Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
File: yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft (raw, json)
Hash identifier: nAa/7tJpsmfAQtaNvr2oGfngHjw2ycjBYOd085Q7NOg=
Subject key identifier: 16:69:6F:58:E4:1B:D6:12:B3:0E:62:67:D9:74:30:54:90:41:1B:33
Authority key identifier: C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
Certificate issuer: /CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Certificate serial: 019D265F2674C7CA5201FF2D3CBDBBE36527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
Manifest number: 0F12
Signing time: Wed 25 Mar 2026 19:01:03 +0000
Manifest this update: Wed 25 Mar 2026 19:01:03 +0000
Manifest next update: Thu 26 Mar 2026 19:01:03 +0000
Files and hashes: 1: GGy-Y3qtJHTwmgKMMlrWordSkkw.roa (hash: IwMlZlSqIGS4j52rpaebXeLkd+a+qtlCjUwJrvEvqzo=)
2: yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl (hash: 3ZITWzR6BMQicaKz9qNrtGThvI0MMOxze97zQJhoexQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:26:74:c7:ca:52:01:ff:2d:3c:bd:bb:e3:65:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Validity
Not Before: Mar 25 19:01:03 2026 GMT
Not After : Mar 26 19:01:03 2026 GMT
Subject: CN=16696f58e41bd612b30e6267d974305490411b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:ae:4a:f2:8e:d9:2b:28:5b:cc:f8:b9:7a:
e3:c2:02:69:c2:ce:89:70:f3:49:86:ed:0e:69:17:
2d:77:f5:dd:e8:c8:43:d0:0e:b6:98:02:75:56:39:
ad:b8:8a:78:b3:23:5b:89:bd:5a:60:7d:71:5c:b3:
b2:ea:c8:c0:d6:95:cf:c7:1b:7a:14:09:40:c7:20:
f0:a6:3b:e6:79:86:2a:01:7f:a0:61:01:97:a8:ed:
4f:a4:ac:5c:69:bd:15:7c:e0:31:59:16:20:f6:ef:
7f:6a:ee:6b:b9:e3:97:8e:1f:2a:73:17:6a:1d:57:
55:ba:7f:52:86:70:84:c1:ad:04:a9:56:23:40:7b:
65:c5:45:9b:bf:9e:03:70:55:f6:30:1d:78:b9:90:
db:20:b0:3e:58:c7:22:8b:d6:ca:37:a1:31:5d:c2:
b7:74:46:00:13:b3:b2:8c:bd:23:3e:e6:20:17:e3:
4a:93:65:99:f9:8e:a3:84:73:c8:b9:78:94:ea:43:
40:8f:cf:4c:21:83:80:ae:a2:14:cd:92:57:1d:37:
96:f5:74:11:9a:0d:e5:ea:9e:fa:60:79:6d:59:5d:
4a:0c:32:49:4c:87:aa:41:75:e6:86:d0:b0:5d:a7:
1d:84:f7:b4:f9:8c:84:4c:4e:c9:c9:76:0b:f9:58:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:69:6F:58:E4:1B:D6:12:B3:0E:62:67:D9:74:30:54:90:41:1B:33
X509v3 Authority Key Identifier:
keyid:C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0a:d2:55:94:5f:9b:f3:3e:69:60:c3:e5:7a:51:32:7b:93:
67:e5:17:f9:36:9d:3c:ed:bc:92:fe:e6:c9:d7:a0:17:82:75:
90:f6:c1:fb:55:70:ea:55:f8:1b:33:11:59:39:15:03:b4:64:
04:77:ff:3a:38:35:ca:28:6a:a0:11:a8:30:ad:16:47:25:b6:
d9:40:2b:aa:97:f7:41:8b:f5:74:8b:de:c4:ff:65:bd:ab:85:
37:de:12:3d:44:5d:6e:ce:cf:7f:75:53:a6:ab:18:bb:c9:65:
51:c7:a1:48:ff:4c:fe:63:f7:a2:5f:b6:7d:9e:f6:8e:73:6e:
0d:df:5b:fa:2c:e3:ac:82:8a:0f:06:ec:d8:d8:9a:c2:c4:03:
c1:76:b7:6c:8e:3f:9e:85:45:4d:73:ef:84:09:3c:d7:3f:07:
82:e4:e6:df:73:34:29:e1:c7:74:7d:f5:bb:e7:08:47:e8:e6:
bb:16:63:12:20:25:bf:f4:2b:bc:56:33:81:d8:79:79:19:09:
2d:93:ca:2d:bc:2e:b5:43:d4:6e:e0:2c:be:2c:ab:9b:88:50:
8c:1e:10:8d:79:54:a4:5a:56:81:ed:3c:c3:64:85:9f:9a:74:
a2:e1:69:86:e3:d5:d9:bb:e1:6a:0a:9f:39:17:a8:bf:17:af:
27:1d:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:26:06 2026 by rpki-client