Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: 71IesIYTSYIc1MuAX6smgnviwUkDNOJrQy/bX6uZSN0=
Subject key identifier: 29:17:0A:2E:DF:48:75:86:EF:8D:87:15:56:5A:33:29:4E:D5:0E:6A
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 019DCF081516400B288A9612B3C24279F225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 15C5
Signing time: Mon 27 Apr 2026 13:01:46 +0000
Manifest this update: Mon 27 Apr 2026 13:01:46 +0000
Manifest next update: Tue 28 Apr 2026 13:01:46 +0000
Files and hashes: 1: _SwAckWBp8isMhZUKjw_8MX2PbQ.roa (hash: DdPCOva+CEkdSFj4rwktdG8ykIu5k66PhfcbhD6raBk=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: WK435+mrm5fs5jm7bpqCVOk6s1G4zi956Js3LGIQjiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:08:15:16:40:0b:28:8a:96:12:b3:c2:42:79:f2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Apr 27 13:01:46 2026 GMT
Not After : Apr 28 13:01:46 2026 GMT
Subject: CN=29170a2edf487586ef8d8715565a33294ed50e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:10:1a:e6:de:a0:34:b8:3f:c0:e0:f6:61:
d4:47:1a:ba:72:97:2e:33:97:3f:a4:ec:6e:88:03:
6d:af:db:b5:04:81:bd:ea:e9:59:5f:07:54:6f:66:
df:55:ce:af:eb:65:63:76:4e:f3:37:17:58:56:59:
3f:5c:06:cd:85:fa:cd:10:61:52:da:2e:a4:b7:03:
bc:c6:2c:3f:f4:ba:37:e3:ff:a3:ba:e1:0c:65:07:
b5:48:b0:1d:7d:8a:bf:5f:ed:30:cb:8e:f5:eb:3e:
fd:44:d9:5b:4c:01:97:89:55:37:aa:9e:fc:a1:69:
24:93:e6:0d:07:78:36:fa:6f:72:d1:3b:72:1a:20:
1d:bb:09:56:0f:53:df:cd:fb:3d:49:3b:60:fe:83:
87:49:04:68:06:ad:c4:34:b2:fc:3d:c1:1e:08:32:
dd:0e:17:ef:e4:8f:23:3f:d4:00:de:6d:a2:d8:68:
d2:f1:53:7b:69:72:54:5d:05:f1:72:d5:aa:00:40:
b3:d2:b1:7f:ad:d9:31:25:5b:31:6e:6d:5d:87:11:
06:9b:e7:56:ef:0d:d8:1d:3f:95:d1:74:d4:c9:64:
aa:0b:ca:eb:7d:fa:34:2d:85:fc:16:ae:66:8a:f3:
9d:c5:68:b2:d7:ee:ef:9a:50:f9:da:2b:93:90:ec:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:17:0A:2E:DF:48:75:86:EF:8D:87:15:56:5A:33:29:4E:D5:0E:6A
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:3f:05:b1:d2:55:54:67:d4:e5:ae:dd:45:df:50:cd:a7:13:
c0:cd:d1:a7:1b:44:04:13:39:63:25:6d:07:54:29:d4:47:87:
ce:80:38:be:79:35:53:3b:6a:3c:d4:0a:d7:c6:06:13:c7:6a:
73:09:8e:b9:7f:f9:74:42:f2:85:4a:23:df:bc:d3:02:7f:42:
eb:a7:4d:a2:57:00:81:d4:09:57:cc:54:cd:ac:fa:b2:4b:ef:
d0:f9:d4:f0:97:8a:a2:36:b2:95:4e:7e:82:ca:38:89:3a:0b:
f0:ef:ac:84:12:36:f7:01:73:97:08:72:01:c1:f6:3f:cb:89:
85:25:50:04:96:7f:6a:2f:09:fa:d7:5b:21:80:dd:05:4d:8d:
84:5d:6d:a6:93:2b:b5:93:eb:b2:2e:51:b1:13:4e:ba:71:f3:
59:c2:bb:a7:da:2a:95:ef:1a:0f:7b:2d:80:54:d1:ed:13:dd:
57:4e:74:2d:41:28:22:42:6b:90:bf:b8:17:7f:9e:da:11:fa:
99:79:f2:99:14:02:0e:2e:15:e7:54:c3:82:a6:0b:72:48:38:
7a:f8:66:3e:5a:76:d8:98:15:77:8f:be:cc:a3:e5:7f:c4:56:
ed:ba:a1:ea:9a:a5:a9:7c:84:12:1a:fa:2c:d5:c2:26:b0:27:
c7:aa:28:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:53:36 2026 by rpki-client