Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
File: ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json)
Hash identifier: PTVf7TYaY3lQCFlM8ZpUgvqjwRCW1cR+BaNcsEvg2FI=
Subject key identifier: CD:76:BB:2A:5A:4D:99:C8:5E:FB:FA:6D:86:A3:D5:D8:75:70:7C:50
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 019D284E4E9858D8BAC6ECD1D24BE5941EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 04:01:53 +0000
Manifest this update: Thu 26 Mar 2026 04:01:53 +0000
Manifest next update: Fri 27 Mar 2026 04:01:53 +0000
Files and hashes: 1: Tm9YQPK-QIZxd2ETnOjMjlrf5iE.roa (hash: whGszraZOmhpbIRFR+/A2z2SahEUdOmazsccBDJL8i4=)
2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: Sz+f4LE0C6UM7dQM2SyZ64PVrAz2F/hqty9woos2w9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4e:98:58:d8:ba:c6:ec:d1:d2:4b:e5:94:1e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: Mar 26 04:01:53 2026 GMT
Not After : Mar 27 04:01:53 2026 GMT
Subject: CN=cd76bb2a5a4d99c85efbfa6d86a3d5d875707c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:06:27:7b:2c:bd:1c:ec:5b:e9:cb:b4:1f:da:
83:46:11:ff:c9:ba:9c:88:4f:f3:ea:c9:77:40:33:
20:31:31:33:be:82:32:77:86:db:78:46:3b:e5:58:
35:01:4e:cd:49:74:c7:7f:0b:cf:1c:1e:ce:80:09:
c8:cb:15:cf:75:ac:0a:b6:e0:88:58:b5:25:4b:ed:
93:f3:15:5f:0a:df:4f:a7:73:c8:46:c4:d7:86:65:
5f:64:64:9d:70:0c:cc:68:0a:62:12:40:9b:2e:b3:
61:9f:14:ae:f7:8c:6a:d4:36:fa:42:fa:c7:83:06:
6f:b6:22:ae:d2:d8:1c:0e:a5:55:3d:1f:ce:50:ca:
d1:78:67:f9:23:4d:26:7b:6f:e2:ff:e9:d3:05:eb:
4b:82:3b:f2:d9:9b:b4:8c:bc:b8:e2:75:5a:dd:5a:
3b:88:19:d6:07:ec:db:4d:d4:dc:3c:46:00:62:f7:
09:d7:70:1d:a9:3e:a4:85:15:86:cf:2c:3c:dc:84:
78:78:e1:e8:21:08:92:21:76:0d:34:11:40:2a:15:
a2:1c:06:31:09:b2:52:bc:6a:a0:43:46:03:54:88:
30:21:10:f5:d9:08:4b:06:3d:ed:8f:03:85:19:b3:
a8:0f:5b:fd:ba:cd:62:15:0f:70:eb:fb:01:74:ba:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:76:BB:2A:5A:4D:99:C8:5E:FB:FA:6D:86:A3:D5:D8:75:70:7C:50
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2f:8c:49:d9:16:53:fb:c9:5c:76:f7:34:6f:8b:13:40:5e:
ac:83:a9:79:cd:d4:2c:61:d6:27:34:6f:76:32:0c:2b:dd:ad:
fd:6c:7e:b0:39:77:89:87:9f:dc:2b:fa:53:57:b5:73:28:04:
fe:94:c2:b9:ee:be:1a:6c:86:26:17:d4:38:1a:1d:d0:a2:78:
43:f5:75:a1:12:3c:ae:cc:4b:65:56:81:d5:d6:d1:46:a4:57:
38:c9:76:8e:c9:4e:06:10:14:05:25:cb:bf:59:7e:92:12:d7:
3f:74:5f:ed:83:9f:8e:1f:64:34:31:20:73:3c:8f:f9:8f:11:
92:b9:1b:cc:00:8e:e2:83:e9:18:a8:a7:23:11:22:6a:26:ba:
06:2f:35:34:5f:39:a6:c1:64:de:ca:39:4b:23:69:a7:51:3a:
0e:86:b6:d4:b6:f9:29:b4:06:48:b4:b1:5d:80:44:a0:9e:7f:
fd:36:59:e1:5d:01:37:0e:d0:c2:bb:46:76:55:cf:d1:39:c9:
37:42:12:61:ba:ba:90:59:9a:81:d1:74:84:a1:c2:83:62:d7:
8d:6d:90:54:90:0c:b0:5c:5d:35:33:56:1a:0a:e9:c7:db:02:
80:27:0f:86:a2:0e:05:76:8f:92:70:1a:13:d2:e5:06:48:f0:
9d:09:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:05 2026 by rpki-client