Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier: e9vSnH+t1hsdNPTiOoBDGztx4M3D6sWPyPEj+aNJ0u4=
Subject key identifier: A2:90:A1:86:1C:A1:FC:C1:7C:68:02:7F:20:58:87:39:D6:CA:7B:8B
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial: 019D9AE2F85AFDA93F51B66D5139B00AB613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number: 0BCB
Signing time: Fri 17 Apr 2026 10:00:59 +0000
Manifest this update: Fri 17 Apr 2026 10:00:59 +0000
Manifest next update: Sat 18 Apr 2026 10:00:59 +0000
Files and hashes: 1: IggoS081L9PfSnoANLO8UPkw_zo.roa (hash: RstMLmB9/U68WoUS3YJFOjuTsGp4LpQVXF1KSqQUnnk=)
2: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: z947zg0Ul10wkjl6smJ/VvF8LokT4zBkE4lJLVJyG7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:f8:5a:fd:a9:3f:51:b6:6d:51:39:b0:0a:b6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
Validity
Not Before: Apr 17 10:00:59 2026 GMT
Not After : Apr 18 10:00:59 2026 GMT
Subject: CN=a290a1861ca1fcc17c68027f20588739d6ca7b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b6:bc:29:cd:90:1a:d9:53:34:7b:59:d4:f0:
c1:07:38:14:c9:e2:da:49:65:72:12:31:be:c0:ee:
12:18:8b:de:e5:3b:fe:eb:26:d1:1d:67:00:6c:46:
c6:2a:d0:4b:75:7b:0a:61:40:8d:f0:20:d3:31:d7:
a3:9e:0b:6e:a6:f4:bb:85:37:8d:63:35:02:58:4c:
5f:b6:6a:84:2b:3d:d0:22:8f:93:9d:f2:bb:db:f3:
58:80:4f:4a:64:ec:f1:59:06:d8:22:8d:9e:c9:d4:
1b:c0:42:83:e7:26:1e:55:0d:92:79:3a:8d:c1:8a:
b3:51:f3:e4:db:8d:8c:90:52:aa:11:09:61:c2:6f:
50:fa:f8:af:bc:f8:ad:0d:1b:ee:60:04:f5:da:7a:
23:2e:fb:77:c4:6d:12:df:15:85:e1:45:d1:06:dc:
2c:2c:b5:57:09:c1:90:6d:91:fa:67:26:81:7b:32:
d6:29:50:1a:fb:41:a9:8b:13:1e:c2:13:0c:07:f5:
b1:48:ac:d5:2f:ea:d5:a3:60:3c:e9:24:4d:1f:db:
aa:8f:c2:5a:b9:3f:b0:ab:09:7d:c4:d9:e3:ed:49:
75:02:4d:4a:81:d7:2b:e3:f9:94:5f:35:c1:5d:f7:
cb:38:85:d3:55:53:26:48:fc:e1:5a:ff:49:46:7a:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:90:A1:86:1C:A1:FC:C1:7C:68:02:7F:20:58:87:39:D6:CA:7B:8B
X509v3 Authority Key Identifier:
keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:15:34:d4:6f:03:be:21:7f:6d:e6:17:14:fe:15:14:58:61:
6e:66:f0:b4:4a:7f:fb:76:1e:36:e8:db:0a:70:7d:de:09:11:
10:5a:a1:f1:eb:6b:34:a6:01:a6:49:68:63:8a:c6:3d:10:38:
14:36:de:a4:8f:a4:ea:b3:01:7c:e9:76:7c:56:6b:74:4c:cd:
e7:c9:94:87:3b:54:1a:db:09:a2:be:60:8e:f2:13:bc:d6:00:
7b:46:29:c9:c7:8b:da:9f:16:ca:59:03:08:38:41:da:c1:77:
44:33:9f:13:84:e2:18:48:d7:7f:93:1a:f3:59:4c:b7:a6:0c:
9d:03:32:e7:16:e1:de:ff:81:f3:e0:90:55:a3:19:f7:fd:a7:
10:59:a3:1e:87:51:b6:6e:a4:95:96:eb:c0:4e:f9:68:ea:5e:
02:79:9d:97:03:86:12:35:9a:b6:6b:8b:a0:d2:97:aa:23:16:
98:a6:94:e2:9b:89:4d:f1:d7:40:94:d6:31:f1:75:62:71:ff:
45:48:f6:e7:08:24:ea:78:1a:90:97:53:9c:32:af:fe:d5:d6:
03:c1:44:d2:69:75:2f:df:4a:9e:44:76:40:a0:8f:06:a7:d3:
26:5b:20:d2:26:86:2c:dd:64:e2:1a:9a:3c:b1:8c:93:80:a5:
38:8b:56:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:40 2026 by rpki-client