Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
File: yaOl5BHeryKE_9AVML-0H4Fsu6M.mft (raw, json)
Hash identifier: fzs0BpGqxLrZQ225WHcvCTk3QA4xyGxSFliwJc3vo/0=
Subject key identifier: 72:F7:F6:99:D9:03:71:FC:DB:84:EC:83:73:DB:56:20:87:09:C4:EF
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 019D992BB34DD3E9002F0EF6B41EF210E64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
Manifest number: 069C
Signing time: Fri 17 Apr 2026 02:01:11 +0000
Manifest this update: Fri 17 Apr 2026 02:01:11 +0000
Manifest next update: Sat 18 Apr 2026 02:01:11 +0000
Files and hashes: 1: 05sJvKsPpEQygCgsV_MGQHN9_TM.roa (hash: nFTOD6KUcpEnrht3gN5bskiFEmc9rtUM9QNFKCOE0Vc=)
2: 1-xtDrU7wKNsIkkfW8E-ZbC6rELU.roa (hash: rgHDDCujsocFhMaTOl2AntkEyFdfyoyY4MLtmaNj0qw=)
3: s5h_FbOSJtTwNWZ7nw-DoslTY04.roa (hash: 3rYcvADDI43HpDRf99rDIKGF7HoSWoEsrigLvsY6+nw=)
4: yaOl5BHeryKE_9AVML-0H4Fsu6M.crl (hash: igoZWHlpkZIUz5xYc3s7Dcyf+Kal2aqONdUqTuJIeU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:b3:4d:d3:e9:00:2f:0e:f6:b4:1e:f2:10:e6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Apr 17 02:01:11 2026 GMT
Not After : Apr 18 02:01:11 2026 GMT
Subject: CN=72f7f699d90371fcdb84ec8373db56208709c4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:44:23:89:5a:80:ba:f4:84:6d:73:77:ad:
ea:47:34:89:72:db:4f:83:21:e5:16:4e:08:90:ae:
b5:a4:7b:51:cc:b3:d6:b5:b8:d2:8d:9b:80:12:ec:
dd:3d:83:ec:a1:34:3c:44:34:50:2c:ff:2e:e9:8b:
70:b4:92:2e:46:98:27:4c:87:1f:cb:0b:89:d2:a5:
07:16:d4:1c:3a:bc:98:79:eb:78:26:83:2f:a5:d7:
e6:d3:e0:94:9b:a2:a7:b1:54:2c:93:7b:c1:c3:1e:
49:3e:de:39:84:4b:45:72:c1:1b:53:25:5b:a5:24:
65:a5:93:84:41:9e:23:a0:76:5b:16:7f:b8:b2:99:
0d:1c:41:c2:f3:25:b9:7a:b9:b1:43:3f:7d:90:f6:
35:4f:1a:36:9a:0a:a5:13:b3:73:d9:2e:46:fc:cf:
d7:1f:e1:52:2d:70:53:5e:d8:28:1e:f9:14:63:58:
ef:4f:06:f0:f5:cc:a7:60:7b:7b:33:27:14:3d:c0:
49:2f:da:b1:5d:e0:4a:65:00:84:68:74:2a:9e:a2:
60:da:51:9e:fa:52:e3:0e:32:38:1d:63:69:36:30:
9d:ca:95:e9:9e:91:3d:e6:15:9b:a4:34:50:a3:e1:
86:a1:30:56:e5:da:92:f4:a7:a0:9f:96:ec:ef:3d:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F7:F6:99:D9:03:71:FC:DB:84:EC:83:73:DB:56:20:87:09:C4:EF
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:25:4e:c3:eb:a3:55:a4:de:94:06:4f:d0:5d:45:7e:6e:57:
03:f7:67:cf:68:1e:ae:27:f5:39:96:3c:e7:c2:66:38:3c:44:
f6:1c:31:18:97:ad:62:79:07:d9:e1:a6:51:71:51:0a:58:17:
ff:15:57:67:e2:88:fa:46:b7:d9:dd:17:5a:13:64:ba:63:4a:
b8:80:d4:f8:cd:36:ef:d3:0a:48:f7:17:dc:5b:f4:f2:6d:17:
1d:49:93:95:87:2e:9d:58:71:a3:bd:72:aa:ff:f5:7c:b5:40:
53:a3:86:9b:4e:0c:90:62:05:38:7d:10:41:dd:f5:32:e3:27:
0e:d7:88:7f:99:91:85:c8:dd:c0:ec:17:af:c8:e6:04:08:a3:
1a:a9:a3:fc:b2:99:7c:97:a7:03:da:70:9d:d3:56:08:c0:a3:
77:4c:61:5c:cf:aa:63:32:db:02:54:c2:76:18:51:09:6f:be:
df:b2:70:28:65:6d:92:04:73:a4:23:96:18:f9:64:20:53:63:
df:1f:15:04:8e:eb:c9:ae:03:e4:28:83:d6:5c:dc:f2:be:4b:
70:4a:d7:35:4b:3a:58:9b:35:e2:8b:dd:e3:66:c6:03:a8:86:
14:97:f9:b5:77:51:e4:a2:5b:e5:13:48:bb:6a:73:73:ad:d8:
66:df:92:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:58 2026 by rpki-client