Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: KwUfNnuH8Uoxj11XrAwtQEFoaLD2Et2eK6kNGaI3sho=
Subject key identifier: 9C:94:EE:98:DE:51:15:6F:78:83:94:52:18:F5:6D:5A:A3:22:E5:D6
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 019D984FCED3F730A6ABF9D123CB1BE1F2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0BA0
Signing time: Thu 16 Apr 2026 22:01:00 +0000
Manifest this update: Thu 16 Apr 2026 22:01:00 +0000
Manifest next update: Fri 17 Apr 2026 22:01:00 +0000
Files and hashes: 1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: dLbiy5m/uBWz7/FeB1Bn8oAuArdfLimiirip5Uz62BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ce:d3:f7:30:a6:ab:f9:d1:23:cb:1b:e1:f2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Apr 16 22:01:00 2026 GMT
Not After : Apr 17 22:01:00 2026 GMT
Subject: CN=9c94ee98de51156f7883945218f56d5aa322e5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:25:22:8d:b1:a1:61:e8:a2:5e:0a:64:7a:e6:
f7:a5:1e:a0:d5:68:c0:8d:07:25:72:b9:58:1a:bf:
30:08:2b:7d:da:ba:6b:c8:a7:4b:87:b7:a0:2e:c4:
b2:6e:c5:07:9a:8c:1a:bb:d4:b1:ce:e3:13:a6:ee:
17:95:89:b1:9f:d9:53:92:f8:01:f4:96:f3:f9:68:
28:0c:4d:37:01:87:90:b5:84:82:ff:32:35:17:1d:
c8:6d:17:e5:b6:f8:ee:f4:f8:b0:ab:a3:33:65:29:
61:c3:ae:a9:7e:ad:5f:92:9f:2d:0c:52:a9:ad:c0:
44:6b:fd:c1:a9:dc:d1:6b:77:54:0b:e7:9b:f3:e8:
c8:f7:09:7e:dc:a8:44:3a:17:a7:3a:36:ab:47:51:
fe:29:f6:f5:88:04:6f:e3:13:e5:5e:15:3c:f7:5f:
76:55:44:f6:24:13:9b:1e:f5:06:7c:6e:de:29:3a:
81:6e:23:b7:64:0f:31:6f:ef:c7:87:00:fd:97:4f:
67:db:4b:b6:a6:14:55:47:72:e4:20:2c:0a:4a:2b:
a3:00:19:31:7c:00:6d:25:a0:d4:a3:e7:63:8f:75:
0d:f2:2e:b3:b7:dc:04:a6:b2:34:95:6f:13:15:96:
9f:f4:57:71:dd:19:1c:72:ea:10:8b:2b:43:2a:9f:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:EE:98:DE:51:15:6F:78:83:94:52:18:F5:6D:5A:A3:22:E5:D6
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c8:e3:69:ef:0b:ad:73:62:18:a2:a6:a1:19:fa:69:17:aa:
22:7a:8f:04:e1:64:d1:6c:50:64:30:00:c1:4c:04:67:5d:24:
c4:28:d8:b7:68:2e:0e:91:41:0b:74:a8:7f:fb:f5:d7:d1:b3:
77:66:67:d3:c9:e7:d1:d2:39:b1:08:86:45:0f:b1:69:31:29:
e3:8d:27:57:80:c1:41:08:38:71:0d:54:e4:30:d1:e5:ef:4f:
18:9b:a7:69:1c:02:42:76:36:94:56:f4:1a:37:a9:aa:bf:9d:
de:27:12:0b:c4:9e:e7:c4:db:c2:bc:e3:0b:cf:7d:56:fe:dd:
94:40:67:13:41:80:ae:15:56:99:e1:28:9e:66:e9:01:fd:89:
d4:60:8a:d3:96:d4:ab:66:51:39:4f:8d:db:e9:44:80:1d:8a:
21:ba:05:15:40:ff:39:15:92:b9:33:4b:88:f1:fe:ab:eb:14:
9a:49:10:91:c9:40:0b:06:32:7d:75:a4:a4:8b:ea:aa:e3:3f:
51:88:05:a9:6f:7e:6e:c8:1d:02:5b:9d:4f:f9:56:b6:13:7c:
f6:e7:ef:a2:13:62:7f:e6:fc:5d:99:ee:5e:4a:d4:45:b6:0b:
c3:ff:1c:f6:e6:23:7d:bd:21:d3:94:ea:8a:22:be:28:e4:8a:
0a:af:aa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:07 2026 by rpki-client