Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: qp2eHd4sESNN5h40He+06FguGb1dMIP0KmS+T7ZLVpg=
Subject key identifier: E7:3B:5D:3D:D4:35:50:20:B9:4C:82:9D:BA:2E:11:88:C1:EA:7F:05
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 019D9962E7A45DFCECAEAB09BD0BE1E2CEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0DC7
Signing time: Fri 17 Apr 2026 03:01:28 +0000
Manifest this update: Fri 17 Apr 2026 03:01:28 +0000
Manifest next update: Sat 18 Apr 2026 03:01:28 +0000
Files and hashes: 1: uYLvyY2WLI_GT8ALtuBN7WJQxWc.roa (hash: 1aDErPT/oCtdeXIwL0ZqBC7wE1QZvB84rjebiPZPqXg=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: 3gXg7UkzUNFlY6UJAadHMGlITyMpuEyPLJkyUzWMtUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e7:a4:5d:fc:ec:ae:ab:09:bd:0b:e1:e2:ce:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Apr 17 03:01:28 2026 GMT
Not After : Apr 18 03:01:28 2026 GMT
Subject: CN=e73b5d3dd4355020b94c829dba2e1188c1ea7f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:d1:fd:0c:cf:73:99:08:2e:68:39:8b:43:
f7:60:68:60:c9:c7:a7:f5:75:44:67:e5:b7:4d:f4:
ef:f7:3b:8a:aa:ef:b2:65:3b:46:7a:99:00:69:28:
3b:90:8a:fb:e9:29:5d:e7:25:b3:74:4b:d7:b5:33:
61:8f:87:4b:a2:b3:c1:7a:a3:20:78:b8:97:e3:6f:
56:dd:ab:fb:14:d8:81:00:35:e2:47:30:4d:44:a9:
a1:e2:03:22:3e:f0:5a:a6:7e:c8:fc:81:e5:3b:bd:
6b:23:8c:6b:d0:af:81:b3:8e:c8:50:e5:53:c0:6c:
cb:ea:ad:1c:97:74:19:7e:05:1e:d1:7d:9f:c9:45:
c8:eb:9d:a3:f3:f3:ca:0b:65:17:f0:fc:ff:03:ca:
09:96:a0:de:9e:05:bf:a0:d7:65:e3:2a:af:c1:91:
26:63:38:f1:3d:ad:87:05:51:bf:cd:1a:a9:96:0b:
4d:b9:85:7d:65:29:a7:c8:61:3a:cd:d2:e4:d3:ee:
2b:83:9a:45:23:c6:95:ea:9f:1e:5e:f2:25:ab:e5:
04:17:e0:25:5e:fb:5e:6d:7d:ab:47:c7:27:81:c3:
6b:c7:b5:63:fa:d5:26:2a:93:a4:9f:fa:c4:c3:49:
52:99:cf:61:57:5a:67:ab:75:bd:bb:ac:65:23:ba:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3B:5D:3D:D4:35:50:20:B9:4C:82:9D:BA:2E:11:88:C1:EA:7F:05
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fc:f6:f0:97:75:9e:ac:4b:8e:ed:fb:b6:5c:c4:f1:2d:3e:
b5:0e:ac:15:b9:51:85:ee:be:6d:60:80:07:57:15:a0:48:8d:
b4:b3:5f:ca:f1:1d:90:07:a8:2e:b5:d4:b1:ba:9e:41:bc:12:
c6:72:a1:f2:19:03:82:0b:7b:4d:41:e6:5f:d3:29:d5:52:47:
0a:ed:7c:f6:83:92:73:eb:4b:47:98:e7:2e:d5:cf:96:c1:46:
15:6e:7f:12:5e:a3:0e:93:17:1f:c3:09:a9:5f:ea:f8:f6:65:
ba:76:5d:5a:1c:b9:91:77:54:5b:57:89:5e:a2:21:73:e5:e3:
56:da:45:68:65:06:87:66:8e:7b:0d:92:2e:48:2e:1c:99:74:
90:91:5a:0a:8e:3e:91:09:50:90:6b:f0:4f:4f:b2:f0:9b:95:
ce:24:3e:46:4e:d1:d0:01:d5:15:db:62:6c:2f:56:c2:5f:a9:
a0:ef:d9:c9:8b:1d:e8:5b:fe:c7:75:7e:ef:20:31:0f:a2:cb:
22:c0:86:ed:61:8f:7a:85:28:e4:46:44:52:1e:51:0b:f8:1f:
54:1e:f3:64:8f:49:1d:0f:e9:a8:f4:f4:ba:d9:f3:2a:c8:86:
95:6d:40:2e:be:27:1b:32:db:82:b1:e5:b9:95:2e:94:31:64:
97:43:da:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:15 2026 by rpki-client