Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: I0AYLACULDPG03GnBWGt73XPR5xiLTudGNxvlcQk57o=
Subject key identifier: A2:1A:71:1D:5F:23:4D:A8:9A:9F:18:2E:70:2C:40:BA:ED:27:0C:1E
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 019CABD916C087C210E490E2A3620FF4FB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0D4C
Signing time: Mon 02 Mar 2026 00:00:56 +0000
Manifest this update: Mon 02 Mar 2026 00:00:56 +0000
Manifest next update: Tue 03 Mar 2026 00:00:56 +0000
Files and hashes: 1: uYLvyY2WLI_GT8ALtuBN7WJQxWc.roa (hash: 1aDErPT/oCtdeXIwL0ZqBC7wE1QZvB84rjebiPZPqXg=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: qSPqHQJbDs4K/CsJKC1n+bfsGpQ+KUnyvjl5p2npGho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:16:c0:87:c2:10:e4:90:e2:a3:62:0f:f4:fb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Mar 2 00:00:56 2026 GMT
Not After : Mar 3 00:00:56 2026 GMT
Subject: CN=a21a711d5f234da89a9f182e702c40baed270c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:53:d2:00:31:11:4b:03:49:bf:cd:7e:76:
52:7a:41:02:3d:89:af:d6:9d:f2:75:c8:1e:20:02:
9b:e7:52:0d:6a:c5:c5:e0:0e:f0:a2:11:74:6c:f7:
bb:ad:c2:92:43:08:6b:98:07:fd:6c:34:e6:1b:5f:
ba:99:ae:ba:79:21:63:fb:57:29:09:6e:5a:75:03:
72:24:7f:dc:9f:03:29:f6:5b:5f:af:72:c8:eb:e0:
f1:ab:d4:7f:97:f1:10:68:e3:03:6d:d8:cc:85:33:
e3:37:de:4e:06:c8:d3:19:1a:6f:9b:70:9d:71:74:
3d:5c:0d:42:68:2e:25:82:a7:35:54:be:9b:3f:20:
aa:c4:82:d2:41:86:99:be:75:8d:dd:49:1e:2e:c7:
3e:f3:89:02:c3:3f:31:ed:e9:fe:5f:32:78:8c:70:
f1:e5:45:c8:3d:7c:6a:e4:66:c9:b6:60:66:82:8f:
0c:3b:b5:b3:ff:de:f2:b3:43:d8:fb:d2:17:57:52:
27:f8:b5:2e:c5:6f:2f:08:ce:f2:b9:62:19:ea:b1:
c7:6d:05:66:df:a4:69:ed:14:40:27:80:dd:6a:31:
c4:33:4a:5b:55:5a:f1:4c:2a:46:ef:a3:eb:aa:bf:
16:b6:c9:5b:b4:48:56:11:ff:c2:39:1b:3e:7d:6e:
a9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1A:71:1D:5F:23:4D:A8:9A:9F:18:2E:70:2C:40:BA:ED:27:0C:1E
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:23:dd:2b:5d:6a:b1:a3:3f:6d:00:e5:5a:76:d4:fd:2c:67:
64:48:8d:ba:ea:c2:2a:0d:39:71:56:cc:9f:5c:0e:c8:04:86:
a8:ba:05:4c:f6:7e:03:b2:0e:97:42:cc:ca:99:10:ed:e0:10:
5e:d4:92:d9:8c:23:7f:f7:07:34:d1:96:84:72:52:4d:e6:9c:
8b:62:11:97:8b:6b:f9:b1:1c:36:aa:ff:1e:d9:e9:3f:0c:68:
b3:37:de:4d:6e:69:4b:ba:9e:b2:6c:87:e8:c2:5f:a7:9f:17:
e2:b4:1b:fa:e0:e6:56:a4:2b:ce:ee:a0:ac:6d:69:a0:0b:75:
9f:87:99:e9:d0:49:33:84:49:3b:8f:16:64:10:f0:bb:44:1b:
0e:46:0e:e4:bc:f7:0b:a1:81:6c:55:5f:7d:25:b0:31:4f:c7:
bd:41:06:88:ce:e2:9a:72:98:c3:0e:9e:b8:56:36:ed:8f:cd:
46:0f:0b:59:ea:13:4b:19:66:3e:ad:2d:f5:f4:70:27:f0:5e:
1d:4b:da:bb:7e:c1:a7:46:a8:8f:02:31:73:c7:8c:7a:05:47:
45:bc:f5:bb:4a:82:41:cc:86:d6:73:c2:4b:01:03:52:fa:67:
3e:18:9b:ba:86:6d:08:ea:d5:ab:be:98:0e:18:4d:87:2a:f7:
89:e0:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:47 2026 by rpki-client