Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
File: yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft (raw, json)
Hash identifier: tnYB4ZuuFvp48UirdwJSC3ZYXHgurgM/0L9gvoWpvfE=
Subject key identifier: B5:73:5B:AD:0B:E5:D2:4A:51:6A:14:42:83:ED:5F:A6:FC:4F:99:35
Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
Certificate issuer: /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Certificate serial: 019D9AAC82AD21F256BA99E57B0F171362AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
Manifest number: 1842
Signing time: Fri 17 Apr 2026 09:01:30 +0000
Manifest this update: Fri 17 Apr 2026 09:01:30 +0000
Manifest next update: Sat 18 Apr 2026 09:01:30 +0000
Files and hashes: 1: Q1i1i1A5Ui6K8xWYOMC8b2cLIys.roa (hash: K5UU540aeacTeWENSm+dTa5dIuRJreM1pon8ZgCMcE8=)
2: yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl (hash: 4wtQdGe9OpIJYfn0+vsNRK/m8xcMpuWM0SdUQc7rQDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:82:ad:21:f2:56:ba:99:e5:7b:0f:17:13:62:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Validity
Not Before: Apr 17 09:01:30 2026 GMT
Not After : Apr 18 09:01:30 2026 GMT
Subject: CN=b5735bad0be5d24a516a144283ed5fa6fc4f9935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:fc:e4:45:f8:f2:33:63:49:61:2c:1b:b1:
93:3a:80:5f:59:07:53:0b:1d:43:1c:77:44:cc:5b:
f6:62:c1:00:f0:d0:7a:5b:86:8a:b7:eb:65:df:a5:
95:31:a8:33:fe:33:70:33:04:9d:f3:e0:2e:93:d3:
99:73:1b:40:d4:f9:8c:2e:4a:6c:06:86:1f:b5:32:
6b:e5:30:ea:34:f1:10:00:dd:cb:20:5c:b7:df:80:
f4:56:af:bf:f8:88:97:51:b9:bc:89:c1:4b:e1:2e:
b5:fc:84:1a:62:29:78:b9:b7:a6:09:0a:13:e9:a2:
76:01:a4:ee:1e:07:58:23:43:c7:c5:5f:9e:53:eb:
24:5c:1a:b6:66:c9:5a:a0:aa:ae:ec:fe:14:61:ca:
c3:74:4e:69:05:e8:7c:8a:5a:cf:25:39:0b:1c:5f:
3e:8f:8a:7c:4a:e8:7d:42:4d:be:aa:c8:34:b5:ac:
2c:b2:ef:c2:04:30:00:9e:91:ae:71:f5:cb:75:41:
73:90:a0:bd:9c:8e:6e:46:12:2a:3c:4f:5f:0c:b4:
51:3b:52:2c:3a:8d:6b:6f:37:e8:ab:24:f2:5a:eb:
41:aa:ed:d1:84:c7:84:73:69:6a:1c:44:fe:a0:fc:
6b:a3:80:b5:c2:5b:5d:01:3a:fc:0c:d1:47:2f:05:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:73:5B:AD:0B:E5:D2:4A:51:6A:14:42:83:ED:5F:A6:FC:4F:99:35
X509v3 Authority Key Identifier:
keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5f:34:03:ac:95:d8:11:87:af:67:68:2c:81:44:6a:c8:c2:
bb:f8:5a:7e:c7:af:a4:4f:7d:f0:4f:63:7d:52:c1:c4:7e:fb:
cc:d0:68:80:e6:08:e5:1f:82:bc:92:51:e6:fc:6b:2d:32:10:
c1:c6:81:3d:dd:3e:7a:f9:a2:2f:cf:fe:55:38:4f:cf:06:ba:
e6:48:52:28:b8:3b:47:b6:a6:be:4c:a5:86:64:73:02:6d:c3:
7e:5e:42:9f:89:96:25:df:62:73:f6:06:95:9d:2f:24:d9:19:
91:6f:4d:c7:33:d9:2e:19:35:eb:67:0c:2a:0e:fa:70:c3:0f:
c7:ec:95:6d:29:7f:25:c3:5d:bc:70:1a:89:0a:ac:a8:23:72:
3e:5c:b5:99:8d:d4:f6:a5:1f:75:10:f8:ea:91:18:16:c9:f5:
e8:de:66:ad:e7:35:25:5d:c0:eb:77:92:6f:e4:de:3c:48:14:
d3:96:a2:6e:9b:f4:3e:58:80:18:f1:c1:36:21:a1:83:13:b5:
00:17:c9:4f:58:6c:f6:6e:22:c7:48:41:ac:2b:eb:87:17:9b:
80:d1:f9:67:4f:6e:ab:24:ca:4c:00:5c:b1:3d:f5:3e:3d:c9:
af:e7:66:b3:9c:9f:5f:58:bb:42:78:f3:53:fd:35:41:42:dd:
18:36:59:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:04 2026 by rpki-client