Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: A6iKHx/Hvg3Wd1zBZifioALqbYir9qZhRWLbRkTpVGc=
Subject key identifier: 75:FC:02:9B:13:D5:F3:44:BD:9B:0C:57:C2:6B:C0:AF:84:F5:01:76
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 019D37C026CE5915A188C46E39053943EBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:32 +0000
Manifest this update: Sun 29 Mar 2026 04:00:32 +0000
Manifest next update: Mon 30 Mar 2026 04:00:32 +0000
Files and hashes: 1: AbBA99jT8eQOwVRDlfvpJvgpbPo.roa (hash: STn2llVbUbpZKFu8EoltWnBFEcnPCMGc/9TugXrP4cw=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: Q4t2Px50a9sgtByyxb8PbZNp5gVL4a2T4Xoll/HmNK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:26:ce:59:15:a1:88:c4:6e:39:05:39:43:eb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Mar 29 04:00:32 2026 GMT
Not After : Mar 30 04:00:32 2026 GMT
Subject: CN=75fc029b13d5f344bd9b0c57c26bc0af84f50176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:80:2e:fa:6b:b8:9f:30:15:38:4a:2f:8a:a3:
a4:1a:61:c2:b5:7e:44:bf:e0:99:cd:57:70:c1:8a:
47:10:d6:a1:f2:3f:52:93:ab:6d:0a:8c:62:1d:47:
14:a8:03:84:c5:3a:00:5f:22:5b:02:63:95:16:4a:
39:eb:88:05:f9:a6:59:6b:f9:08:fc:1f:0b:a9:24:
75:a0:22:49:34:89:3e:be:79:95:a2:97:56:4f:df:
86:83:ee:7e:73:25:62:b1:d7:9c:1c:a8:c9:2b:bf:
c4:5b:6e:e0:cb:05:5d:a3:18:07:c6:3f:dc:c6:7d:
7e:22:13:10:43:61:7b:ef:9f:9d:82:63:6e:bf:a6:
cd:22:85:b4:bb:a2:f7:c6:be:b9:5f:c7:68:8c:a6:
17:1a:c5:a5:be:67:e4:c8:07:f0:09:4d:84:9f:14:
54:f0:18:21:f8:18:15:e4:b4:d3:bd:eb:ef:52:61:
8a:b1:a7:d7:33:6a:44:5c:3a:f3:eb:58:01:03:9e:
0c:97:d2:36:ac:47:0a:3c:a3:41:6b:5e:98:61:de:
37:45:dd:e6:63:a0:5e:5d:fd:7f:f2:7a:b4:e7:2c:
77:18:6c:36:34:36:46:40:91:22:d1:e6:33:69:00:
44:db:64:70:97:3b:70:37:0a:5f:79:7f:45:fe:81:
7c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FC:02:9B:13:D5:F3:44:BD:9B:0C:57:C2:6B:C0:AF:84:F5:01:76
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0f:b2:43:3c:3e:fb:40:3b:47:93:c4:7e:d2:f4:58:22:89:
c4:7f:35:d2:64:d5:88:99:3c:cd:41:3d:af:58:ac:79:b7:b1:
e7:e8:38:8f:2e:9d:da:3a:f9:fe:df:8b:d8:5e:68:5d:b4:9f:
a6:82:92:f1:79:9d:61:ac:14:3f:12:bb:fd:34:77:96:95:04:
a5:3c:b4:76:84:ed:77:c5:09:dc:8f:99:a5:89:96:6a:f9:a9:
ce:b6:99:8d:4d:38:e8:72:ac:1f:fb:2f:68:0c:bb:a2:49:c2:
21:48:48:41:d3:fa:65:bb:c2:48:91:12:be:85:e3:af:c9:86:
c4:38:02:e4:15:6a:f8:f1:51:af:32:38:4b:f9:1d:97:73:fa:
1e:b8:46:cb:18:ea:1c:03:00:53:8c:22:75:26:71:35:b8:92:
41:ac:8a:07:ba:35:d0:e7:01:84:b1:91:5c:ea:38:d8:43:aa:
b3:8f:a6:b8:53:30:b3:38:d8:ca:ec:4a:48:a6:18:f9:19:fe:
ee:90:e1:64:77:ee:7f:d5:f9:86:31:00:9a:18:d9:59:4b:ca:
0f:aa:af:be:3d:87:90:4b:13:56:33:95:50:a5:81:2f:29:21:
8d:82:53:2a:d3:2d:d7:55:c1:7e:9e:cf:b7:72:5f:25:4b:30:
93:d1:9e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:58 2026 by rpki-client