Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: HXyEqdJyarBarEV+xc4L2XSgAvWJNOgXU2hVLxaSkfM=
Subject key identifier: FC:2A:E8:81:E0:B5:3E:1D:02:7D:46:68:2F:BD:B6:44:0F:F0:55:20
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 019D265F07B7D628855189D033B201C03D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:00:55 +0000
Manifest this update: Wed 25 Mar 2026 19:00:55 +0000
Manifest next update: Thu 26 Mar 2026 19:00:55 +0000
Files and hashes: 1: AbBA99jT8eQOwVRDlfvpJvgpbPo.roa (hash: STn2llVbUbpZKFu8EoltWnBFEcnPCMGc/9TugXrP4cw=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: iC6jouqF/Pz7okVC9ctw/XGkSKiCZBC8RbeDJOCMI94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:07:b7:d6:28:85:51:89:d0:33:b2:01:c0:3d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Mar 25 19:00:55 2026 GMT
Not After : Mar 26 19:00:55 2026 GMT
Subject: CN=fc2ae881e0b53e1d027d46682fbdb6440ff05520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:73:58:19:9b:ec:ac:55:e7:ab:91:62:9e:
e8:a0:d3:4c:1d:ad:bb:01:2d:ad:2a:9b:6d:4a:7e:
17:57:03:5b:1e:b5:df:96:3c:e9:ac:9f:8a:42:34:
9a:89:87:b0:ae:cd:85:1f:14:f7:a4:9b:f7:a5:ae:
33:b0:0a:b5:d7:38:60:15:f1:4a:ea:99:e4:31:13:
ca:35:15:63:2f:7d:a1:1a:a9:b4:03:6b:6c:f4:e1:
85:5d:c9:5e:4b:9d:c8:fa:4e:de:c8:f9:b8:99:b9:
68:d3:a5:dd:20:60:d7:34:6a:5e:03:ea:5d:32:4f:
02:da:49:b9:5c:f5:2b:59:cc:45:8d:b0:36:38:43:
c7:73:03:ed:d9:1f:13:fd:69:62:09:d9:2e:e4:08:
ef:52:fe:f6:95:9f:e6:bf:b3:21:65:72:96:3f:02:
48:00:25:38:ea:b4:26:99:ec:08:ca:89:a4:d5:b7:
1d:e7:a5:23:4e:f1:61:3c:e5:31:9a:22:93:bf:26:
06:03:23:4b:04:d1:a1:f9:f4:97:22:eb:39:7b:7c:
7f:90:41:09:14:c2:6c:cb:44:51:da:4d:c9:1f:78:
a4:ca:34:85:a1:4c:bf:ea:80:be:f0:c3:1f:5b:08:
48:dd:77:b3:db:ec:72:83:1e:32:36:eb:b4:d7:61:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2A:E8:81:E0:B5:3E:1D:02:7D:46:68:2F:BD:B6:44:0F:F0:55:20
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b3:92:06:b0:52:04:6f:86:d1:a7:ba:3c:94:67:09:14:0b:
ca:29:7f:b0:b5:f4:c2:92:4b:49:fb:64:0f:61:86:fa:68:37:
09:8c:b6:a6:3a:64:2a:50:f5:5b:7d:01:4a:7d:af:17:0e:2a:
a5:08:d4:53:7d:ce:d5:5c:7f:84:a2:fa:f9:5d:bb:99:50:a0:
61:f9:11:56:fc:81:bc:68:0d:2f:43:4c:47:d7:f5:8e:14:78:
bb:92:52:75:b9:af:c5:e2:ae:27:d3:d6:a2:eb:94:5a:72:42:
1e:f8:bd:58:a5:d5:23:2e:47:b6:e0:37:20:f9:da:61:de:21:
0b:8d:55:1b:8b:b1:bf:06:61:29:60:d6:ae:b4:0c:9b:96:f0:
40:dd:c6:d2:69:c4:24:a2:ef:4f:35:41:d1:2d:93:12:cc:43:
38:da:b1:fc:4a:70:a4:24:a0:ba:23:c4:27:18:6c:6d:2a:1e:
17:6a:e7:2e:de:43:f6:b2:1f:f8:21:51:b1:ea:78:fe:02:81:
56:3d:32:35:11:e0:eb:b7:6e:ec:18:89:35:0a:f1:7c:0a:cc:
98:43:b7:3a:05:b1:af:b1:db:b2:00:29:7b:0a:3c:a4:bf:80:
08:a0:63:42:8e:fd:e4:65:57:18:da:b4:f7:18:d5:76:a5:28:
c4:1e:43:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:41 2026 by rpki-client