Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: dx4kxh+IOtXZXlgFWeWca8Wpoy/Rh/iE6qr+vXKIKpo=
Subject key identifier: BC:40:00:98:56:8E:1C:79:95:67:11:1A:50:28:F0:AC:A6:94:6F:6C
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 019CACEC01010EF16215ACC76015B22C8DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 10F5
Signing time: Mon 02 Mar 2026 05:01:13 +0000
Manifest this update: Mon 02 Mar 2026 05:01:13 +0000
Manifest next update: Tue 03 Mar 2026 05:01:13 +0000
Files and hashes: 1: 0Lwj5i1c4Zxo9S7reLT043tZQto.roa (hash: YQ43Pzm8kIwiUn3utvGc8HdrkEgRWVgYKvbGV3IgZ04=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: BeplXY4JlKGm632LQ3u/msGZGat4X072XOGyq9ryE4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:ec:01:01:0e:f1:62:15:ac:c7:60:15:b2:2c:8d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Mar 2 05:01:13 2026 GMT
Not After : Mar 3 05:01:13 2026 GMT
Subject: CN=bc400098568e1c799567111a5028f0aca6946f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:59:e6:0c:7d:d9:cc:3e:32:01:54:42:90:
8f:84:39:dc:27:a8:4d:92:d0:92:15:9e:d4:30:88:
db:c9:5d:fa:37:85:59:a8:8d:f7:91:fe:e5:af:0c:
d4:48:75:08:4a:25:b0:78:88:9c:29:18:89:b0:94:
6d:5d:48:d8:1e:b3:a8:e0:2c:d0:43:72:d0:0a:eb:
84:c7:4f:ba:da:be:b1:46:c1:5a:d3:47:3b:ab:1c:
1b:48:4e:13:25:47:0f:79:f3:96:e1:b5:a0:f0:4d:
9b:5a:32:ac:d0:f3:11:9a:88:77:8e:e4:eb:2c:30:
a6:b5:5e:55:b0:62:64:b9:68:7f:9f:44:e4:04:37:
7c:48:e3:ac:63:69:ee:1b:76:41:f2:1a:b5:dc:14:
24:75:8c:a5:a7:69:35:b7:40:49:df:21:fa:66:e2:
c2:c9:25:1b:e1:66:52:53:23:9d:7d:87:0a:4d:a0:
aa:28:66:b9:53:f6:55:f4:45:7e:ef:05:11:62:7b:
20:0b:78:d6:66:16:0a:59:4b:7a:ab:e4:4a:47:9b:
7c:4e:e0:03:e4:f2:9c:c2:69:7a:40:c9:d7:4d:c0:
6c:1a:ee:57:2b:ee:c7:f8:1f:27:20:32:3a:0d:eb:
7b:5c:b2:2a:bd:c3:7d:7d:64:b8:5d:d4:06:4e:fe:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:00:98:56:8E:1C:79:95:67:11:1A:50:28:F0:AC:A6:94:6F:6C
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d1:14:7b:fe:33:14:61:69:0a:c0:63:75:c5:e2:9e:9d:66:
ab:9f:cd:d1:66:72:46:69:e4:36:57:95:ef:0e:e0:2e:1f:3b:
ec:b5:dc:06:af:8f:a8:f2:43:80:9c:74:6d:a5:42:90:5a:08:
dd:e9:9a:87:29:62:c4:4f:82:76:f6:28:e6:f9:05:7e:0a:1b:
c6:9b:ac:c1:57:e5:5a:fb:9d:58:57:d8:26:a7:ba:4b:51:f5:
f6:bd:c3:0c:01:2b:33:25:a6:db:77:29:a9:3b:b0:15:3a:b1:
b6:45:e0:5f:53:77:4e:4c:e2:fe:ef:c3:75:17:24:ae:3a:94:
0c:bd:71:bd:d9:46:af:23:f0:7e:75:e8:6f:e4:13:e3:d9:6c:
23:8c:dd:88:3f:ea:96:6f:a4:00:da:99:a5:d1:26:84:9e:5e:
f0:bc:69:a3:68:d7:b6:08:e3:d0:ef:3f:07:5a:08:d6:9f:ca:
12:1c:b6:46:81:2d:27:0f:aa:a2:66:ba:b8:a7:50:48:74:4b:
65:3f:f0:a8:16:ad:40:e5:29:d5:8b:de:2c:4a:58:65:4d:9a:
93:b4:ae:83:37:06:ed:72:ff:a5:fb:f6:11:6d:dc:a4:ca:13:
72:35:db:e5:2b:f0:6a:40:e6:32:99:2a:0d:13:c9:b2:ac:7e:
63:4a:36:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:13 2026 by rpki-client