Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft
File: YVbhr9Z5oqcxH9atXfaZDlYY488.mft (raw, json)
Hash identifier: WKSu2JOMC7BMMt8792un5vSJZgHfu8zh4P4Nja6XLyc=
Subject key identifier: 1F:F3:45:99:48:18:72:FA:7F:D7:67:CD:49:F9:EF:36:FA:AB:7C:B2
Authority key identifier: 61:56:E1:AF:D6:79:A2:A7:31:1F:D6:AD:5D:F6:99:0E:56:18:E3:CF
Certificate issuer: /CN=6156e1afd679a2a7311fd6ad5df6990e5618e3cf
Certificate serial: 019D37F76CBE9D655D60C4D552E73ACC3E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft
Manifest number: 0125
Signing time: Sun 29 Mar 2026 05:00:55 +0000
Manifest this update: Sun 29 Mar 2026 05:00:55 +0000
Manifest next update: Mon 30 Mar 2026 05:00:55 +0000
Files and hashes: 1: X_U3e_j_BQQB5J7FdGp0EeARODQ.roa (hash: ttL/fkTTQSuG7aZuTgVJ2bkgv1TNShH60891lGd8qPs=)
2: YVbhr9Z5oqcxH9atXfaZDlYY488.crl (hash: SDuXV4PieHuLYcUslg0naQC0P/LnzppIIHl3geRqiSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft
rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6c:be:9d:65:5d:60:c4:d5:52:e7:3a:cc:3e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6156e1afd679a2a7311fd6ad5df6990e5618e3cf
Validity
Not Before: Mar 29 05:00:55 2026 GMT
Not After : Mar 30 05:00:55 2026 GMT
Subject: CN=1ff34599481872fa7fd767cd49f9ef36faab7cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:e6:44:5a:e9:22:ab:6a:a1:34:86:3d:bb:
dc:03:d1:32:38:47:e8:71:15:09:ce:55:0d:89:5c:
81:24:03:29:50:ba:ef:b7:29:5b:2d:db:38:7f:36:
c1:a9:aa:c1:01:57:71:de:e0:0d:6c:31:53:16:f5:
c5:ed:a9:6d:42:ae:7c:d8:07:6b:be:c7:86:4e:b8:
2d:17:6b:9b:61:41:22:3c:86:0d:ea:d3:91:c4:88:
50:22:75:91:44:8b:28:f7:38:74:d1:42:4a:10:bc:
38:67:f0:06:84:f7:58:0a:a6:8a:f3:95:bb:4d:50:
d6:ff:f0:15:78:9c:b9:4f:d2:09:3b:04:00:b7:68:
94:26:1d:d0:8b:15:77:e9:9e:fb:b7:d1:db:f2:01:
12:19:bf:91:63:bd:05:f6:26:c6:3a:6b:80:49:f7:
19:0a:1b:b1:1b:bc:77:84:a1:7e:ca:80:bd:6f:6e:
58:7f:ee:34:c1:97:ff:42:54:98:8b:9d:7d:af:aa:
2c:6a:a1:8e:3e:5d:4e:35:17:b3:cf:91:6a:20:15:
30:7e:81:2a:e0:54:88:e7:8c:f9:f5:ed:05:ec:49:
94:33:5e:d6:6d:57:93:f0:e8:0d:a6:f0:b1:41:f2:
2f:61:18:d9:7c:b8:1c:f0:99:ac:1d:d0:61:b4:fb:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F3:45:99:48:18:72:FA:7F:D7:67:CD:49:F9:EF:36:FA:AB:7C:B2
X509v3 Authority Key Identifier:
keyid:61:56:E1:AF:D6:79:A2:A7:31:1F:D6:AD:5D:F6:99:0E:56:18:E3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:e5:62:d7:a7:44:2c:53:2e:ad:83:7e:fe:de:f8:33:98:6d:
d0:cf:18:78:f9:5a:f2:6f:48:29:fe:73:30:7f:56:ec:0a:72:
cf:39:db:60:bc:0d:24:9c:48:02:c3:f9:5f:98:a2:a8:d2:5d:
e8:eb:96:4b:a2:c6:56:83:78:f3:56:37:84:ab:db:11:f6:0e:
40:12:33:fc:8c:83:02:86:68:e4:51:eb:6c:50:74:8c:89:b3:
0c:a8:8f:e9:ba:99:46:db:a4:ec:b9:e9:ed:af:c3:a2:b0:f1:
f6:68:1f:8e:46:72:43:58:90:94:e3:d3:5c:4f:c9:b6:57:1c:
d7:af:a6:7a:21:fd:af:a5:7a:05:3b:aa:1e:dd:7c:fa:b6:0c:
e1:44:28:e0:b4:81:44:54:62:7d:fa:5d:eb:97:5c:f6:2e:56:
b3:9d:44:fa:ef:47:66:9c:f7:38:0d:65:ce:d7:78:85:ba:37:
4b:ac:6d:a9:0d:30:ad:91:4d:d3:85:68:12:46:06:5a:6b:d1:
2c:8b:1e:e4:32:45:c4:e6:5e:b3:3d:f7:ce:e7:df:c2:d6:6d:
36:e7:43:77:ee:05:a3:a7:ef:49:4b:94:96:0b:fd:3e:77:b4:
52:df:b9:58:83:f4:49:58:75:9f:02:a8:c9:17:f0:bf:d9:19:
cb:f1:ae:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:23 2026 by rpki-client