Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
File: ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json)
Hash identifier: eKts59l2d5JDmVMc9KXnvcg6j5NBnGFRXrlTLhLDXKU=
Subject key identifier: 48:B4:41:78:CD:32:20:9F:C2:9E:2E:C2:5E:CA:75:0E:7D:C4:0B:15
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 019CAEA2C15B52AAE75F47D900F71F0DBA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 13:00:27 +0000
Manifest this update: Mon 02 Mar 2026 13:00:27 +0000
Manifest next update: Tue 03 Mar 2026 13:00:27 +0000
Files and hashes: 1: Tm9YQPK-QIZxd2ETnOjMjlrf5iE.roa (hash: whGszraZOmhpbIRFR+/A2z2SahEUdOmazsccBDJL8i4=)
2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: f9LWrXe+JJS5L9hR6wTh1vyfDaM0u/7zDPT2zcFJSTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:c1:5b:52:aa:e7:5f:47:d9:00:f7:1f:0d:ba:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: Mar 2 13:00:27 2026 GMT
Not After : Mar 3 13:00:27 2026 GMT
Subject: CN=48b44178cd32209fc29e2ec25eca750e7dc40b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:81:87:b1:75:ce:78:5a:1a:e4:7d:0b:18:8b:
9b:75:96:63:6b:c3:77:f0:30:b1:38:0b:2a:0d:a2:
46:44:2d:b4:4e:18:4a:8c:40:9c:d9:ae:67:ce:0d:
eb:18:bb:52:97:e3:93:a1:e0:df:f9:d8:66:eb:61:
0d:55:0e:b1:f2:18:29:4a:92:1f:c4:63:40:78:12:
2a:52:7b:3d:f7:5d:8c:7c:a8:8d:70:70:2e:f0:f7:
f7:90:52:a6:63:66:89:57:75:46:29:02:88:56:50:
a6:8c:57:c5:5b:0c:32:d0:26:29:21:b5:df:48:6a:
76:94:28:45:1b:5e:c2:2f:93:ce:9e:d6:8d:ac:52:
cc:85:09:91:b2:61:77:29:8b:99:a4:e4:f0:73:b6:
e6:b9:de:49:5c:ed:fd:8d:8a:eb:c3:18:a6:88:2d:
2e:57:4c:af:25:0e:6b:1c:5b:65:da:d6:4f:ab:41:
8c:63:38:d3:90:59:a6:f5:ce:84:3f:8a:ea:81:9a:
46:60:7b:2f:8b:68:b1:d3:17:1c:34:81:c6:82:92:
36:d1:35:86:3e:bd:90:fd:5a:36:22:ef:7d:6c:b2:
e8:7f:32:a3:5f:43:22:eb:ee:40:96:45:45:63:0c:
9d:49:41:bc:ca:b3:7d:df:89:a4:ee:1f:ea:70:73:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B4:41:78:CD:32:20:9F:C2:9E:2E:C2:5E:CA:75:0E:7D:C4:0B:15
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a7:3d:7f:60:c0:dc:2d:31:c1:61:6a:5e:de:ba:cf:89:3f:
82:6b:d0:4a:66:5a:d6:ab:eb:00:92:b6:ab:55:70:c1:64:a1:
0e:9d:82:6f:61:76:3a:41:91:8d:ce:f1:d7:2f:e1:2f:95:ce:
61:6c:8f:97:6d:a2:cf:83:71:61:2f:71:a0:e0:2c:2f:d7:97:
6d:5a:3c:ed:b0:5c:78:d5:7c:8d:1d:79:3b:b7:4e:37:ae:2d:
33:c0:c2:e2:55:10:4d:8c:c3:20:75:30:aa:f5:2e:a8:27:f5:
f7:d8:51:34:49:4d:fb:e0:e3:3f:ac:69:94:92:e7:00:cf:d7:
3f:0b:69:a2:27:2b:54:45:b7:db:d0:35:e0:90:7d:86:72:12:
ec:83:08:13:4b:f0:9c:d3:2d:f1:ae:a2:75:48:8f:33:f7:f2:
6e:00:1e:5c:aa:f1:9a:5e:d0:0d:93:fa:02:ea:18:4b:39:69:
ce:55:14:2a:19:3f:cf:3c:93:97:b7:93:24:09:ca:10:26:30:
f0:15:8e:d6:6e:48:6f:51:38:d5:de:42:f5:b4:ab:8e:9d:aa:
88:5d:8d:6b:45:4e:6e:42:49:83:a7:c6:a5:63:98:10:99:28:
c5:6c:3b:38:7d:2c:c0:64:4b:f5:1f:10:35:76:a6:83:62:82:
c8:27:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:28 2026 by rpki-client