Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: pjze7nEwxzpSm667Ac5GR+anCA5eqyRhyYcx6r/oiYI=
Subject key identifier: 38:2F:BF:02:E0:33:AA:12:59:7F:F7:8D:E7:35:AB:46:57:A6:53:9B
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 019D38D3AD53730667A3E3E1FEA5FD699F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 1055
Signing time: Sun 29 Mar 2026 09:01:29 +0000
Manifest this update: Sun 29 Mar 2026 09:01:29 +0000
Manifest next update: Mon 30 Mar 2026 09:01:29 +0000
Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: fWfJkRlG4F7hwaM/sigxfvd9Vr8VQqUNFuad0t5g1UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ad:53:73:06:67:a3:e3:e1:fe:a5:fd:69:9f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Mar 29 09:01:29 2026 GMT
Not After : Mar 30 09:01:29 2026 GMT
Subject: CN=382fbf02e033aa12597ff78de735ab4657a6539b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:95:7e:e9:40:d2:a1:af:60:f1:14:4e:c0:df:
89:f5:bd:23:e3:ad:5c:fa:a4:9f:a3:01:c8:33:d8:
4a:c0:0a:9d:bc:0f:f6:b0:e7:b9:05:7b:cd:32:6a:
1a:e3:55:9a:b6:5e:b7:7a:31:1c:48:ff:6c:83:dc:
62:54:e1:cb:3d:57:1e:b2:90:50:9a:da:55:f6:b4:
a3:92:ca:3d:91:76:77:03:c8:a4:e1:ce:88:d4:35:
75:70:62:99:54:ac:b3:7a:8d:51:20:0a:2c:ea:ba:
2a:be:6e:9d:7e:b1:3b:28:b0:e6:5e:64:0c:06:82:
f4:3b:4e:35:16:a6:46:f1:0d:ce:d9:2b:f3:86:90:
83:08:37:0a:87:7b:d0:ad:dc:78:ba:ed:7a:8a:13:
d8:cb:e4:4c:7a:d5:2e:a0:08:f6:3f:09:a4:8b:25:
6e:97:de:ad:00:4f:d9:e1:09:04:fd:2e:4c:ad:6d:
f2:e2:32:4b:38:77:84:be:de:99:d0:57:8b:c7:90:
72:a4:15:c5:88:98:70:73:58:6f:18:af:10:92:68:
d3:8e:e7:1c:bd:d5:6d:31:7f:06:c1:76:af:6b:74:
a4:f5:8e:ef:c6:69:7a:e0:f4:f8:7a:ab:97:67:e3:
e3:aa:a4:50:86:60:8e:a0:3f:da:32:30:48:5b:80:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2F:BF:02:E0:33:AA:12:59:7F:F7:8D:E7:35:AB:46:57:A6:53:9B
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:11:3a:fd:79:2e:e6:17:7c:24:7d:f6:94:c5:42:f4:eb:aa:
01:55:7c:88:21:15:dd:50:81:1c:29:d6:31:0f:4f:13:69:4a:
de:ee:26:50:3d:91:52:ac:f8:f5:10:f0:8a:2f:69:b1:dc:a7:
6e:16:80:b4:b1:69:74:7e:80:c5:af:84:a5:46:a1:f0:a3:6b:
14:75:e0:61:d2:46:c5:c4:3d:69:26:93:4c:64:77:fe:2f:b2:
a7:2a:06:42:5a:68:42:5d:b7:f5:12:76:be:15:79:6c:8d:ee:
cb:83:eb:9a:a4:2d:5f:f6:ed:9f:1a:66:fa:c8:21:70:6f:83:
2e:b9:69:f6:ba:0e:50:ac:f8:9d:87:41:2c:b9:06:46:76:60:
5b:99:02:75:85:a3:46:0c:90:10:c5:0a:91:c4:3d:45:25:8c:
fc:73:2e:b5:89:1d:c3:0d:f9:ca:86:5d:3a:a3:ee:84:ea:ff:
a1:d9:5e:44:a0:b7:af:d7:57:0a:9f:b7:a6:8a:7f:88:a4:6c:
b1:ea:2d:5e:67:25:ac:9f:e2:e9:28:eb:89:6d:a9:cc:16:3a:
b0:9f:c7:4c:6e:98:71:50:78:8b:55:84:22:8d:ea:6e:83:e5:
b3:08:57:36:d6:20:e1:e6:81:6a:b7:da:5f:18:86:74:aa:b6:
b7:e3:c8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:02 2026 by rpki-client