Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: N33ARTEOgj/7wpMm8XpApFNIAE3wJFe4thgCy32RJGE=
Subject key identifier: 7F:A5:DD:28:DA:C5:BE:F0:F5:B4:B8:C3:67:01:09:69:28:A8:78:32
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 019D390A4DDABCA819795C8E36748CB0B78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 172B
Signing time: Sun 29 Mar 2026 10:01:09 +0000
Manifest this update: Sun 29 Mar 2026 10:01:09 +0000
Manifest next update: Mon 30 Mar 2026 10:01:09 +0000
Files and hashes: 1: 9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa (hash: DwCSayZkRcTecU+QYNWzkQO84K94CzpgnweIdh3T7XA=)
2: ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa (hash: SYbuwV9RF98H2wnwET3rqVG/OV1l8TgwPl32TdMZOp4=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: LJVgFmOTJSiM8SZsI9mH1BLBxr5R4kOwj2RtSOn6bPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4d:da:bc:a8:19:79:5c:8e:36:74:8c:b0:b7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Mar 29 10:01:09 2026 GMT
Not After : Mar 30 10:01:09 2026 GMT
Subject: CN=7fa5dd28dac5bef0f5b4b8c36701096928a87832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:97:73:54:8d:ca:f3:0e:df:61:2b:c7:27:
ec:81:a9:89:85:20:df:c2:03:d4:ce:f8:f6:3a:80:
34:9f:24:5a:d8:2e:92:41:e1:b1:e9:35:a1:cb:cd:
58:d3:30:6f:12:7c:86:8f:5e:d2:0e:fa:50:c7:36:
be:c1:75:a1:f5:82:18:13:cc:36:f7:f5:ba:17:5e:
36:83:9e:1e:eb:b9:b1:c0:80:c7:f0:0b:c6:0f:3e:
d0:91:d4:47:f2:d1:2e:43:61:8c:24:8e:b4:06:f9:
ea:df:07:26:06:e7:c5:e9:ec:7b:04:09:70:1f:09:
48:5c:c3:4e:35:20:55:20:1a:b9:b9:75:cb:ac:e9:
a0:fd:17:e9:af:9e:5d:0b:e5:ee:b6:5b:75:d0:f3:
0b:d5:2c:15:27:41:44:57:e3:92:13:0e:89:b5:9d:
5f:66:70:90:c6:3f:17:04:8c:a2:d8:0e:ff:8e:ed:
32:95:c8:a0:26:9d:1e:05:f3:af:04:a8:75:ec:8d:
c5:98:14:76:8e:88:c6:50:a7:5f:4d:90:66:ac:a2:
bd:a4:84:af:28:71:a7:88:25:f1:b7:65:06:c2:cc:
c1:2c:fb:55:ed:b6:80:8c:30:e2:f4:07:02:f5:70:
a6:3d:2e:87:22:3f:d6:1f:6b:d1:5f:64:a6:40:d1:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A5:DD:28:DA:C5:BE:F0:F5:B4:B8:C3:67:01:09:69:28:A8:78:32
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c6:f0:90:c2:2f:86:3c:6a:b7:42:0f:f5:37:13:7c:6d:fe:
04:e7:48:21:a7:b5:45:0a:de:ae:96:29:46:1d:d8:45:e6:bb:
fe:89:ad:f1:7c:05:7e:e8:69:b0:3c:27:29:e7:80:e7:10:ba:
2b:01:53:e6:6d:4b:50:5c:29:41:ad:73:fb:12:5b:84:4f:93:
52:c4:59:e8:c4:58:d3:51:2a:2d:82:e0:b9:46:af:bd:28:ef:
80:a7:32:eb:19:9f:0c:a4:6d:17:c6:5d:c1:73:3e:7f:55:e1:
3b:ba:51:a5:f5:4a:b0:93:14:c0:72:c1:f9:f4:13:b1:67:78:
87:77:52:e9:8c:6f:21:5f:dc:b0:ec:e1:b4:94:64:ef:79:e2:
b1:71:96:33:cc:5b:a5:3d:3d:4a:9e:f5:00:00:26:5f:49:fe:
a4:ed:8d:a3:59:b2:ea:bc:08:6c:95:bf:c1:4c:16:c7:70:75:
5f:47:86:f5:cf:bf:a1:8f:67:7c:76:33:eb:76:82:b1:96:ca:
0b:78:a6:c8:e4:ad:47:45:8a:1c:35:d6:b8:d7:2a:73:8d:63:
cc:3d:df:7a:8e:02:7b:5e:18:5d:53:a4:a6:df:97:46:36:ba:
86:b7:a5:0c:8d:b6:39:2c:0e:e6:ad:fc:c3:85:68:4b:4f:46:
bc:6a:73:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:45 2026 by rpki-client