Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
File: ybssFI7w7gD_WiIa8bxhx-GKpLw.mft (raw, json)
Hash identifier: qR8f3FXkN3lkeLihIk0g0ZlR9rs3f04qHP71SdTExrY=
Subject key identifier: E9:87:C3:C7:44:45:17:76:BD:EC:6B:7C:2D:38:C3:0C:7F:77:E1:9E
Authority key identifier: C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
Certificate issuer: /CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Certificate serial: 019D9C9AA156786B14FE484B79030E732F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
Manifest number: D5
Signing time: Fri 17 Apr 2026 18:01:12 +0000
Manifest this update: Fri 17 Apr 2026 18:01:12 +0000
Manifest next update: Sat 18 Apr 2026 18:01:12 +0000
Files and hashes: 1: 2vfd_kX6R8_1pSce-qH7ueF_CFI.asa (hash: gyU2q6SGexsT0na8dPH6q8my1zwHUMQLEgtgSUYyBL0=)
2: ybssFI7w7gD_WiIa8bxhx-GKpLw.crl (hash: 63B9ZKDqhpW6vNHNWRgWleINd4zcutSk57BDfUWzq0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:a1:56:78:6b:14:fe:48:4b:79:03:0e:73:2f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Validity
Not Before: Apr 17 18:01:12 2026 GMT
Not After : Apr 18 18:01:12 2026 GMT
Subject: CN=e987c3c744451776bdec6b7c2d38c30c7f77e19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:48:94:79:fa:29:94:b9:d9:32:5b:29:02:
ab:a5:7c:74:41:93:cb:db:39:3c:d4:6b:c2:29:f0:
56:ab:1e:da:4a:5c:b1:9c:f7:90:89:08:70:74:be:
be:21:02:16:07:8b:ad:2f:1b:96:61:b9:80:52:5a:
88:16:2a:a9:74:8d:00:97:10:96:0c:6b:f3:d9:56:
15:78:66:15:37:86:4c:50:12:1a:89:13:20:0d:df:
7d:e2:0a:c5:c4:54:6b:9e:66:71:c8:a2:42:2c:60:
4a:fd:5e:72:0a:59:02:bb:27:c6:00:e9:00:38:39:
c5:ab:90:d5:90:df:20:b7:7f:4d:74:72:df:01:4d:
65:81:0b:6d:bc:ab:68:30:84:84:20:9f:5c:72:12:
8a:53:19:8f:2f:47:15:c2:18:92:78:74:1d:6b:9f:
48:56:f0:e1:6e:70:a5:fb:e8:a5:0d:9f:0a:7d:7e:
66:4b:97:cf:1b:88:f2:b1:9c:75:38:12:13:dc:b2:
fd:c4:76:08:ef:a7:10:45:5f:0c:80:9b:53:55:b8:
86:c0:51:48:5f:70:cb:94:17:98:79:f1:b4:26:05:
df:db:5d:5c:e8:65:47:bb:ae:3b:23:4e:ce:d7:3a:
1f:22:cf:1e:13:f4:32:29:79:7e:63:71:d4:41:20:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:87:C3:C7:44:45:17:76:BD:EC:6B:7C:2D:38:C3:0C:7F:77:E1:9E
X509v3 Authority Key Identifier:
keyid:C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:4d:05:77:eb:2a:5e:1c:cd:70:31:41:4b:14:b6:ab:cb:82:
b2:53:60:17:31:00:4b:32:37:6a:a8:d6:c1:0c:ff:19:e7:0f:
0b:3b:b1:f0:2e:cf:c7:df:5d:e2:9d:42:0f:51:c3:bc:e3:b6:
67:68:f4:c6:38:26:41:51:a6:d9:52:d6:b7:28:ba:19:b1:73:
ca:d7:31:4d:a3:6d:26:bc:ec:04:9e:40:47:01:55:84:c5:31:
93:9b:16:ec:e4:2b:a5:2a:c9:a0:b4:44:c2:b2:d2:2c:a1:a5:
a6:cb:17:ff:73:7a:34:3a:1a:d6:59:88:32:82:1a:44:f1:16:
41:6a:01:24:74:43:a4:f6:8d:12:60:6f:b5:6c:fa:e5:5b:64:
b4:02:25:53:c6:9f:b8:5a:38:fd:ca:24:80:f7:d7:99:5d:19:
8c:40:a7:9e:f2:19:57:23:c7:68:49:d3:c7:e6:3c:06:30:97:
b5:2f:4c:4c:a3:67:a0:52:7f:f7:e0:d7:2c:c7:2a:6a:95:7a:
3d:40:37:27:03:60:ef:fc:e0:46:78:93:79:f1:65:54:b0:ce:
6c:5d:8c:e9:45:02:1a:e5:df:1d:37:cb:70:ff:1b:46:ec:4e:
54:fc:8a:d8:5e:f6:b6:12:25:5e:2c:f5:e7:c0:59:b2:6c:e3:
dd:28:c2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:09:02 2026 by rpki-client