:38:24:cb:5d:e4:3f:ba:22:8b:8b:0f:1c:9e:06:
cd:09:27:7b:f4:86:90:a1:15:76:72:2c:ba:de:d1:75:1d:42:
cd:fc:97:20:c4:b6:a8:4b:12:a9:61:1a:38:ff:fe:b3:f1:ac:
52:0c:12:b3:74:e9:27:6e:e3:d6:df:70:b4:28:be:35:69:e4:
69:67:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:44 2026 by rpki-client