Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: fS6r90+tKSD9tlrFj1cmcBXuJMXPR4cN8d6RxmwJ2cc=
Subject key identifier: 77:70:E3:6C:C3:7A:F1:7E:AD:F7:0D:80:3A:3C:CA:9F:F4:F3:4D:A8
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 019D2A3B58E7C9D9EB9AF44DB9A8F666FC0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 10E4
Signing time: Thu 26 Mar 2026 13:00:25 +0000
Manifest this update: Thu 26 Mar 2026 13:00:25 +0000
Manifest next update: Fri 27 Mar 2026 13:00:25 +0000
Files and hashes: 1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=)
2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: xzwginI/gCinVTvwZRhNXM279TW52L+DIDGhnvuHJkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:58:e7:c9:d9:eb:9a:f4:4d:b9:a8:f6:66:fc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Mar 26 13:00:25 2026 GMT
Not After : Mar 27 13:00:25 2026 GMT
Subject: CN=7770e36cc37af17eadf70d803a3cca9ff4f34da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:38:af:32:d7:bb:f0:93:4d:5f:9e:16:41:
57:20:fe:92:0b:56:71:07:31:b2:d1:1f:98:12:7c:
40:af:98:0c:9f:99:4f:e9:dd:bc:bf:94:8a:47:60:
77:fb:f2:91:9a:47:7f:48:d8:b9:00:29:79:27:47:
82:0b:77:53:24:58:10:c8:04:41:ae:1c:0b:99:2e:
c3:82:06:42:39:d8:59:93:3f:30:ed:cf:7c:be:79:
ca:8e:a6:3c:da:8e:cf:d4:da:02:73:18:89:04:0d:
40:9b:c5:8a:a6:5d:47:3e:fc:57:95:67:6d:36:08:
49:1c:32:b3:00:9e:70:84:a6:4b:aa:78:49:c7:b3:
17:83:5b:eb:c4:41:93:65:92:e8:54:2f:3a:03:8d:
79:f5:97:f4:6b:33:a3:af:a7:53:26:56:db:20:f0:
7c:4c:2e:3e:de:aa:68:7f:d6:28:70:9a:fd:a9:c8:
88:e0:4f:84:08:f7:03:ba:d0:85:7e:d1:a7:d4:a1:
d4:18:dc:52:77:41:4c:46:f2:bd:74:85:c3:6f:37:
4f:41:89:64:55:fd:be:f4:95:f6:fa:7a:1a:12:e9:
c7:77:a3:5c:3c:56:b6:28:17:0a:3d:ba:66:9d:b6:
08:d4:5d:2d:47:a6:dd:c4:16:a1:e8:3e:cb:1e:90:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:70:E3:6C:C3:7A:F1:7E:AD:F7:0D:80:3A:3C:CA:9F:F4:F3:4D:A8
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:19:ca:ae:ce:22:4a:c6:34:d1:98:69:ee:75:26:f0:59:8e:
b8:ba:f8:02:f9:02:c1:83:fe:47:18:44:7e:4f:af:b0:6f:f4:
59:38:3d:98:6d:8f:d3:bd:d5:41:d0:ed:34:44:01:38:ba:2e:
1e:40:5d:8c:bb:c5:7d:db:a4:54:da:f1:0e:1b:94:9b:16:b3:
90:a2:d8:01:f8:f1:02:73:77:6c:3f:9b:96:cd:6c:5b:5b:09:
11:bf:1a:46:09:c4:e4:b0:81:c2:75:24:e6:b6:cf:c0:99:ab:
7f:3c:b5:cf:9a:be:89:21:86:40:1c:76:0a:9e:e4:f4:3f:a2:
76:0b:93:ce:fc:a5:62:d2:83:e8:08:f4:1b:63:81:9b:49:5c:
7e:24:6a:e0:28:80:6e:33:f0:e2:76:1a:61:c0:0e:27:4c:40:
a5:36:eb:b8:06:f8:fc:19:cd:ab:a2:e2:1b:c5:fa:f4:87:21:
5f:f1:cb:d7:5a:0b:4c:68:24:cf:c3:d3:30:2f:df:cd:57:bc:
47:a9:1f:1a:d6:ac:f1:bb:f2:5d:d6:36:e6:62:84:79:b1:13:
8f:63:f5:de:e9:2b:56:cb:6d:f8:d7:9a:f4:01:f2:b7:03:50:
5e:1a:cf:3f:62:5a:a9:e4:41:1f:e3:79:e1:e7:19:8c:dd:44:
7a:dd:79:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:07 2026 by rpki-client