Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier: JQ+04d+BAn28KrjghAwqRQfOB4zfPRi1AcSU+Ul59Sw=
Subject key identifier: 95:83:34:8C:B3:99:F3:6C:76:1B:A2:69:09:4B:0D:0F:76:96:47:B4
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 019DA90C17CDF22920CA4130EF2C67BAAD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number: 03D4
Signing time: Mon 20 Apr 2026 04:00:35 +0000
Manifest this update: Mon 20 Apr 2026 04:00:35 +0000
Manifest next update: Tue 21 Apr 2026 04:00:35 +0000
Files and hashes: 1: IIq-xe4pmbRC1mfUfGo67qCK0IM.roa (hash: XA0vZ02Oqn6urExP7O2u8Wij3b8jlF+3XNVGIv13wXQ=)
2: djmrHEf6AOnUXH6D3j-dskP0Zmg.roa (hash: U3bCf9w7k40+ELLZB1Hdgqa19bOjzOjKMfxiZiMzy5I=)
3: gnLcldm5nEk7VUfZ3ZCZ9CuTP_s.roa (hash: 9M0Ppv6WalIMgDZY/MAuUrb6XlVw4bEOTKI1qKmwlD4=)
4: vKRw2HUypzI_fLwgDuDJAjGJY-Q.roa (hash: kUjanpYMsskZ8DJFrlHn+4ejpbBtE2N86bbPjfXmLEs=)
5: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: ZetwDKAi8kx4te/bVCJCwMXit/+Jlg8ITN7R3FvFWRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:0c:17:cd:f2:29:20:ca:41:30:ef:2c:67:ba:ad:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Apr 20 04:00:35 2026 GMT
Not After : Apr 21 04:00:35 2026 GMT
Subject: CN=9583348cb399f36c761ba269094b0d0f769647b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:74:62:a5:7c:50:f1:be:b4:33:b9:bd:a6:
12:cc:71:b8:68:ec:aa:26:48:5a:55:fe:17:8d:41:
49:b6:d6:52:c9:98:ff:82:d6:4f:0b:d4:79:c2:83:
d1:ee:d1:57:81:53:24:bc:b1:3b:21:b6:6b:d2:ee:
e4:18:fb:f3:17:8f:92:fb:02:20:26:78:8e:ce:1e:
0e:71:b0:d7:b3:c4:2d:f4:a8:07:c9:9e:41:d0:83:
c1:29:d4:10:23:42:98:34:ec:ac:4d:b5:9a:63:ee:
6b:94:28:ca:b0:e0:d6:b5:7b:d0:03:90:f4:ab:c0:
e1:c0:7e:b2:cc:ca:15:84:9d:dc:44:a5:0f:cc:a9:
ee:99:f7:f5:92:2e:1e:ec:8b:7a:21:4f:fc:4b:ec:
db:c6:fc:4f:fd:8a:a4:36:fa:3a:6e:78:aa:6f:61:
3a:1e:95:f2:14:cc:1d:bb:7b:ec:43:ee:ce:27:4b:
4e:d7:ba:88:43:70:dd:ab:29:d1:a6:f9:f7:c5:06:
6b:3f:2b:cf:ac:4c:b3:5e:82:60:21:e6:2b:5e:94:
e8:7c:b1:1b:86:14:78:40:b9:29:c8:19:eb:83:f6:
f3:4e:9e:81:8a:22:af:d9:ad:ac:23:35:f7:2a:7d:
01:01:eb:eb:8f:ea:de:07:76:5f:46:b3:e5:5d:26:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:83:34:8C:B3:99:F3:6C:76:1B:A2:69:09:4B:0D:0F:76:96:47:B4
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1e:77:5f:fe:04:2d:29:fb:d4:de:e9:c3:a3:d2:87:1d:12:
c7:a0:11:64:78:e8:04:1b:24:c0:0f:fc:46:b1:9e:a0:37:d7:
54:8f:ef:da:90:fa:9f:90:d9:a7:8b:04:67:28:db:c4:1b:6d:
2c:76:04:6e:81:14:09:aa:dc:6e:5b:1d:11:a2:95:95:ea:fe:
cc:25:35:30:ae:f3:dd:5e:3f:be:9b:23:f1:30:2f:5d:13:50:
32:c1:24:1e:ee:92:f9:88:e0:c1:eb:dd:7a:00:10:9e:20:90:
98:77:ff:0e:fb:7f:f6:8c:8b:a0:72:71:bc:25:af:89:d0:91:
ba:e6:74:4c:9c:25:d9:9e:6d:6f:71:67:73:38:ca:32:70:b7:
90:51:a4:79:90:9b:79:80:50:fc:ef:a9:96:ac:6b:87:c0:aa:
d3:cc:4b:74:43:4f:12:54:06:4e:cb:fa:96:f0:be:89:ea:46:
10:6d:2b:54:ee:f8:90:ff:51:a7:10:ce:50:3d:ad:59:f4:d5:
72:33:be:c3:e4:af:e1:0f:ca:fb:ce:2b:43:3f:39:e7:28:84:
be:d9:b8:b5:14:4e:c1:84:5c:12:69:96:93:0b:dc:ae:df:f8:
b9:3a:b9:63:d9:d0:ce:f8:e7:cd:1c:6a:e2:41:ca:45:ed:92:
35:ce:5f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:46:15 2026 by rpki-client