Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json)
Hash identifier: +dLgTxt5E48nQzFOGdLONNy5FRSB3936wIBl7CSTsvY=
Subject key identifier: 8F:D9:F7:16:EC:8B:18:4E:DD:D6:7B:EB:67:C5:C5:62:90:B3:9B:A8
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 019D382EA19F9CC8EEC7A50CC98AE158A671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
Manifest number: 0559
Signing time: Sun 29 Mar 2026 06:01:13 +0000
Manifest this update: Sun 29 Mar 2026 06:01:13 +0000
Manifest next update: Mon 30 Mar 2026 06:01:13 +0000
Files and hashes: 1: 4PMuCFyBSoj7qyq3rjq0aPdFuCI.roa (hash: kOdph/hAaSpeDx3Y3960ZxqCLZYMPimF4UrI1AiHxJA=)
2: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: oPwmcbNqBrHxjcwa1i8UQrGViofhoiCtJkkFWAzNP2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a1:9f:9c:c8:ee:c7:a5:0c:c9:8a:e1:58:a6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: Mar 29 06:01:13 2026 GMT
Not After : Mar 30 06:01:13 2026 GMT
Subject: CN=8fd9f716ec8b184eddd67beb67c5c56290b39ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:de:94:22:9e:44:67:0a:28:11:67:ae:27:
5c:aa:e8:cc:ab:7b:25:d3:67:4d:a8:a7:c9:6d:73:
88:c8:73:5a:09:b1:ee:ae:66:e9:bd:4d:5c:d6:63:
73:97:6d:91:78:32:d6:f9:2a:00:06:08:a1:c0:11:
fe:ed:2e:c5:f8:49:93:2f:2f:ef:cc:c3:58:26:14:
05:23:49:0b:ce:89:f3:88:cb:7b:9a:73:94:aa:22:
f6:87:fc:2a:e6:86:d9:6c:95:40:a9:bd:e8:d8:35:
dd:19:2d:b3:76:01:8c:df:ca:17:dc:8c:3a:83:6b:
a8:d5:ee:cc:ed:86:ab:46:97:be:85:a8:2d:b1:a2:
d5:52:4d:54:cb:80:73:de:fa:11:ec:d7:77:26:e0:
47:09:4a:d0:fd:f1:45:6f:57:d7:15:ad:a4:03:0e:
91:6d:03:1c:b0:89:24:d6:cb:cc:2f:50:4a:06:69:
17:4d:ef:a9:87:6e:af:a4:ab:91:4d:b8:d8:de:95:
f7:1a:aa:47:2a:b7:96:7f:79:d8:96:09:0d:25:47:
fd:1d:ed:07:62:59:c5:a6:fb:fd:e6:97:31:ac:b1:
1c:85:0c:8b:27:56:57:a4:fe:23:2b:3f:13:7d:9d:
66:c4:52:29:c6:ce:af:eb:52:39:e4:57:9d:44:6b:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D9:F7:16:EC:8B:18:4E:DD:D6:7B:EB:67:C5:C5:62:90:B3:9B:A8
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:25:28:6a:e1:f3:42:ff:c6:bc:7b:57:80:79:ac:b8:c5:76:
58:70:2d:44:3a:7c:ba:fd:27:8f:53:51:8c:2e:71:7a:cb:64:
73:45:5e:e4:72:af:34:be:bc:b3:a0:30:81:30:98:5c:56:d3:
31:d7:a6:52:59:58:31:52:1b:f5:05:ff:4f:2e:95:1e:1f:9b:
41:c2:a9:4b:76:56:68:91:27:07:2d:4b:3e:3a:82:1c:53:46:
40:3b:d3:00:47:83:b7:32:01:50:f5:f6:d7:f6:a0:a7:71:e0:
23:80:b1:22:3f:33:fd:ac:50:2c:d2:bb:77:28:72:06:1d:c3:
5a:c5:61:12:d7:b5:b5:ee:59:d0:c9:0e:65:b6:67:6a:26:17:
7e:70:b2:a1:c1:0e:fb:04:8d:ef:da:e8:1d:09:33:ce:ef:94:
10:a1:29:99:da:6b:c4:b8:64:90:e2:5b:c1:84:81:ce:80:e2:
30:ee:74:39:e3:dd:9d:a1:6e:a5:a7:d9:71:8d:5e:57:4c:5c:
8f:47:d8:69:13:96:6b:34:ef:2f:4a:47:53:67:f5:f1:65:f5:
85:a5:16:1d:7e:87:0d:d2:a8:1b:7c:32:67:33:0a:08:da:56:
e3:ef:0e:b3:89:7d:72:e3:e3:57:be:03:0c:8d:a9:9c:62:0a:
8b:88:8c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:37 2026 by rpki-client