Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
File: ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft (raw, json)
Hash identifier: HsAIplultTxejsuwvslfPUUoFCoIio7KERB7s3MuoWE=
Subject key identifier: 35:C3:67:EF:86:84:E2:8B:2F:E6:20:49:A0:A7:05:9F:04:E5:53:BC
Authority key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
Certificate issuer: /CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Certificate serial: 019D37F762A30D8D26F352BCB86D4BDCA47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
Manifest number: 05DD
Signing time: Sun 29 Mar 2026 05:00:52 +0000
Manifest this update: Sun 29 Mar 2026 05:00:52 +0000
Manifest next update: Mon 30 Mar 2026 05:00:52 +0000
Files and hashes: 1: WdcwwVvHHM9XNKKDiv408pGW0_s.roa (hash: 8+/x9c3F4SvSIKBaDBTfqOk6wDn1R73L7fhpNgptXLw=)
2: ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl (hash: vjm11bIkn5+e4FUVe3ApDNGv6n4hHQh8tX8fIjKWiBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:62:a3:0d:8d:26:f3:52:bc:b8:6d:4b:dc:a4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Validity
Not Before: Mar 29 05:00:52 2026 GMT
Not After : Mar 30 05:00:52 2026 GMT
Subject: CN=35c367ef8684e28b2fe62049a0a7059f04e553bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:f9:13:37:f9:34:e8:93:7b:6b:66:e7:54:
88:08:86:66:56:09:c4:3c:be:50:f6:c3:cc:e6:bb:
f9:fb:85:42:da:51:a6:ff:c9:ef:e2:c4:ed:0f:bb:
82:ee:ab:55:c5:de:fd:d0:17:4d:b9:f0:29:13:b5:
00:7a:e5:4a:3a:79:35:42:de:c0:8b:19:f4:4f:89:
1b:e6:1b:f4:c4:01:4a:30:a1:52:d9:8b:2c:91:9e:
92:51:c1:b9:6d:84:65:43:f5:c0:2d:1e:e4:ce:90:
b5:28:f5:0d:5d:0a:aa:85:90:11:22:d6:99:36:57:
e6:ea:cf:2e:6f:72:07:3a:80:13:49:8a:23:ee:70:
22:37:e6:cb:b5:aa:12:07:cc:9d:66:09:b2:fe:c1:
47:8c:2c:8f:a3:0f:b4:0f:85:c5:8d:c7:63:3f:a5:
8f:4f:3a:8e:e5:a8:58:30:46:8c:09:fb:c8:15:56:
19:91:8d:8f:84:0c:e9:3f:0b:af:b4:8b:41:61:f0:
5a:c1:26:94:8e:51:47:0e:2b:ab:ce:f6:63:4b:39:
34:43:c5:37:19:dc:77:30:d1:20:53:38:f4:4a:31:
98:97:6b:3d:2d:a7:77:25:c6:ed:2b:f6:c2:2c:40:
85:91:cf:4f:70:7e:c2:d2:39:bb:ab:d0:6f:0f:88:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:67:EF:86:84:E2:8B:2F:E6:20:49:A0:A7:05:9F:04:E5:53:BC
X509v3 Authority Key Identifier:
keyid:CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:13:08:68:f9:bf:01:ed:7e:31:26:5e:56:20:13:f5:92:ba:
10:d2:30:9c:54:ed:71:6b:00:f5:e9:62:4c:62:8b:10:7a:7b:
3a:c2:dc:85:45:cf:6a:6a:24:b6:d4:8c:6d:0d:77:6f:b6:fd:
11:91:cd:90:c9:ac:c1:83:d2:64:84:9e:eb:b4:80:a1:3f:47:
9c:1d:66:ee:cf:87:18:f5:04:3b:56:5c:57:4a:2d:da:28:32:
54:53:80:09:86:e1:77:ce:99:9e:85:36:ad:77:85:5a:73:b4:
85:67:42:33:33:b1:d5:26:af:0e:89:a1:6e:92:92:f7:2a:39:
f5:0b:f6:6a:1f:02:47:72:03:5b:08:7c:cc:6c:29:80:d6:28:
6b:13:66:53:2c:ac:7b:70:e0:4d:19:b7:f9:f1:30:a6:90:af:
bc:c8:97:d5:71:d8:f9:ed:0f:0c:c5:80:99:30:b1:55:e5:30:
4b:d4:90:d0:62:6d:6c:ce:8f:c4:cc:5c:84:df:1f:0e:0c:4a:
c8:f3:3c:b5:dd:d4:f6:37:cc:ee:2e:b5:2a:8b:b2:4d:2a:21:
3e:df:b1:f1:a2:fe:16:a0:f5:d2:b5:8f:86:50:6d:f6:45:05:
0b:bb:a8:16:35:6b:66:78:8e:60:c5:9a:6e:ab:42:93:9b:0a:
9c:f9:f3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:43 2026 by rpki-client