Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: xUJ2H+T0MJJv2DAvtOYRIAFWC0wLcmN/VTppK67aVNo=
Subject key identifier: EE:23:A3:42:62:44:A3:DC:75:62:DA:9E:B1:7D:CB:42:1B:0C:1F:23
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 019D98F4E93DF9FCD2FC0BFC4136E72798BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 15A9
Signing time: Fri 17 Apr 2026 01:01:20 +0000
Manifest this update: Fri 17 Apr 2026 01:01:20 +0000
Manifest next update: Sat 18 Apr 2026 01:01:20 +0000
Files and hashes: 1: _SwAckWBp8isMhZUKjw_8MX2PbQ.roa (hash: DdPCOva+CEkdSFj4rwktdG8ykIu5k66PhfcbhD6raBk=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: 936W8yAcUwUIIb3CjHYMFo/hucfOkwoIM3Tvq47Vamo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e9:3d:f9:fc:d2:fc:0b:fc:41:36:e7:27:98:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Apr 17 01:01:20 2026 GMT
Not After : Apr 18 01:01:20 2026 GMT
Subject: CN=ee23a3426244a3dc7562da9eb17dcb421b0c1f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:27:34:bb:f0:bd:62:54:c6:f3:5d:ed:3f:
95:b6:e3:ff:6b:51:e3:bb:73:0d:65:63:4f:78:cb:
c9:b9:82:b2:8d:80:ab:06:a7:66:5d:fa:59:6f:d2:
76:60:7b:3b:36:c4:7d:73:93:81:af:ab:10:cf:09:
39:09:89:36:93:53:d3:ba:aa:32:a1:92:78:3d:49:
3c:ea:2e:66:2d:21:14:46:ac:5f:bd:f2:b4:78:db:
1b:a1:7f:d3:65:e2:18:ac:5a:a1:43:d1:15:05:2c:
d1:b1:bf:f8:ce:59:8a:e7:cc:c4:64:22:e6:f6:aa:
ce:05:d9:5d:29:46:b3:65:d6:2b:24:24:8c:05:aa:
a1:41:de:a2:a2:0d:49:4b:5b:bf:7a:1a:7e:a0:be:
40:09:47:c9:4b:99:72:69:9b:67:5e:04:ab:17:4b:
38:4c:b6:f7:b5:6d:af:cf:44:d1:6f:cf:76:c4:1b:
50:ba:63:85:7c:89:ae:aa:66:8a:83:71:c5:e7:c6:
8b:3b:cf:4c:4a:44:99:5f:0c:a3:08:88:93:0d:a6:
44:eb:d6:7b:7c:f1:db:d8:83:c7:f1:78:61:8d:58:
74:c7:16:e3:d9:d9:8b:04:81:ae:f0:a4:4b:eb:ed:
c8:2e:7d:98:31:da:ac:15:5f:b6:db:2e:1d:9f:fd:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:A3:42:62:44:A3:DC:75:62:DA:9E:B1:7D:CB:42:1B:0C:1F:23
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ec:ac:c6:72:c6:9f:2f:4b:26:f4:47:35:d1:0a:dd:47:22:
5c:b7:2a:31:3c:8b:2e:44:f2:51:51:79:ae:fb:0a:c8:c8:70:
76:8c:26:a0:7a:ac:a3:78:47:14:ec:16:42:df:48:4f:d7:e8:
ce:07:28:96:fb:29:05:21:a6:1b:51:b2:15:66:9f:6c:2f:ca:
86:e5:cc:32:b4:79:48:84:bc:55:b1:17:62:a6:c5:d3:ed:48:
48:8e:77:e1:7c:12:ea:81:25:ee:70:e4:1e:d2:61:ad:93:68:
e8:aa:b7:e1:e2:92:da:b2:e6:51:b7:52:a8:2b:c6:11:b1:a9:
02:0c:a5:6e:ab:d6:b0:7b:cb:cd:8e:bc:39:27:56:54:de:da:
35:66:31:8a:f3:1e:51:27:8a:7d:1a:1c:ae:d4:45:37:4e:ab:
a9:8d:8d:43:f7:0a:ab:4a:4e:7d:81:74:af:b2:6f:34:96:0a:
b5:2e:59:f2:29:24:9c:98:9c:e2:71:db:7e:2c:64:5e:88:60:
a7:f0:08:32:c8:be:a6:4d:51:75:f2:25:c4:99:2c:58:d2:66:
67:c0:e9:eb:8c:53:b6:6a:bc:0f:fd:f0:3f:e2:1c:9e:03:dc:
6c:a9:6e:a6:a9:29:65:d6:f1:bc:ed:5f:2f:f9:6e:cf:64:8e:
7e:85:de:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:57 2026 by rpki-client