Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
File: yQDvPdXdG-FdCLuTy91jtKyGDms.mft (raw, json)
Hash identifier: VZlLBn8CdD19++5cTj+8jjngNqcsDt3ED9yVGWqvwQg=
Subject key identifier: 9D:34:0C:01:9E:9E:8B:40:DE:EC:08:A1:7E:C2:2C:1D:6F:8C:20:FA
Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Certificate serial: 019D38D2B53C5940B5B6B21540CFB14D0F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
Manifest number: 1300
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: 49DXB44yIji8t0Vtkb2JOEt-9YU.roa (hash: Q0egqvB13KLmhzjLlUFrH7e6woM10xcOj+hIzVjBTDA=)
2: yQDvPdXdG-FdCLuTy91jtKyGDms.crl (hash: Jua/jP1jN+zKdxDKA117MIckMSzNu9P3bwYpRyko4ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b5:3c:59:40:b5:b6:b2:15:40:cf:b1:4d:0f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=9d340c019e9e8b40deec08a17ec22c1d6f8c20fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:c3:51:e5:4e:3a:2c:02:ee:c1:25:ad:1f:
b4:b2:9a:ee:0c:36:e3:67:bc:e7:fb:69:f7:d3:32:
1f:c9:af:92:62:2e:9f:3e:ec:bd:d1:e0:5f:7b:bc:
f3:dd:1d:e2:27:5a:93:c5:e5:9e:fe:c3:a2:5f:01:
78:c5:2c:9b:26:77:ad:6b:d8:8a:5c:dd:9f:f1:eb:
56:0f:cc:97:0d:ea:63:b3:61:ac:ba:fa:59:6e:4f:
1b:57:18:a6:46:fe:a8:5e:f2:e5:bb:b4:11:8c:65:
77:40:5d:dd:9b:2c:01:90:ab:6c:eb:94:c6:e0:da:
86:91:22:29:3e:4d:20:05:a8:1e:b5:eb:8d:8d:4c:
77:d8:b0:e4:cd:b5:24:2b:8d:92:5f:d3:7a:f2:3f:
3f:d1:9c:32:48:0d:6d:dc:d6:2d:33:d2:b4:c2:ff:
9f:f7:b3:f5:06:e3:b0:01:93:29:04:0f:80:ef:03:
3a:49:32:93:57:b6:76:d2:c6:b6:7d:d8:42:91:16:
50:6b:b8:16:4f:22:95:28:59:55:ac:43:73:c7:3c:
2d:48:e1:39:40:1e:2d:a7:d7:26:a2:4c:dd:29:5f:
45:d7:6d:1a:6c:52:5e:e0:e3:32:10:48:a8:31:23:
3f:6a:1f:bd:79:8e:37:76:91:b1:2f:56:60:64:9c:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:34:0C:01:9E:9E:8B:40:DE:EC:08:A1:7E:C2:2C:1D:6F:8C:20:FA
X509v3 Authority Key Identifier:
keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:23:6a:8d:52:93:8a:92:11:67:10:80:89:52:e3:f8:d8:3b:
bb:31:62:cb:da:49:36:b4:bb:a8:c5:51:b8:c5:d4:01:3c:78:
b2:6a:3e:40:c7:84:27:c6:43:9a:e0:ce:f0:29:3a:52:a1:6f:
3f:4a:03:13:3d:6a:2e:e6:31:6b:1c:f5:32:02:be:21:ae:44:
a8:c5:49:80:59:32:b2:ab:c5:ac:4e:ba:2b:17:9e:a4:73:13:
1a:d9:98:db:2c:67:43:b8:6c:a8:5a:58:f0:41:81:a7:a1:58:
fc:78:9c:6c:67:0c:71:63:d8:9b:36:45:93:7e:f3:b2:96:09:
23:a0:72:45:70:68:42:5b:db:40:61:af:1f:53:f6:a1:7b:9a:
96:4d:74:01:b7:0b:09:de:66:6e:b8:51:bd:be:b2:b9:0b:91:
fd:01:56:09:49:82:6a:c1:77:52:d7:b0:6d:08:4c:b7:19:7b:
bc:a1:c2:9a:87:c5:d9:c2:e3:a9:eb:b1:40:32:7a:43:de:1f:
39:40:82:af:35:25:98:03:22:0b:ef:29:47:1b:a7:3f:80:a3:
9e:38:ce:00:fc:ce:44:9b:bb:09:d2:42:1d:1c:8e:fc:fb:3e:
24:b8:d7:e3:e4:e8:7d:9a:4f:f9:2c:f1:79:d0:68:19:2f:57:
2d:23:df:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:28 2026 by rpki-client