Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: HHx4yeaoagYACBJGZ8yEfykDJ3LZ+WGOEFYzoOL4wcA=
Subject key identifier: C3:0B:87:93:6D:CA:65:96:A8:DC:4A:33:E8:09:C9:30:3C:C0:72:78
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 019D28847268065F6FFB46233312CEE228D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 1135
Signing time: Thu 26 Mar 2026 05:01:01 +0000
Manifest this update: Thu 26 Mar 2026 05:01:01 +0000
Manifest next update: Fri 27 Mar 2026 05:01:01 +0000
Files and hashes: 1: 0Lwj5i1c4Zxo9S7reLT043tZQto.roa (hash: YQ43Pzm8kIwiUn3utvGc8HdrkEgRWVgYKvbGV3IgZ04=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: nEvjqrZDRoQe6Dl/WQ/UM8Atl+lqEs/+c2KqTtwR52k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:72:68:06:5f:6f:fb:46:23:33:12:ce:e2:28:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Mar 26 05:01:01 2026 GMT
Not After : Mar 27 05:01:01 2026 GMT
Subject: CN=c30b87936dca6596a8dc4a33e809c9303cc07278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:ca:08:ab:f9:61:ab:27:0e:5a:a0:f3:a2:
3c:ec:d3:8f:48:45:b2:d7:d1:dc:0e:64:8c:d2:80:
88:32:95:4a:be:ea:89:eb:e8:af:a5:97:cc:7e:79:
54:6a:fc:50:34:84:bf:52:08:8c:65:41:8f:79:97:
bb:83:49:b4:6a:94:a5:79:ac:dc:e1:d7:44:64:53:
1a:97:f6:7e:d0:87:2a:b8:be:df:3f:84:17:ee:b7:
42:52:83:32:01:f9:24:96:40:63:37:da:34:81:e1:
d1:53:0d:a4:cd:cb:ce:24:15:50:46:8a:d9:3a:13:
76:9e:5c:09:84:52:49:b7:03:ed:da:a4:95:4c:64:
e7:41:3c:e0:19:8f:08:34:f6:e3:b6:fc:17:c3:19:
79:a4:ce:6a:a6:cf:5a:4d:47:5a:c8:33:5e:5b:c4:
fb:46:f2:c8:a3:64:3c:cd:31:5c:40:3f:ca:8a:7a:
f8:f0:2f:6d:8c:5f:3a:a3:cb:f4:2c:11:26:d1:87:
17:ad:90:ed:ba:ac:d9:bd:be:92:17:4a:2b:c6:c6:
35:bc:4d:00:aa:f2:ea:a4:d0:f4:e0:19:9e:df:71:
2a:c9:ec:4a:20:75:84:d3:fb:ac:96:92:a7:11:db:
42:17:e5:33:4f:ea:cd:be:11:04:43:75:80:bf:53:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0B:87:93:6D:CA:65:96:A8:DC:4A:33:E8:09:C9:30:3C:C0:72:78
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cf:6f:c0:e9:e4:60:25:0c:74:b7:08:6b:9a:3e:8f:3d:62:
65:bd:62:81:c0:07:83:4f:5c:3b:d7:f6:e8:dc:19:9f:77:2c:
46:3c:6c:c1:3f:45:72:6c:09:79:a2:a2:bb:1f:60:ac:97:a3:
b8:d3:e4:04:7d:80:53:aa:e8:d3:be:44:b5:9c:16:58:5d:13:
9b:70:c4:c8:3e:14:e3:12:60:3a:ea:59:2a:b8:7b:73:59:1a:
81:18:4d:46:fc:d4:23:ea:79:7c:0c:d6:13:f9:1e:dc:08:fa:
53:c6:9c:23:98:88:7c:c8:b0:39:5f:e4:b6:49:6a:02:00:b6:
cc:95:23:39:65:62:0d:b8:23:d7:30:ab:f0:c1:07:22:4b:ec:
06:57:7a:6b:35:7f:70:b5:d3:54:01:91:71:c3:be:cc:1c:35:
2c:b6:66:be:85:67:bc:a9:41:90:76:48:f1:48:99:b6:e8:6c:
6c:2c:f1:bb:d1:70:73:47:bf:32:6f:47:48:12:c4:b3:ea:eb:
d0:e2:07:85:bf:9e:39:54:17:e0:44:44:46:bb:bd:d1:b3:90:
2b:c7:d2:ba:13:7b:07:bf:48:c8:60:63:93:1a:c0:6d:50:cf:
ae:46:0a:81:37:14:ab:8f:e3:74:de:2b:d5:db:ef:76:79:90:
0d:58:37:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:30 2026 by rpki-client