Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
File: yBEbEYJKUeh1t-BnsErHj97koRw.mft (raw, json)
Hash identifier: w2GewjkPK7jnugav0XquNg5T9m2pIrvGU47SJj+aScw=
Subject key identifier: A2:B4:72:F0:C5:72:E3:80:DB:B3:C7:D2:94:88:0E:E7:E1:7E:80:D7
Authority key identifier: C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
Certificate issuer: /CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Certificate serial: 019D375236F1B1FB6F7DF0D6A715E80F1BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
Manifest number: 1A
Signing time: Sun 29 Mar 2026 02:00:28 +0000
Manifest this update: Sun 29 Mar 2026 02:00:28 +0000
Manifest next update: Mon 30 Mar 2026 02:00:28 +0000
Files and hashes: 1: a6qm2G8bP-6TfcIWHf4qN9k0lXk.roa (hash: AAGltJSHEt26RftxskOpRrCiKKvAykf8bEWROHtz0kQ=)
2: qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa (hash: TvC61ITQGltf4rYIHmX8krv+oGoHgURt5QCIo015ems=)
3: yBEbEYJKUeh1t-BnsErHj97koRw.crl (hash: lBy+duXVLwyfyDlbRVcKC1ZlCcbN+6DrwU1SNsaSsyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:36:f1:b1:fb:6f:7d:f0:d6:a7:15:e8:0f:1b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Validity
Not Before: Mar 29 02:00:28 2026 GMT
Not After : Mar 30 02:00:28 2026 GMT
Subject: CN=a2b472f0c572e380dbb3c7d294880ee7e17e80d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:06:cf:bf:f2:13:1b:d2:38:61:69:79:45:53:
40:4b:0b:43:37:5d:b9:ed:91:0e:b6:15:0d:21:79:
e9:27:5b:00:d5:8c:0a:9a:db:cb:64:72:f2:1a:f0:
85:40:ec:3d:60:db:0b:05:b3:f0:f3:e4:0b:62:08:
c6:88:07:1e:c7:92:ce:71:5c:46:b3:04:99:9d:e9:
77:91:a8:18:38:c9:1c:d4:88:87:ad:56:38:a6:fd:
a7:f3:73:65:cb:25:c1:b0:5b:75:a8:41:f6:7f:ce:
5b:ec:69:ff:3e:b3:75:cf:c2:f1:95:3c:a7:72:9d:
69:ec:fb:68:bb:76:4c:b6:6d:dd:e7:00:2d:e3:0c:
e2:07:1b:9b:5d:a2:a7:34:72:1c:e9:85:89:a7:6d:
be:b2:28:75:d6:3a:af:3c:c4:79:2c:45:5a:44:9a:
c7:8a:29:05:89:cb:5f:12:34:dc:76:d2:69:99:da:
f7:a3:12:37:b9:60:e3:95:f1:7f:5a:6e:90:63:42:
7f:af:1a:ce:f3:9c:4b:1d:50:69:8c:9c:2f:b1:72:
7f:e2:6d:07:e2:2b:1d:ea:1f:c4:c0:f4:8b:f0:9e:
b9:9d:dc:bf:7b:9b:3f:a4:af:a5:06:30:ec:24:4c:
c9:cc:df:09:3b:4b:10:61:5e:13:87:1b:ab:06:cd:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B4:72:F0:C5:72:E3:80:DB:B3:C7:D2:94:88:0E:E7:E1:7E:80:D7
X509v3 Authority Key Identifier:
keyid:C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ab:13:9d:1a:e7:db:c6:9d:0a:e9:9d:47:63:e6:9c:06:bc:
0c:be:55:f9:f8:e9:12:2f:b3:5b:6c:0c:87:22:ef:0d:e7:a4:
a8:2d:e1:15:ec:e5:1f:e6:55:8f:a4:5d:c4:85:f1:ea:5b:93:
0b:d0:1b:5d:94:48:91:dd:22:60:6a:58:5d:3e:43:61:27:42:
0f:c1:ac:94:7c:62:8f:1f:a1:b8:ee:ae:dc:cd:25:d4:1d:70:
73:fd:6a:f6:e5:9e:3b:23:bf:a1:3d:31:98:0a:fc:0e:38:29:
5b:c1:fd:e0:c8:be:3e:3a:29:76:a8:f4:37:00:ed:4e:0c:3a:
4b:29:3b:0d:f0:fc:fd:ea:09:61:71:88:ec:11:22:31:36:b8:
cf:73:0f:e2:e0:dd:bc:e7:7a:c4:c9:d1:7b:2b:71:69:f1:a9:
2a:f3:e9:f7:a7:96:d5:05:5b:1a:e9:93:c8:39:3e:0d:79:7a:
20:8b:a2:e7:90:e6:23:ba:e9:1c:d1:04:fd:29:74:07:2e:72:
43:9f:c0:36:04:f0:5b:75:84:e9:67:82:5b:6c:73:a1:2b:da:
8e:e2:df:bf:85:de:3c:7f:8a:d6:4f:87:53:da:81:66:60:24:
bf:e6:73:c6:a6:f0:ba:00:5f:15:86:a5:b2:4d:5b:89:f8:c4:
f1:f5:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:41 2026 by rpki-client