Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: 9kZretuhPsVwbOYNJABa+vID4ncHBIrG7QVV0TQgYBY=
Subject key identifier: 55:B0:F1:FD:A7:CA:46:70:55:AA:18:DB:2F:6F:AD:1E:1B:EC:BF:6D
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019CAC103C19A4ABFAA3DF69F3CDBF87BB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0F34
Signing time: Mon 02 Mar 2026 01:01:10 +0000
Manifest this update: Mon 02 Mar 2026 01:01:10 +0000
Manifest next update: Tue 03 Mar 2026 01:01:10 +0000
Files and hashes: 1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: SGf1BGC1rk9OLKolZHJnPI25767Kc++5KqhV0idGFW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3c:19:a4:ab:fa:a3:df:69:f3:cd:bf:87:bb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Mar 2 01:01:10 2026 GMT
Not After : Mar 3 01:01:10 2026 GMT
Subject: CN=55b0f1fda7ca467055aa18db2f6fad1e1becbf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:b7:3c:bd:4e:d4:26:ee:13:b7:5b:0a:9d:
4b:dd:39:72:01:88:e0:5e:ac:71:cc:bb:09:d5:b1:
d2:d4:6c:5f:32:3d:bc:47:f6:08:c0:85:53:0f:3d:
f1:09:15:ff:68:a1:ec:0e:9c:f0:99:8f:a7:fc:a7:
23:2f:98:4a:72:1c:0d:c5:24:24:1c:b8:8d:1a:9f:
17:c9:2d:22:88:d7:63:87:6e:14:69:a2:9a:8d:e0:
b7:e9:00:b6:98:b5:07:42:c0:69:11:78:a5:57:5a:
f7:00:b3:a2:2f:58:66:44:db:66:1a:8e:60:f3:b6:
7c:c4:8b:cd:98:c8:bc:9c:83:b3:f7:a1:ac:6e:28:
12:0d:8c:7b:14:59:04:bc:28:ec:a4:69:4a:60:39:
c2:37:51:49:78:16:4e:0e:c8:60:71:26:8b:79:d8:
79:92:ae:0e:0a:76:69:4f:c7:79:9f:dd:53:38:25:
a1:14:6e:c3:d2:e8:01:fd:04:26:db:a1:e4:4c:73:
36:b0:4e:34:88:68:69:c0:80:50:b6:7e:8b:2b:0c:
6d:a7:05:52:bf:96:51:4b:d4:1b:15:91:c8:7b:8a:
9f:42:a4:a2:04:6f:62:05:84:f6:81:25:23:ef:38:
c4:d9:eb:bc:79:01:33:36:d6:3d:c9:1b:9e:df:cd:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B0:F1:FD:A7:CA:46:70:55:AA:18:DB:2F:6F:AD:1E:1B:EC:BF:6D
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8b:34:d9:19:1e:b0:e5:88:bb:89:63:1f:62:aa:6a:8d:5b:
3d:36:2d:96:b2:29:3f:9c:6a:e5:da:f9:fd:92:31:21:fe:f3:
c0:ef:5c:f1:23:3b:f8:0e:52:03:1c:b2:ba:80:50:79:0e:3e:
75:6e:84:20:16:e5:17:cd:fa:98:28:0d:c7:b3:28:2c:41:36:
42:1e:88:93:b4:46:ac:52:f8:bc:a4:66:0a:81:ae:93:87:23:
60:6c:6e:a3:b2:c7:63:74:5c:70:f1:f7:d4:bc:c8:81:0b:c3:
c3:c0:d7:8e:90:84:25:1f:77:bc:47:bf:da:20:8e:52:ac:bc:
d1:e6:ed:d5:72:1e:d0:d9:37:50:16:0e:91:18:92:f7:c9:32:
31:78:81:83:d3:eb:f6:26:85:52:63:b6:a9:5a:af:2e:38:5c:
b2:c5:23:80:28:73:22:b6:0e:cb:c0:6d:51:e4:36:2e:41:50:
e9:ab:77:6f:51:2f:5e:08:7a:63:2a:a1:a8:24:2b:e1:57:69:
f6:5f:ef:cb:2e:0d:b2:31:bc:3d:56:23:30:93:f1:b2:e2:76:
d7:b8:e9:c7:b4:2b:fb:74:3d:d1:3c:63:56:a1:98:c6:e6:6b:
8a:32:80:c4:43:cf:80:38:ff:41:8d:24:eb:b5:d3:bf:e8:76:
42:f4:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:44 2026 by rpki-client