Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: XqAtgG5AysH6C/6YZBPQxbTnyqcErxuThd9MGo5RRqs=
Subject key identifier: 19:41:64:AE:42:77:40:62:D5:C1:AD:FD:47:B0:9B:76:CB:8A:AE:45
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 019D39412354220ED9DCB164E1BEBD12EA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 08AC
Signing time: Sun 29 Mar 2026 11:01:03 +0000
Manifest this update: Sun 29 Mar 2026 11:01:03 +0000
Manifest next update: Mon 30 Mar 2026 11:01:03 +0000
Files and hashes: 1: 1xbn_UMCw0INiad24Fz-EfLf1Gw.roa (hash: SZrNeUwfQoqqElnDWbZPqxb5PbXGACF+9AzBOt+xfa8=)
2: 6XExm7Uo-EU0Ms0tsb7xKnyJkVk.roa (hash: BWgqT1gKxehU5OIENtOQqrP4y0cmP4jYKvHGk1A4LAc=)
3: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: UYTqSqNaCATAxLlFabJc97oaxfswKXYdNt0IXBz61Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:23:54:22:0e:d9:dc:b1:64:e1:be:bd:12:ea:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Mar 29 11:01:03 2026 GMT
Not After : Mar 30 11:01:03 2026 GMT
Subject: CN=194164ae42774062d5c1adfd47b09b76cb8aae45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:f5:4c:ba:77:89:2d:df:c1:dd:90:07:62:
73:a1:20:8a:51:d2:80:5c:34:42:eb:12:60:df:cc:
cd:73:be:aa:23:b2:08:90:6f:d4:4a:6e:a1:2b:a0:
59:8a:1a:11:bb:11:32:c6:06:e8:fd:84:0c:c4:d9:
7f:e9:1a:6b:82:e7:c5:10:04:9d:82:3e:fa:ea:1f:
a6:c9:d0:5a:47:2c:c6:a0:3b:2f:7a:d4:b7:e5:e1:
2c:e2:16:98:4b:ae:e3:0c:a8:cc:24:bc:f1:f5:59:
02:ef:b4:d7:7d:d0:3f:db:20:05:1a:a2:dc:1c:38:
03:ad:df:77:b9:83:93:09:5f:1f:64:d5:48:6a:97:
4f:75:ac:38:fb:42:2b:5b:28:b1:43:cd:92:ae:9c:
06:eb:fa:a0:0a:87:5a:88:2e:94:1a:50:ed:43:54:
d3:68:f8:24:16:a3:66:48:0c:bc:67:b7:81:63:8b:
c4:db:65:78:af:00:36:1f:29:f2:4c:7c:b5:3d:eb:
1b:e6:f5:eb:b2:5e:8b:87:d5:03:94:ed:5f:66:9a:
c3:1c:8e:f8:e8:25:d1:4c:33:2b:9b:48:73:e5:16:
c7:37:e3:dc:32:b7:77:2c:13:b9:62:f3:06:40:1a:
a5:17:ea:c1:c2:96:da:da:32:8f:ca:13:67:e7:d4:
58:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:41:64:AE:42:77:40:62:D5:C1:AD:FD:47:B0:9B:76:CB:8A:AE:45
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7e:c7:7c:64:79:56:4f:d5:39:6a:63:6d:60:ed:a8:d3:e4:
9d:67:62:01:8d:e6:d0:4b:af:73:0e:ec:09:52:df:b8:84:12:
c2:cd:75:1d:88:97:70:1e:eb:5f:d0:72:ed:1f:d8:18:52:fe:
13:78:f0:2e:ee:3f:4a:35:4d:cf:86:63:b9:00:7f:13:e3:ef:
d8:be:6f:30:d3:a1:c2:0d:f7:f7:19:83:be:a7:0e:85:e8:02:
60:1d:9d:5c:d7:87:8b:4c:fc:67:81:17:c2:73:d3:76:8b:6e:
e7:37:00:a2:0b:2c:b7:2e:96:90:20:44:f8:9a:91:20:5b:eb:
2f:dc:20:bf:7f:90:d6:da:e1:e1:f0:2d:c3:e3:81:17:00:b8:
95:59:87:90:87:e8:ab:51:5e:84:b9:21:88:ef:a5:90:15:e6:
86:66:46:97:d0:62:19:1d:3f:e6:25:5c:4f:21:af:e8:33:b1:
54:0b:a5:28:bc:cf:1e:b0:8c:a8:d5:45:83:12:e2:c7:d9:cf:
d1:13:ab:02:c8:4c:05:bb:22:99:46:58:51:99:bd:d8:f5:9e:
eb:8d:53:6b:c9:3d:33:88:80:9c:d3:c0:91:74:34:63:14:9e:
f7:db:16:a6:77:b1:e7:4a:9a:a4:2c:e9:fd:c3:e8:44:45:3f:
42:6b:3e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:44 2026 by rpki-client