Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
File: yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json)
Hash identifier: QuVYqPql99b1o5UJoXmWf9dQUjlXvW1jzEl5MozBlgE=
Subject key identifier: A9:56:77:35:A8:4E:0F:0A:60:D3:2F:A3:44:C2:D1:69:1C:2D:A7:01
Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
Certificate issuer: /CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Certificate serial: 019D27A9167B02828435D99A83128EE7DF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
Manifest number: 17CC
Signing time: Thu 26 Mar 2026 01:01:25 +0000
Manifest this update: Thu 26 Mar 2026 01:01:25 +0000
Manifest next update: Fri 27 Mar 2026 01:01:25 +0000
Files and hashes: 1: mhN_hNZ1j8lwPoNsrGHb44SIv-s.roa (hash: hJkkP4O0XxAi785LCkE7R27Ypx1r454excqvJY+K/QE=)
2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: MR1md/9iSi3imqO6v0cUVC1pNlSY7ktEMI8W902kHQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:16:7b:02:82:84:35:d9:9a:83:12:8e:e7:df:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Validity
Not Before: Mar 26 01:01:25 2026 GMT
Not After : Mar 27 01:01:25 2026 GMT
Subject: CN=a9567735a84e0f0a60d32fa344c2d1691c2da701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d9:f4:d7:0f:c1:59:f1:0c:30:e0:5e:06:0a:
50:52:56:20:1e:d1:ca:ce:43:2a:ee:7b:91:2b:a5:
b3:b0:35:1b:da:e9:4b:dc:42:5b:22:ff:64:9e:80:
f7:56:4b:42:7b:91:16:2e:70:0d:c6:9a:ef:e0:00:
2f:5b:ac:aa:79:bc:c6:53:2a:a5:13:de:e6:43:ef:
e9:e3:3c:b0:75:20:06:12:e3:01:0e:87:15:f1:cc:
6f:87:48:50:34:3d:c8:84:8f:db:fd:b0:94:89:f8:
08:d9:9e:0d:66:55:f6:9c:6d:43:0a:87:5d:40:1b:
65:da:3c:cd:1c:5d:40:87:44:a6:94:63:57:49:fa:
a6:a9:f0:ba:80:17:36:02:bb:03:f5:ad:9c:4f:e3:
e6:b1:10:49:21:8f:75:7f:c4:79:7b:2e:b8:cf:88:
ac:4b:7e:88:bd:6c:18:df:32:f3:d3:49:91:56:2c:
5c:06:37:5c:0f:3b:00:9e:bd:e6:a5:bf:f0:32:2c:
e0:dd:04:b6:e6:1a:d0:0d:65:e1:82:0b:42:15:38:
71:37:41:09:24:fd:95:0e:80:e4:72:07:be:7b:76:
1e:35:cc:f7:e2:9e:9d:52:f0:8c:fc:ae:ef:69:a6:
ef:2c:c7:cb:98:aa:e9:b5:9d:c3:23:fc:f2:d3:88:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:56:77:35:A8:4E:0F:0A:60:D3:2F:A3:44:C2:D1:69:1C:2D:A7:01
X509v3 Authority Key Identifier:
keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:61:07:2e:32:91:2d:06:f9:d1:af:b4:d6:9a:78:a0:34:bf:
8c:71:81:0f:fe:a0:91:dd:40:6a:6f:d6:80:d2:76:07:7d:9b:
ed:ba:46:5b:17:19:33:38:42:ef:72:42:f9:5a:28:8a:41:6b:
a0:5e:e5:1a:30:45:9c:e3:46:ed:0f:82:d9:ce:3f:0f:73:5a:
36:f4:7b:be:2a:ad:9e:f5:bf:9d:59:1b:12:c5:b8:06:d0:c9:
1f:a5:f3:87:45:25:29:43:a0:47:25:45:27:7f:6a:26:3d:79:
38:74:8d:ba:8d:90:eb:c8:0d:40:70:2a:4c:07:fa:0a:3e:be:
08:3f:0d:97:6e:89:3e:2e:18:6a:83:60:b8:8b:7a:0e:ec:fd:
14:26:53:7b:29:44:bf:fa:58:26:27:6b:50:28:46:a3:fc:81:
7a:5b:fb:eb:66:27:e5:f5:df:32:73:fe:d7:74:b1:2f:68:a9:
a4:22:90:d4:ac:f3:72:66:86:dc:96:d2:2a:2f:c5:c9:d2:32:
f1:2b:c4:fc:17:84:2b:94:52:61:16:14:7f:be:9d:05:37:5a:
fc:ff:78:6c:d5:77:16:1f:ea:88:81:63:d3:83:55:3f:db:ad:
21:33:d6:dd:ad:b8:f1:77:14:dc:2e:fb:04:c8:2f:2c:23:e4:
4d:86:32:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:30:48 2026 by rpki-client