Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier: eUjtjEhq+QmxaKLcsCqPxxQQq2Vb+057sJ7x6KA0Cgk=
Subject key identifier: 9E:CF:D0:D1:AD:5B:6C:F9:B5:C6:45:43:6C:8C:BC:C9:65:1C:EF:70
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial: 019D265F8A8C2F03832509A5EA46B52BC8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number: 10A5
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: JiLL-z0AATIJkLmkmmltbZk5ON4.roa (hash: eZfI9F6qWUApvxYWZuIJG2uhH1zxpRLF119eP4amocA=)
2: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: iO2waajUWpOnMBzpM1G/6cqMyNhmVfHRXzGXlF2xLLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:8a:8c:2f:03:83:25:09:a5:ea:46:b5:2b:c8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=9ecfd0d1ad5b6cf9b5c645436c8cbcc9651cef70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:1f:ac:49:df:2d:91:69:e5:60:9c:c7:2c:
33:48:17:82:a7:92:12:15:0b:90:dc:be:49:88:06:
fe:e5:81:76:0b:14:ae:78:53:ad:fa:28:74:cb:25:
f0:59:bd:34:a8:70:40:ed:ef:2b:83:56:53:7b:5d:
f8:03:8c:c0:bc:07:73:b1:e8:3c:64:c0:4d:aa:ef:
90:04:59:c0:a6:c7:16:c0:28:fa:20:d5:08:ef:88:
4e:67:84:53:22:17:5b:3a:0b:6a:00:3e:28:1d:ae:
80:fd:84:44:92:5e:b1:a3:60:1d:1a:f6:26:d4:e1:
62:a3:bf:24:78:07:74:84:92:72:0b:29:df:c6:e1:
f3:5e:8f:d6:f1:d8:57:8c:1d:19:32:46:5e:1f:ca:
54:da:eb:4f:55:4a:1c:1e:7f:fb:07:c7:e9:17:f3:
57:22:b5:2f:ff:ae:68:07:de:79:93:f6:a2:93:60:
9d:28:3a:c4:95:2f:40:86:35:08:f0:be:82:04:1c:
4d:01:ae:b2:1c:fc:69:ba:85:ca:a1:68:90:6f:d2:
e9:50:24:06:bb:af:bf:62:53:69:4a:5a:7b:35:91:
66:6a:ec:c1:54:33:5c:0f:b6:82:8f:6e:b6:f7:79:
be:ce:84:0c:4d:34:b3:b8:6d:af:70:6d:76:be:a9:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:D0:D1:AD:5B:6C:F9:B5:C6:45:43:6C:8C:BC:C9:65:1C:EF:70
X509v3 Authority Key Identifier:
keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:af:4f:99:b5:de:8a:b2:a4:5c:63:e3:e1:2b:b5:84:26:e0:
68:0c:d2:45:7d:17:e0:e6:70:e4:b8:80:74:73:7c:09:e7:78:
62:97:e9:8c:ac:db:8e:00:4f:a7:ef:8b:a1:ea:35:56:fe:92:
f7:b0:f6:44:f7:68:62:aa:3f:65:ec:41:00:55:32:4c:6f:03:
85:ef:06:1f:87:34:23:c8:30:6a:71:0e:5b:dc:7a:34:1a:24:
6c:cd:6e:fc:cc:e7:9a:8a:e4:09:6f:5d:a0:8f:ae:cc:7c:01:
c8:59:70:16:bd:f8:c3:13:29:36:7d:0c:35:24:5d:25:b0:cb:
08:5b:a7:19:00:ec:1d:fe:2f:c8:8a:02:93:01:b3:19:af:6c:
63:33:cc:7b:3a:48:59:c1:4f:3d:f5:f2:1f:a7:50:b9:66:22:
1d:d9:80:c6:73:7c:40:2b:05:0f:16:2e:74:b8:ab:39:6b:b8:
85:d9:67:dd:5e:3c:9d:6f:5b:44:3c:f1:c0:3c:26:79:fe:9f:
dc:6f:1c:6c:6c:72:4b:87:1f:0d:30:a1:74:c3:e8:6a:72:e2:
9b:f9:78:6c:4c:b4:80:5b:07:28:24:03:c7:36:34:a6:91:39:
74:26:ef:b3:74:08:a7:0c:23:ac:96:b8:92:46:16:0e:f9:26:
4d:d3:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:39 2026 by rpki-client