Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: 5C/xWwgsOpX878l0unPlFumx5QKUIGKgTBP/+9iqoCY=
Subject key identifier: C9:2E:DF:CC:BB:43:D2:80:E6:A6:A4:57:D2:6A:22:C6:A0:AD:67:A3
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 019D27A94B212018E9185ACC670A3F59304E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 1722
Signing time: Thu 26 Mar 2026 01:01:39 +0000
Manifest this update: Thu 26 Mar 2026 01:01:39 +0000
Manifest next update: Fri 27 Mar 2026 01:01:39 +0000
Files and hashes: 1: 9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa (hash: DwCSayZkRcTecU+QYNWzkQO84K94CzpgnweIdh3T7XA=)
2: ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa (hash: SYbuwV9RF98H2wnwET3rqVG/OV1l8TgwPl32TdMZOp4=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: Sp6uSfoJSDtbgiWXsGPCg0AIq5lLwLfren/c2weobWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:4b:21:20:18:e9:18:5a:cc:67:0a:3f:59:30:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Mar 26 01:01:39 2026 GMT
Not After : Mar 27 01:01:39 2026 GMT
Subject: CN=c92edfccbb43d280e6a6a457d26a22c6a0ad67a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:8b:4f:d1:3e:1c:64:8f:7d:6f:03:2c:13:
dc:06:1f:e5:23:7a:38:a9:82:fe:13:07:fb:d7:af:
f0:f1:02:44:c6:10:50:c9:df:52:60:27:0b:91:02:
e7:7c:8b:fd:21:86:1f:60:20:09:66:7e:be:99:1f:
b7:34:77:a5:d7:f2:8f:6d:8c:d3:40:e2:56:23:e7:
f0:91:22:c6:4a:81:25:dc:71:e9:07:a0:6d:60:f3:
d8:4d:ac:65:b1:76:28:3d:c3:9b:1c:7c:e2:52:17:
34:e0:81:79:61:a3:39:5e:1b:f2:56:4e:cd:d9:98:
20:63:4c:70:cb:b3:57:43:9f:be:cc:f8:4c:9b:fe:
ea:4c:24:71:10:e8:6c:06:f3:5e:7f:60:46:05:6b:
c9:cd:11:f8:8e:c5:0f:87:cc:3c:d6:01:dc:30:af:
5a:24:bc:ef:84:0b:e0:0e:2b:38:d1:5b:4a:60:8d:
cc:7e:c2:b1:62:6d:63:95:3c:a8:cd:53:f8:f7:4f:
4b:52:9c:ce:f0:e5:6d:20:15:66:44:60:f3:f4:95:
f3:75:f4:58:3f:7c:96:83:e0:d9:00:08:15:a7:5b:
fb:41:45:64:3b:fc:70:c7:9f:05:04:ab:48:20:de:
19:c7:bb:8a:22:52:01:2c:68:a3:41:cb:fc:f7:21:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2E:DF:CC:BB:43:D2:80:E6:A6:A4:57:D2:6A:22:C6:A0:AD:67:A3
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c3:be:f5:50:35:94:01:51:57:73:f5:d7:d1:a1:f5:76:ff:
96:3e:24:b7:d1:17:2b:0d:c8:e3:e1:43:be:95:97:30:3c:33:
a4:2b:33:d1:bd:73:d5:ee:1f:8d:b2:2e:18:e2:a6:4c:3f:01:
70:ef:a4:81:7c:b9:41:67:20:be:ee:c0:52:b6:fe:9a:8a:c3:
8f:0e:69:d7:ef:75:62:88:d0:3f:42:de:ec:45:ee:ec:1d:09:
f8:20:b7:ee:53:7b:96:c5:b8:57:cc:a3:9c:70:ce:4a:ec:ed:
4c:d5:99:b2:6d:c2:a2:13:58:ad:07:79:88:dc:87:5b:3b:48:
e3:7e:8a:b3:c1:dd:66:61:35:d5:74:3c:43:33:de:d5:da:05:
b1:16:30:1b:a0:5a:80:27:e0:3a:20:24:c0:5c:ad:7c:08:20:
c1:b8:c3:73:71:38:93:97:be:a2:8d:65:a6:2e:2f:d9:24:9c:
a5:18:a4:99:3b:05:8d:63:c4:cc:54:b7:7b:ef:26:7c:1f:db:
55:f0:5e:54:7b:c9:6d:fe:4b:ce:35:6d:83:c2:49:ca:c5:41:
54:ef:a8:7c:4d:40:8a:34:9d:a5:3c:2f:01:4b:cd:3a:21:22:
f0:ab:3b:0b:ae:e3:d3:0f:2b:b7:91:15:3c:36:3c:05:76:e8:
98:73:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:18 2026 by rpki-client