Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: yhwK6iZl5IYBPvmJTy2XAUBttBBYrh5Az3OQ+RdgbnQ=
Subject key identifier: 73:DC:68:89:A5:E3:99:42:ED:F1:01:FE:D4:E1:87:F2:CB:FB:56:95
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 019D382E21F2CAB5927493C7817A3ACA600E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:40 +0000
Manifest this update: Sun 29 Mar 2026 06:00:40 +0000
Manifest next update: Mon 30 Mar 2026 06:00:40 +0000
Files and hashes: 1: JBraeIgnuA6e6r7UQt_AjcfpK9E.roa (hash: tQM9C7OHo0XqPssxXUnuLcGysh5HiluPj8tqyjMnFVk=)
2: qQLv7uOVYz32Fa-HCYFsduryaUY.roa (hash: msrPJ+vS8iPsGg0xQfm9cnyh8JOxajlO3J5ownd6l7I=)
3: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: PfgqL8/PtadJsIfzN0Sc70BWwf5O3fJ90iMVMHHLhFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:21:f2:ca:b5:92:74:93:c7:81:7a:3a:ca:60:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Mar 29 06:00:40 2026 GMT
Not After : Mar 30 06:00:40 2026 GMT
Subject: CN=73dc6889a5e39942edf101fed4e187f2cbfb5695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:ff:55:de:ba:38:f9:3b:d9:a3:76:c6:d1:
2e:7c:a6:c3:aa:d1:85:4c:78:18:07:58:40:72:61:
13:e3:ed:52:66:da:da:c7:94:82:a0:1a:bf:49:5d:
76:36:da:8d:14:aa:14:fb:6b:b7:df:5b:3d:78:5c:
ce:97:43:9f:87:ee:14:82:bf:7e:01:51:92:47:f0:
37:64:5f:ab:47:66:c7:77:28:34:fe:ac:40:7a:31:
17:93:bc:60:2d:b5:c7:a1:f0:15:da:33:dd:be:32:
9b:14:91:42:eb:3d:07:82:b8:58:b0:d8:e6:33:d6:
6a:2b:00:a7:5b:6b:14:5c:72:c2:18:55:5f:2d:77:
57:b3:f8:8e:2f:fe:0d:0f:5e:03:a8:60:ed:dd:cd:
0f:ee:eb:18:34:58:86:e7:01:e1:c6:35:d1:76:1d:
84:e4:a0:8c:74:0f:c1:f5:02:18:1e:49:19:b2:c9:
e4:dc:a2:18:9c:2d:92:eb:60:90:1a:5b:ab:2c:61:
a3:6f:36:a6:97:0f:7e:e3:74:c8:38:66:66:08:69:
2a:ca:be:91:ae:dd:52:8d:d4:5c:af:24:82:2f:37:
70:19:cd:20:ed:03:59:7c:1b:ed:8d:df:7e:da:5a:
14:09:fc:8c:a0:35:4d:b1:ca:0e:94:31:98:32:7c:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DC:68:89:A5:E3:99:42:ED:F1:01:FE:D4:E1:87:F2:CB:FB:56:95
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:70:b1:ce:2e:12:af:60:0e:55:78:ce:a9:b5:8c:a0:33:f9:
6f:e5:04:23:3a:a3:c9:8e:83:59:e3:e8:ef:c1:f7:d3:1d:05:
46:b0:4d:02:55:65:f3:3d:bd:ef:e3:64:aa:dd:9d:6b:94:28:
9a:09:1b:28:8d:d2:36:27:5e:18:fe:4b:0e:22:58:d3:44:e8:
64:7c:3d:6f:db:b1:e4:bf:65:74:d8:9a:e6:ec:00:a4:0e:a5:
09:07:cb:cd:56:c7:7b:7f:d0:a6:2d:de:c7:9b:df:d4:a1:f1:
2a:7d:b5:30:a8:97:16:33:b7:b9:80:38:0e:40:0c:0f:34:1d:
9a:65:db:be:73:ce:b1:0e:21:49:fc:1a:f1:bf:18:fa:7b:a2:
8c:68:c1:35:be:63:12:ed:37:57:68:7b:8d:23:de:af:ec:fe:
56:a1:fa:6c:fe:82:ed:0b:f1:09:0b:c0:44:61:b0:a5:80:6f:
1f:e1:cb:d6:91:9c:a6:08:ba:cd:de:a2:29:40:81:02:67:c1:
b0:0d:7e:a6:55:ea:75:cf:4a:95:b6:b6:3e:8f:63:c6:b6:98:
40:df:af:3f:4e:1f:6e:5a:ce:d1:1a:6b:a7:5a:aa:10:ca:3c:
a4:b3:e1:b7:d4:8e:1d:ad:9d:e8:56:85:bd:51:b2:8f:b9:93:
5e:65:4e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:04 2026 by rpki-client