Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier: ssp3JfRLxHgitFa3UDNeZvH+6Uu5T+1V+oBdI39w6p4=
Subject key identifier: F2:13:B4:B9:31:AF:B3:79:10:E4:4D:B3:70:B5:13:B7:A4:72:44:EA
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 019D265F009075529D529FF466B49EEC4E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number: 14BB
Signing time: Wed 25 Mar 2026 19:00:53 +0000
Manifest this update: Wed 25 Mar 2026 19:00:53 +0000
Manifest next update: Thu 26 Mar 2026 19:00:53 +0000
Files and hashes: 1: 9KLhgHdDNsZBBUFEIyheUzLt-c0.roa (hash: c+1HpuSdzLNeAztTtHz4t/e6e0WWME4OFHOVd3MSwEs=)
2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: T1NXMkUnuQMhLNrp1NZtKIGrwR9lbP/yFJiZ9mKYhXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:00:90:75:52:9d:52:9f:f4:66:b4:9e:ec:4e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Mar 25 19:00:53 2026 GMT
Not After : Mar 26 19:00:53 2026 GMT
Subject: CN=f213b4b931afb37910e44db370b513b7a47244ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:c7:52:35:3c:a6:63:ff:ac:df:7c:a1:80:
b7:b3:7e:c6:32:d6:8b:ec:4d:ae:61:03:c7:bf:e1:
30:89:80:2e:3b:d9:19:db:65:46:88:f1:e4:29:29:
fa:d4:2c:16:80:b1:64:92:69:38:30:c4:2f:dd:62:
51:e9:32:58:29:b1:98:75:86:54:74:6a:97:c6:b8:
ad:09:f0:12:ce:2d:a3:56:f1:37:3d:e6:89:b1:87:
83:0e:c4:c9:e1:e3:2b:fe:27:fb:79:85:4e:58:0d:
bf:76:45:ba:2d:17:76:3a:6b:bd:d4:ff:9e:4b:31:
6a:58:37:b1:0f:4d:19:2e:fc:46:fe:98:9b:3c:0c:
b2:a7:d1:bf:f1:1a:de:5e:de:a3:d5:a0:da:38:c4:
8b:37:5c:2f:44:be:12:22:ce:58:3f:1e:80:20:cd:
04:2e:9b:7f:e1:eb:d2:3c:45:e7:47:45:06:c9:95:
46:6a:07:c9:72:36:f2:1d:b0:be:31:61:3f:4d:86:
83:6b:cf:3c:7d:05:18:db:5c:fd:67:ad:7a:69:b1:
a3:9b:30:6a:7b:c5:01:35:dc:e8:d9:7b:9b:05:45:
f6:5c:94:56:ab:ce:35:06:c5:27:36:ac:f9:3f:31:
70:69:a7:74:7c:82:8e:5a:b3:97:94:06:bf:d6:f6:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:13:B4:B9:31:AF:B3:79:10:E4:4D:B3:70:B5:13:B7:A4:72:44:EA
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:31:c9:31:fb:23:2d:c1:b6:1a:d6:31:75:f6:61:3d:06:68:
54:ae:2e:fa:e5:cd:70:89:b6:5a:a1:db:ad:b5:ea:27:51:8d:
b3:cd:20:7d:85:ff:91:5d:86:9c:6d:79:72:c5:e5:ab:47:a7:
39:bf:e0:f5:26:d4:54:1f:51:77:12:0b:3e:58:e8:e9:a5:d2:
1a:65:e7:aa:d9:56:49:5c:51:3c:da:75:bf:db:22:86:0e:c6:
fa:c9:c5:32:f5:22:52:56:79:95:9d:80:ed:a6:fc:2b:65:04:
69:a6:b8:c9:a6:13:bf:c9:86:c9:6f:6c:42:e8:2d:01:b6:6d:
88:b6:32:40:eb:b3:10:28:cb:58:5a:ca:95:f6:62:fa:92:b9:
33:4d:1d:8f:73:a7:cc:f1:e8:46:76:39:bd:2a:84:1f:71:38:
2e:2c:fd:b7:41:d4:a9:bb:f3:8c:db:d0:12:45:cb:02:41:b8:
00:bd:98:d3:06:82:c9:2c:13:2b:5b:2e:ba:34:b0:2e:d8:06:
70:b3:a7:d9:02:cb:c7:db:06:29:51:3b:08:e9:01:9a:4e:c9:
ba:ef:9d:d0:fa:96:f8:6c:16:d6:b3:a2:80:c9:1d:f8:1f:82:
2a:82:e1:ff:f5:1e:03:df:9b:2c:c6:45:f2:03:33:b4:2e:58:
ca:da:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:24 2026 by rpki-client