Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: /eItr/uwrg2OVpC5NVb/my5xEdzu4yAiPPIj94T8WLQ=
Subject key identifier: 1E:48:27:5D:B5:80:BC:77:B0:A9:5F:24:41:FA:24:45:0E:82:1B:61
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019D27A8F1D615C432CFC30C0D61B3A694C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0F74
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: sPHidri7FB6ymGEIuSBqlHqw9bfT8V/CQzToPpHILGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f1:d6:15:c4:32:cf:c3:0c:0d:61:b3:a6:94:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=1e48275db580bc77b0a95f2441fa24450e821b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:49:0b:37:b5:1d:7a:f3:1d:c2:49:25:dd:
f7:58:1d:69:e4:f3:a4:4e:37:8e:0f:ec:1b:8e:45:
ea:44:97:51:b5:09:52:28:83:dd:7f:5e:c6:e4:cc:
89:d3:75:19:3f:35:f8:68:bc:45:f2:72:95:25:11:
40:76:4b:69:d5:2b:0f:f0:15:b5:ef:fa:e5:3b:bb:
d3:9f:c9:f1:d4:08:13:4d:0c:d1:0f:ee:dc:5b:d5:
c0:3f:10:d8:85:bb:d3:66:a9:2f:e3:4e:fd:90:3b:
e0:05:d3:3e:dc:fb:a0:7c:97:cd:29:78:ed:ff:bd:
b6:a0:df:21:33:11:2a:3f:73:f0:77:0d:03:d5:93:
17:67:3c:ff:38:48:09:6f:70:0d:4d:1c:02:6f:6b:
9e:c6:e5:f3:ff:ac:79:5a:73:43:28:f4:55:4a:95:
5a:eb:10:ab:19:60:2b:cb:a9:26:d3:5a:f9:8a:1b:
2d:5e:04:6d:f3:fc:58:f6:95:d2:f1:8e:8e:83:7b:
fc:e8:61:0b:23:ab:12:69:d5:c1:fd:b0:35:2a:4e:
bc:11:fc:42:92:e7:5c:c0:52:b7:a5:1b:6b:6c:e2:
95:c9:1b:55:39:36:33:0f:11:ba:73:ba:4f:cd:82:
17:b7:de:54:0c:78:56:4a:dc:33:77:65:f3:6b:b8:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:48:27:5D:B5:80:BC:77:B0:A9:5F:24:41:FA:24:45:0E:82:1B:61
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:80:01:0b:0d:31:44:de:c6:01:16:30:7b:2a:aa:b9:e4:5f:
af:c3:35:62:04:89:c4:72:68:1a:32:9a:fd:c0:39:ff:fa:fd:
1c:f2:88:53:1e:da:96:8f:f8:fd:a7:7a:f1:13:fb:44:e3:af:
fc:73:e5:7d:15:cb:2e:70:ea:1d:b4:e0:78:1b:19:18:a4:31:
83:6f:18:83:d5:8c:fe:d5:83:e9:0e:78:40:cc:bc:d2:7a:c7:
84:02:7b:5b:f6:de:4b:69:1d:d3:d9:b3:af:48:d9:ed:c7:3e:
5f:d0:42:05:31:7e:e8:3e:39:28:67:ce:41:25:37:56:79:ee:
08:dd:18:b8:f2:e3:55:31:a7:62:15:42:1a:9a:b0:63:97:3c:
fa:c3:ce:11:8d:16:51:c4:21:2b:98:6c:c7:08:9d:4c:d0:02:
ac:a1:b4:18:37:f2:56:16:61:94:37:cb:c1:bc:79:1e:c9:8a:
88:f6:a2:65:b1:00:66:d3:39:4f:f4:9a:e8:bd:92:ab:86:77:
d5:81:62:3a:ca:69:e7:63:52:45:82:9d:76:42:b3:0e:f4:bf:
38:8c:be:c6:67:a3:90:56:a2:be:c5:e3:ef:18:f7:38:92:1b:
45:12:e7:68:5f:31:eb:2a:3b:95:95:ec:20:ad:ab:09:a1:94:
38:94:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:23 2026 by rpki-client