Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: OgnXc1uPXpXcoRysiZHy+NvUA5L2qyinEYuGqAGamQ4=
Subject key identifier: 68:5D:8A:74:FD:9E:7E:D1:EE:C7:58:51:AE:26:FA:59:00:E6:49:CB
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 019D984FEF2EFABCEC84B563B3C5CD8D897E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 093E
Signing time: Thu 16 Apr 2026 22:01:08 +0000
Manifest this update: Thu 16 Apr 2026 22:01:08 +0000
Manifest next update: Fri 17 Apr 2026 22:01:08 +0000
Files and hashes: 1: XQZYtmJX7BpNzPu03srU_4VYUsc.roa (hash: Bjg0iayeOq8sVWJ1lC2MT+jpchRq5ORWkMqvwpb8VDY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: 90L4H2Z49att2VsLrIW7Y6U1bVs8q2OMwo/oEwoqSgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ef:2e:fa:bc:ec:84:b5:63:b3:c5:cd:8d:89:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Apr 16 22:01:08 2026 GMT
Not After : Apr 17 22:01:08 2026 GMT
Subject: CN=685d8a74fd9e7ed1eec75851ae26fa5900e649cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:64:e7:30:ce:a1:98:44:b3:ed:b2:4f:fb:
fe:b4:94:83:7b:56:42:da:02:7e:81:2d:ed:39:a7:
c3:ff:1a:a0:b4:c7:68:24:40:e1:99:a5:ab:b8:5e:
bb:95:e4:c0:fd:d5:3a:8f:70:f6:00:27:85:2e:fe:
8b:a6:36:56:03:10:ad:f6:0d:52:e3:17:f7:55:e1:
9f:f3:4e:ba:80:0b:f7:81:01:09:ba:73:47:0f:cd:
f2:85:cd:91:cc:08:31:f5:92:4f:6c:ea:c1:23:41:
9b:78:e3:18:6e:5a:21:22:5d:52:ba:39:fb:74:b0:
7f:bf:45:d5:86:ff:9a:1f:d9:1d:07:fb:97:cc:ad:
cc:6a:be:9d:75:76:a4:42:98:30:13:77:a8:c5:92:
6c:8c:ab:9c:d4:31:29:73:fd:b2:de:dd:64:33:ba:
5a:42:08:a9:08:9f:47:bf:af:03:af:f5:d2:7c:ad:
18:4a:a9:e1:ac:df:ba:20:ab:92:c4:1a:bb:be:4a:
9a:11:f9:cb:6e:ae:57:10:d1:d9:6c:9a:70:d7:2a:
60:9f:c6:08:91:07:3d:25:bd:1c:c8:fa:a1:9d:f2:
b2:7a:d3:9a:e0:18:a8:e0:8e:d8:41:4e:53:b5:ea:
c5:ca:95:73:30:1f:3b:be:65:3a:50:b8:48:67:69:
50:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5D:8A:74:FD:9E:7E:D1:EE:C7:58:51:AE:26:FA:59:00:E6:49:CB
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1f:88:73:d2:0b:9a:d0:3b:08:4c:84:7e:4e:1c:ca:c6:f9:
7d:ae:ef:85:99:58:5b:88:68:d9:2f:19:3c:46:42:ca:9a:f5:
42:dd:e4:f9:4b:32:73:c9:33:f2:33:41:70:97:dc:17:40:07:
9b:35:86:79:bd:d8:eb:6e:09:8f:19:9a:74:a4:f5:ec:66:13:
d0:e7:c6:86:14:02:d9:08:5d:c8:a2:eb:f0:28:c0:86:9e:32:
84:97:0b:45:35:f5:10:e7:3d:6e:51:b6:37:5d:14:c4:b4:9d:
b4:d1:05:0d:72:60:78:3f:71:92:7b:fc:0b:24:ab:a8:18:67:
6f:c7:9b:7d:53:8f:b2:dd:1d:f0:00:12:28:a4:05:2d:5c:03:
58:88:22:55:12:1e:6c:5d:74:18:9f:04:8f:68:dc:65:88:75:
e6:b6:05:73:41:0b:c0:cf:ad:a2:24:f6:e8:09:d1:18:33:e1:
cf:6a:5c:2b:5e:ce:b0:e3:04:e0:aa:17:78:e7:d7:da:fc:69:
64:19:9a:2b:56:b7:c6:ef:76:8e:26:1a:39:67:09:ae:6d:83:
59:10:f0:19:34:6d:55:f7:ed:15:94:bb:79:31:2b:62:74:0c:
0c:ff:7c:19:ee:8d:24:44:59:23:00:aa:31:45:2d:52:ee:68:
97:68:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:47 2026 by rpki-client