Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
File: yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json)
Hash identifier: MIQs6vqudVZuSraUHV9mczjszsPYGZS8wHe0hATEJss=
Subject key identifier: B4:D0:5B:90:8D:19:E5:BD:52:52:FB:AB:C2:C6:2A:D1:51:1F:C1:3D
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 019D9A3E21660E7AE85B4E29B5ECB5EF6FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
Manifest number: 0CEC
Signing time: Fri 17 Apr 2026 07:00:56 +0000
Manifest this update: Fri 17 Apr 2026 07:00:56 +0000
Manifest next update: Sat 18 Apr 2026 07:00:56 +0000
Files and hashes: 1: CitEHd6r_CsQSgbionGA1eBcMLU.roa (hash: 1rANra1AzVxMgl8VcJaThBHrC2EUS4bUsTwEZ+EKh0w=)
2: GcvVWNFfgF0wu0Nfjs_BudGQw9Y.roa (hash: KB0pqrvO6Erz4/rIYGhqqlfhiTfb86tI38IPNb7s0Ow=)
3: WubjxHCSaP4QHue8QiWJLn9wu24.roa (hash: gOCleJwqwii3IPAc/S3k490GMZ5rkPiOH6rY9OCeZlc=)
4: cP554_mw0i_-2i5ondqs4ybL7Sk.roa (hash: 2BFM3dBYEA6Al1rq89/1sEyXAEFO0eUAmQaufDFqA9A=)
5: ktjIcji8JZjmvPNVbyNsDh1AaNI.roa (hash: OhINTejQ3OUauCVxjnxjYQBZeRf8l4Bc1ZHLwTdPGVQ=)
6: mYlVHFIkWhjce6SZlz3waAY66A8.roa (hash: 4EmaIQp2LaV/4WUzCFLlD6HjVOOnifTa9SWdZEfSqzY=)
7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: UJIC62zJFcpRsrgUNs9umnZTNGRGxQNPinAJK3ZPY7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:21:66:0e:7a:e8:5b:4e:29:b5:ec:b5:ef:6f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Apr 17 07:00:56 2026 GMT
Not After : Apr 18 07:00:56 2026 GMT
Subject: CN=b4d05b908d19e5bd5252fbabc2c62ad1511fc13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a1:be:5f:0e:c7:01:f8:a0:5a:ab:ff:ff:38:
8c:33:36:4d:a5:3c:b7:0e:0d:51:80:e1:15:75:65:
9b:45:b2:ee:2e:f9:26:14:4c:0c:ad:c3:8e:6e:fe:
8f:0f:0d:42:d9:02:ea:ce:b0:85:58:a8:e6:c8:3a:
68:a2:8a:fc:5b:3d:ae:b3:26:51:5e:11:1a:e4:41:
df:15:2a:d5:36:87:52:ab:e2:b5:a4:5c:63:1b:07:
cb:47:09:bf:e2:dd:95:d3:2f:8e:bf:20:6b:e5:d9:
27:bd:44:4d:86:63:a9:72:bf:4f:16:ad:7a:43:d3:
be:2f:97:c1:35:8a:bf:60:27:f8:e5:12:e3:9f:7b:
25:7d:48:49:9f:3e:ef:dc:55:58:8c:60:83:8a:26:
40:e0:4c:6e:6a:e6:99:c5:cf:79:46:49:18:ff:82:
41:39:c2:ef:46:fb:09:29:90:81:9e:09:4b:4e:6c:
62:05:54:5a:05:25:ed:0e:08:1c:5d:1a:7c:99:5b:
17:e2:43:13:77:7b:7c:fe:96:8c:ed:52:d2:ec:ab:
4b:01:12:ae:90:62:b6:31:56:11:85:ed:9d:ee:c8:
6a:49:cd:35:0b:2f:18:9d:67:d7:46:bf:6f:ce:e6:
5a:13:86:6d:1e:23:ab:cb:7c:c4:56:9d:80:c7:b5:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D0:5B:90:8D:19:E5:BD:52:52:FB:AB:C2:C6:2A:D1:51:1F:C1:3D
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d2:3b:d7:87:24:ed:96:55:da:78:29:55:71:31:51:4e:0a:
f4:54:73:96:22:8f:92:8e:8f:66:ce:12:88:d5:4a:f3:d6:01:
da:6b:b5:f5:d8:33:b7:fd:c3:f5:18:33:93:4a:71:74:07:c2:
eb:5c:dd:99:aa:6e:cb:52:26:22:8a:b1:35:12:54:67:27:9d:
98:8d:4f:c4:d6:85:8a:2c:5c:c7:60:df:5a:2f:35:98:c1:85:
de:c8:49:b5:68:70:25:3d:0a:fc:27:f8:b1:4e:75:db:64:c1:
72:9a:a4:31:aa:d0:aa:aa:81:7b:a8:7c:6a:eb:b3:c4:02:2e:
7b:2f:6d:88:4e:98:22:c2:a3:57:be:6f:e0:1c:86:1f:cc:91:
23:d8:1c:dd:6b:25:2f:41:9a:46:4e:e5:db:29:a7:51:e8:48:
49:44:bd:0a:dc:67:2b:98:8c:10:46:24:bd:d8:88:19:45:13:
48:20:a3:66:e8:b6:95:22:be:47:87:bd:2f:96:0a:97:bc:88:
ee:7d:e0:f4:62:cf:fd:43:fb:20:fa:fd:12:5d:2f:98:61:18:
c1:94:6b:a7:cf:87:65:89:a6:fb:6c:e5:d6:d3:97:08:c7:e8:
b0:95:5f:d1:fd:95:39:2c:df:e0:54:36:f0:e9:61:99:87:85:
7d:7c:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:38:34 2026 by rpki-client