Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: oWkrBQlelKaa8pjFHrgcIw/1WyjJWwm7fOcJjwWgcEM=
Subject key identifier: 07:19:14:EF:44:40:E9:90:C7:9E:CE:AC:2D:DD:6E:77:B0:96:25:FD
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 019D382EAFF47DAF7F44077A3A0E77132C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 10B0
Signing time: Sun 29 Mar 2026 06:01:16 +0000
Manifest this update: Sun 29 Mar 2026 06:01:16 +0000
Manifest next update: Mon 30 Mar 2026 06:01:16 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: NU79WGE3b1TmTu00h816HZfH0cLbxRWLo8YNu+GWz90=)
2: buEP_tZTxcCY5cv35wHnd5QJtA4.roa (hash: kDd7vjY1Gmajtb+yM1iA4kXpv1+b295rNuhM3eEotP4=)
3: cu3LpBG8kS_4KP69qmFhIuC6yn0.roa (hash: +A0QFPa6rFKeurJR0BtJfs29ZpJr1qidekf5t2vt70c=)
4: iwCms-jh7sNOnDjyiQ87SCaskPM.roa (hash: F9m0OaxudVEa/uHDWRuOEKekT6jQQYP93RpjR2bYjX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:af:f4:7d:af:7f:44:07:7a:3a:0e:77:13:2c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Mar 29 06:01:16 2026 GMT
Not After : Mar 30 06:01:16 2026 GMT
Subject: CN=071914ef4440e990c79eceac2ddd6e77b09625fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c5:52:2c:5f:56:e1:07:4c:1b:61:c3:3a:89:
1b:1c:0a:bc:d1:af:17:40:e3:95:da:86:bf:04:bb:
17:78:94:64:c6:c0:55:80:44:9e:70:9c:9d:ab:ae:
6e:84:db:82:19:b5:e7:8e:83:11:28:da:fc:51:ac:
5b:92:83:6f:c5:6f:01:03:48:21:76:6a:89:33:d0:
1e:46:0d:86:2a:72:ce:54:44:76:9d:19:e2:6a:6f:
7c:df:1e:ee:ac:88:dd:55:5c:47:8d:ab:d3:0f:76:
a0:d4:7b:6c:04:1c:60:cd:4d:82:cd:27:2b:ea:82:
3b:24:15:b0:2c:a5:5b:8d:c7:3d:f0:60:cc:53:c1:
0b:a7:73:5b:78:5e:e5:82:de:07:fc:64:8c:be:6d:
78:e1:5b:79:8e:7d:2a:95:dc:7e:4b:3d:ab:d8:0b:
f9:ae:19:5f:8a:ad:d6:b2:5f:fe:1d:ed:81:af:b9:
8f:21:9d:42:d3:d4:7c:b9:9b:b2:63:07:2a:f1:41:
99:5f:f2:04:62:16:b7:b5:58:48:6e:06:6f:4b:3c:
14:79:66:ec:4c:2e:b3:68:f8:d4:b6:09:1a:e8:6c:
d4:fa:0a:ce:79:dd:b1:0f:7f:ff:31:a6:44:42:bb:
af:51:86:f0:45:53:62:06:c7:b0:c7:f8:3f:b3:d2:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:19:14:EF:44:40:E9:90:C7:9E:CE:AC:2D:DD:6E:77:B0:96:25:FD
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:39:54:91:08:8b:17:0c:b1:64:6a:38:e1:8a:75:05:5f:4f:
d6:dd:c8:1e:de:e2:21:7c:68:5c:f3:bd:07:95:75:d4:04:a8:
56:8b:ca:64:b1:7d:af:e1:0a:70:95:02:1b:8a:b8:ed:11:08:
a7:e8:dd:5c:fc:a1:c4:1a:11:c5:89:1f:41:8a:90:f1:00:0e:
00:1b:ef:bc:b9:89:30:96:e7:45:53:2c:5a:9b:50:ac:4a:7b:
91:c7:64:80:92:f4:02:f4:a5:45:6b:e4:80:5c:1f:95:dc:d0:
c9:43:17:4b:07:80:26:74:32:50:a3:6a:31:db:b2:42:26:dd:
30:35:50:b1:e0:e2:41:14:05:91:f7:4f:cb:87:c1:e6:1c:4b:
32:6d:a9:cf:9d:c4:d6:3f:3d:23:c6:5b:ce:6b:f8:99:14:26:
24:3d:55:16:69:e2:37:de:23:9f:6a:2b:13:97:66:9b:d3:de:
e1:cc:33:9b:cf:65:55:cd:36:35:4f:fb:79:58:09:f7:56:3e:
5a:ed:2f:70:ed:73:45:4b:5e:50:9c:74:50:96:a9:39:88:71:
6f:2d:0f:f8:6a:4c:23:bc:9f:55:53:2c:48:b0:18:0c:9e:aa:
53:7e:57:1f:f4:44:cd:79:37:ca:7b:c0:9c:8e:bd:2f:48:c9:
f8:2f:db:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:11 2026 by rpki-client