Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File: ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier: W4D5Kgvzzti4bvuVULOwiPJszei2S0uSM8kiu4xsuYs=
Subject key identifier: 89:35:F5:DC:60:15:69:AF:43:3E:38:CD:AF:5A:5F:8D:14:D8:BA:25
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 019D2A72C9565E99B6F19453B1A7AC7D788B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 14:00:58 +0000
Manifest this update: Thu 26 Mar 2026 14:00:58 +0000
Manifest next update: Fri 27 Mar 2026 14:00:58 +0000
Files and hashes: 1: pEMOAtuePyeesz_PpC1UjRHNACE.roa (hash: 6RgHrtS23ZSyoQWavExnsqZLXuo4UZSBu3C0i/+czxA=)
2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: AVrbOBKmetBoxvf1MKUthHTrd8sSKPsIJ66jM7g2pJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:c9:56:5e:99:b6:f1:94:53:b1:a7:ac:7d:78:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Mar 26 14:00:58 2026 GMT
Not After : Mar 27 14:00:58 2026 GMT
Subject: CN=8935f5dc601569af433e38cdaf5a5f8d14d8ba25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:ec:72:d6:e1:37:6d:65:5a:b1:17:c3:d5:
b6:20:86:61:77:8c:d4:9d:da:60:d0:02:75:62:81:
a4:e0:2e:e4:57:52:56:6a:71:e9:71:27:b3:bb:db:
f1:4e:8f:47:f7:f8:95:15:98:ac:cd:fc:cf:a1:85:
cf:6c:62:3a:51:b4:a9:10:3f:87:b2:79:5b:a8:6f:
78:6b:44:c8:f7:cb:fb:06:c8:76:fe:24:a9:c9:c3:
30:91:46:97:35:56:25:5d:f0:cc:3e:31:01:7d:42:
16:a4:8c:42:95:7e:78:af:2d:62:ce:53:48:1a:af:
f1:67:37:eb:c8:34:e5:d1:15:4a:a1:a7:f9:5e:49:
a4:75:ec:e6:ec:d4:02:8b:7f:07:86:26:64:eb:fe:
95:b6:8d:ab:21:ed:73:75:19:eb:8b:e1:97:a0:37:
c1:82:4f:9d:c7:18:77:6b:fc:23:f3:25:cf:28:10:
3a:26:d9:b3:55:6e:a3:50:2c:4f:67:80:38:c3:51:
a8:e6:7d:f9:86:89:8f:d9:90:b7:19:88:75:68:11:
aa:4e:1e:f6:24:20:48:21:46:6b:c7:9a:50:0b:9a:
43:7b:0a:7d:df:0c:f3:07:c4:79:be:53:f7:42:f5:
46:b0:98:44:40:6e:20:bb:25:6c:32:eb:e6:22:13:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:35:F5:DC:60:15:69:AF:43:3E:38:CD:AF:5A:5F:8D:14:D8:BA:25
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:93:d9:88:dd:6d:ac:7d:44:37:64:66:07:ba:8b:4b:61:7e:
21:8e:6e:bd:a6:4b:f6:89:31:73:8d:f4:6e:8e:c6:42:8f:71:
3a:1b:f0:a4:91:2b:c5:3c:84:29:35:ce:35:5d:dd:f5:6a:5e:
cc:4f:46:be:a4:b7:2b:dc:af:88:86:4e:14:11:c8:f1:84:77:
58:5e:6b:ff:1a:ae:65:81:4e:db:d5:cb:fb:58:04:b4:d3:f4:
67:51:dd:98:92:ab:51:e7:9a:3a:14:22:8e:41:d2:bb:12:db:
8a:e9:be:da:3c:01:63:23:6e:7f:09:56:4f:e8:44:32:72:8c:
92:62:69:bc:d3:5e:68:e2:2d:f5:14:f8:55:00:dc:b9:e6:ea:
c8:29:35:93:c3:80:28:b6:a7:c8:08:17:80:cf:88:08:c0:5c:
ca:f6:01:06:d5:20:ea:65:c9:a6:9a:cf:73:93:34:e1:51:bd:
68:78:dc:c0:5d:1e:40:d3:40:6a:8a:c4:e5:6d:68:99:b5:13:
40:34:66:46:91:74:87:15:95:d3:96:d8:9c:b5:ef:72:66:e3:
65:7c:55:e4:a4:df:dc:b7:1f:89:e8:9a:32:e5:37:6d:51:bb:
d4:9b:fd:a2:ce:d6:1a:67:5f:34:2d:ed:4b:1f:23:0c:d7:b5:
f5:59:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:50:02 2026 by rpki-client