Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier: N3qfH0cpwRJPrRt5MC+YFxwiHAsgaNJ91vOINj9sp5Y=
Subject key identifier: 59:44:BB:85:F1:E9:E7:E4:0E:72:1E:04:59:E6:8D:CD:9B:7D:56:74
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 019D37C07EA28F9F4ECEB759D1D302F78163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number: 14C4
Signing time: Sun 29 Mar 2026 04:00:55 +0000
Manifest this update: Sun 29 Mar 2026 04:00:55 +0000
Manifest next update: Mon 30 Mar 2026 04:00:55 +0000
Files and hashes: 1: 9KLhgHdDNsZBBUFEIyheUzLt-c0.roa (hash: c+1HpuSdzLNeAztTtHz4t/e6e0WWME4OFHOVd3MSwEs=)
2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: 5o3xKxi+oDDQFVbJBRAGVdn5Q8ZP5hNP4XRGzaONXRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7e:a2:8f:9f:4e:ce:b7:59:d1:d3:02:f7:81:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Mar 29 04:00:55 2026 GMT
Not After : Mar 30 04:00:55 2026 GMT
Subject: CN=5944bb85f1e9e7e40e721e0459e68dcd9b7d5674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:0c:e7:ad:ab:d4:17:3a:3f:7c:78:57:cf:
24:53:d8:39:5b:a5:26:c3:28:92:7e:0d:9a:5c:e5:
c3:09:d1:b1:08:7d:cb:aa:44:8f:a1:d7:98:ca:9e:
b4:d5:5b:3b:6d:bf:4f:35:1f:7e:2d:de:4e:52:83:
52:06:48:7d:01:23:8c:f9:21:a2:0c:f0:59:09:4c:
38:e5:a9:2a:00:0a:80:96:47:87:50:ef:f3:86:4d:
66:16:66:35:4d:df:8a:6b:ff:90:ef:26:14:1f:d4:
f9:43:79:63:d8:78:56:3d:23:72:82:8d:c7:60:3b:
dd:10:f4:61:5a:52:d6:32:7f:cf:70:61:fc:70:d8:
38:1b:73:c3:88:0e:e1:50:69:79:62:11:ad:a7:ac:
47:0b:2f:4a:f0:22:cd:79:15:4b:bf:f1:fb:bb:e6:
46:d2:23:0a:24:cc:03:eb:a2:c8:9b:32:cd:6f:ad:
79:18:36:74:36:2c:97:b9:04:6b:aa:a7:e2:e2:60:
f0:a1:78:0a:d9:fa:02:96:36:e7:8a:a6:62:68:72:
d2:d4:2f:0b:d8:1b:cb:76:fb:e5:f8:2a:99:ad:66:
66:48:3c:f1:3e:d4:d4:c3:c3:1f:73:0c:ed:f5:e5:
4c:ed:19:23:ea:f4:ee:84:30:44:b7:91:65:38:a9:
9a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:44:BB:85:F1:E9:E7:E4:0E:72:1E:04:59:E6:8D:CD:9B:7D:56:74
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:84:10:ee:51:30:b4:cd:cc:eb:54:45:59:9c:d9:69:d4:05:
5e:fe:ce:ef:de:cf:1f:cc:91:aa:34:95:45:cc:ab:31:e5:a7:
c1:cc:f8:85:82:29:1b:f8:d8:18:4c:55:fe:5e:4b:91:b0:0c:
03:33:7a:91:b4:67:0f:50:4c:f6:dd:46:e9:8a:f0:80:ad:43:
3b:22:20:02:ec:05:55:8c:69:1b:6c:86:e9:ea:03:ea:45:95:
a2:33:82:e0:f0:be:5b:44:b0:de:12:2a:63:98:a4:f0:39:d7:
ea:81:f4:4e:7e:dc:d4:55:9d:b4:7d:cf:15:63:ed:8d:8a:de:
a7:8d:d1:4b:a5:80:19:87:9a:2b:69:e5:fa:84:13:58:c3:74:
ec:c7:43:c4:7a:3d:51:5b:76:88:60:80:b9:f7:e5:d3:d7:97:
20:47:58:47:ff:28:60:9c:08:25:d3:08:0b:ef:c2:63:3b:7b:
4f:e6:7e:0f:cc:be:5d:e1:3b:90:9c:fe:30:dc:2d:be:cd:24:
9c:ca:eb:cf:a0:91:28:21:ed:9d:2b:3d:a4:a5:97:c2:8e:3c:
78:8f:f9:c9:b8:90:0c:e0:5e:12:69:0f:64:49:32:36:a4:55:
ca:e2:47:12:90:77:05:32:eb:7f:01:2d:3b:aa:35:3e:12:da:
af:96:6b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:58 2026 by rpki-client