Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
File: ySynGDiuM8zsxfEKtU7D_HG_u4I.mft (raw, json)
Hash identifier: +Eyjb216rxreDNXnCgrq5pCAjOlkw8a3467wsHFsvjg=
Subject key identifier: B8:F2:19:BA:AC:08:3C:E3:DF:DA:18:94:11:40:CE:93:40:B6:88:A1
Authority key identifier: C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82
Certificate issuer: /CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
Certificate serial: 019D9A3ECE9BE48C236381D5B11F47D0FA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
Manifest number: 0A9A
Signing time: Fri 17 Apr 2026 07:01:40 +0000
Manifest this update: Fri 17 Apr 2026 07:01:40 +0000
Manifest next update: Sat 18 Apr 2026 07:01:40 +0000
Files and hashes: 1: mmjMofrrbKgoCjPRlZXSZw-GT9g.roa (hash: WPU4HxsKpJGTw0PZwb4XnnI8k0102pp1cmkJ3VryINw=)
2: ySynGDiuM8zsxfEKtU7D_HG_u4I.crl (hash: RSQcIgyjRgMrvzXWIWHTu58ZFmhNLSIuba3G/xtryZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ce:9b:e4:8c:23:63:81:d5:b1:1f:47:d0:fa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
Validity
Not Before: Apr 17 07:01:40 2026 GMT
Not After : Apr 18 07:01:40 2026 GMT
Subject: CN=b8f219baac083ce3dfda18941140ce9340b688a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:78:1d:d3:6f:d7:f2:fe:85:53:93:97:8e:
90:33:7b:70:87:f6:9c:b2:5c:f0:db:35:b1:e4:2c:
2c:de:3e:4a:42:50:58:9b:c9:3d:8c:19:f7:21:7a:
5d:92:83:eb:6a:48:03:ae:5f:ed:b9:e6:c2:87:07:
27:3b:48:55:87:e5:b9:47:e5:b7:43:89:3a:5b:e8:
74:2c:15:84:4b:0f:37:97:38:00:bc:68:c1:8f:a0:
af:40:93:1f:43:02:73:24:32:43:cc:63:97:41:6c:
24:14:54:80:1b:9c:f4:51:33:55:a4:f9:d3:29:c0:
32:1b:b8:a5:71:f7:76:6e:3a:ed:8d:28:8d:64:b5:
46:64:57:b1:ab:ba:0e:b9:7e:4b:a6:0b:b9:28:fa:
1f:94:69:30:2a:3c:2f:df:f3:e7:9d:c1:9e:59:b9:
df:2b:78:8c:6e:14:6d:49:2d:45:ff:00:fb:07:35:
08:09:e6:38:22:27:9b:f8:ea:05:e3:c3:bf:8c:ef:
5b:7a:26:e0:91:e9:87:37:65:6f:29:80:f2:66:83:
4e:db:af:9d:a2:d2:50:c9:e5:e5:20:52:96:38:e7:
d4:db:4e:d5:14:80:4d:58:72:89:e1:22:65:ac:08:
4e:16:d2:76:98:72:a3:a3:0f:a0:df:e2:4e:54:38:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:19:BA:AC:08:3C:E3:DF:DA:18:94:11:40:CE:93:40:B6:88:A1
X509v3 Authority Key Identifier:
keyid:C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2d:ea:92:1a:d7:10:2f:a4:e3:19:56:cc:4a:03:84:9f:89:
46:a8:16:6c:f7:af:1b:d1:e4:df:4b:a3:8f:72:55:07:df:96:
64:01:53:5c:73:15:ca:c4:8d:fb:f0:8e:e4:24:91:1d:9b:bc:
97:6d:a1:69:40:eb:52:30:78:3f:2d:25:02:07:5d:21:61:e7:
a2:7f:c6:d1:69:d9:06:3f:91:a9:85:22:5b:c9:f1:2f:71:bb:
86:0f:03:32:fd:0a:9d:41:d3:57:f8:ba:c6:d4:d3:c1:73:f2:
74:91:cd:ae:84:08:7e:30:9d:45:74:f1:7a:91:ad:b0:47:bd:
7b:7a:d2:a4:7c:fc:09:b7:e1:f0:b1:6f:9f:87:c0:a0:5f:2d:
e9:15:29:dc:0b:64:0a:2a:2d:18:86:97:44:6f:78:10:ce:99:
eb:95:f3:4c:31:00:eb:6b:09:eb:47:06:3f:58:c3:e0:ad:43:
90:fe:01:92:20:c1:55:ea:fe:e1:02:66:71:4c:8f:3e:91:ea:
c9:07:e6:2c:dd:e7:89:01:5e:21:4b:c9:50:11:f6:69:69:29:
76:0b:0a:4c:a0:ca:c5:b9:f3:9d:73:c9:9d:4c:9d:ce:23:0f:
a7:0d:21:c1:71:2e:6b:64:66:9f:19:4e:60:88:19:4f:b0:34:
79:63:5e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:40 2026 by rpki-client