Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: y80HCGfaRyd7LFJyPxUAUnR0rowouNhJoVJTdOom0nQ=
Subject key identifier: 66:70:C7:E0:48:A2:DB:F6:9F:BD:CC:2F:67:A9:5B:8A:CF:2C:BA:F1
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 019CAAFD45A9F61E3E2CA482C18BD262BDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 10F4
Signing time: Sun 01 Mar 2026 20:00:50 +0000
Manifest this update: Sun 01 Mar 2026 20:00:50 +0000
Manifest next update: Mon 02 Mar 2026 20:00:50 +0000
Files and hashes: 1: 0Lwj5i1c4Zxo9S7reLT043tZQto.roa (hash: YQ43Pzm8kIwiUn3utvGc8HdrkEgRWVgYKvbGV3IgZ04=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: 234Y/iO6kQCwbIgvuVQINpbAeeSim0TFv2Xno2p6ADU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:45:a9:f6:1e:3e:2c:a4:82:c1:8b:d2:62:bd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Mar 1 20:00:50 2026 GMT
Not After : Mar 2 20:00:50 2026 GMT
Subject: CN=6670c7e048a2dbf69fbdcc2f67a95b8acf2cbaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:e9:45:63:17:65:a7:cc:3d:29:03:d4:0a:
9e:f8:dd:0c:3d:8f:62:a8:22:99:2a:a4:c9:35:58:
18:1b:cb:15:9b:19:fa:cd:a3:d0:3b:a6:53:32:a4:
b3:35:4e:bf:03:20:fd:9c:99:58:92:a6:2e:98:ed:
a3:67:8a:f8:dc:07:a9:69:fa:fa:24:f6:1d:fa:38:
ec:45:4d:f9:87:c1:27:f2:a2:08:e0:a2:17:11:5e:
a8:64:21:e2:46:79:ef:60:af:77:d1:6f:5e:b6:fb:
00:7f:40:eb:a2:af:68:21:29:2d:00:6d:ae:3e:12:
56:ab:1c:47:8a:42:f4:e9:9b:7f:a6:7c:fc:2e:50:
b0:c6:2b:83:a7:16:49:84:e0:bb:9b:5a:e6:9e:6d:
21:bc:8d:8b:8c:c9:b8:35:40:08:3b:37:80:82:3d:
d8:a4:56:5a:b1:a2:06:e5:18:78:1f:c3:2e:30:57:
43:e5:e1:36:c1:84:60:21:c7:42:70:d4:f4:3c:cc:
82:f3:39:df:66:dc:ec:9a:8c:62:e9:f4:69:57:fe:
c6:07:e7:2d:83:1f:0e:e8:a1:6d:55:04:fc:d8:b8:
31:3d:9d:ec:2d:22:74:79:17:3d:7f:7a:8c:52:9a:
c5:fe:75:cf:45:ba:98:62:16:bf:2e:6b:a8:92:cc:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:70:C7:E0:48:A2:DB:F6:9F:BD:CC:2F:67:A9:5B:8A:CF:2C:BA:F1
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d5:8f:94:e7:2c:a7:9c:34:d3:72:0a:31:82:9c:81:09:09:
37:72:3c:0f:fc:45:9b:6f:ec:07:2a:36:38:0f:4f:f6:a3:9a:
9c:98:25:1d:5b:4a:be:e0:f9:73:50:f4:4d:c1:8d:a0:bf:df:
ee:d1:fe:5f:7e:2d:69:90:f3:e5:1c:b7:25:e8:7a:a5:9c:40:
9e:b4:2a:8b:94:dc:1a:77:b7:53:c2:7c:97:0b:1d:10:ee:ac:
a9:03:6a:80:0e:ae:d3:1d:fc:7d:3a:4b:f6:fc:43:7c:63:75:
28:00:39:47:b8:d3:0b:96:ff:66:83:b7:89:2f:ff:50:2e:4f:
5f:74:10:cc:41:b4:83:57:84:8b:55:76:80:45:93:63:8d:2f:
62:e2:0e:7b:19:14:6e:cd:57:e7:19:4a:77:06:cc:2b:0a:d2:
c2:3e:71:a2:01:13:36:5a:c8:bd:42:0b:f3:b2:d2:08:d3:66:
2b:10:37:b5:97:1b:82:e8:b6:3c:66:e8:e8:1f:3b:4f:a0:eb:
74:18:d9:ba:e7:c3:e4:73:77:e0:d6:f0:b4:69:e9:00:17:27:
cf:7b:71:78:5c:10:e9:65:bd:4a:9b:c9:ca:ff:c3:31:45:27:
6d:75:bf:6d:80:88:9f:cb:b8:e6:b8:fd:7f:8b:ca:82:65:d0:
64:a6:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:51 2026 by rpki-client