Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: 1EGSn0hIRLYU69Vnue4xSr3kbcIsEw3BbJKmpQqWKv4=
Subject key identifier: 0F:76:25:FE:9F:23:35:14:00:B7:B7:4C:D8:75:AD:C4:BA:90:D0:70
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019CE447C4D25706DDD3E473B09A9ACCA399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 1344
Signing time: Thu 12 Mar 2026 23:00:34 +0000
Manifest this update: Thu 12 Mar 2026 23:00:34 +0000
Manifest next update: Fri 13 Mar 2026 23:00:34 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: 3EY6aCg34BILNrRk2YZ170R4dQKmK+qdhUN/tnty8FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:c4:d2:57:06:dd:d3:e4:73:b0:9a:9a:cc:a3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Mar 12 23:00:34 2026 GMT
Not After : Mar 13 23:00:34 2026 GMT
Subject: CN=0f7625fe9f23351400b7b74cd875adc4ba90d070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:c9:c1:9c:85:ed:8a:98:65:d1:fb:5a:a9:
21:6f:fe:e2:53:be:f3:2b:e4:fb:80:6a:44:e8:4e:
d4:39:ae:5a:2c:4c:b9:15:77:12:85:02:76:91:36:
38:77:55:dc:bd:d9:a3:57:ae:36:de:51:98:21:e3:
ea:1f:1e:43:ed:4e:88:33:dd:ae:d1:09:0b:ef:0d:
41:f6:00:06:a7:cd:8e:cb:16:71:b0:e1:5b:bd:b6:
be:e8:e2:12:0c:8d:1e:c3:28:be:b1:0d:09:26:be:
01:dd:86:a9:53:63:c6:b2:53:2f:0d:f4:95:84:8f:
e9:1b:d9:c5:0d:ce:5c:67:de:e8:ca:fe:18:ff:8a:
29:bd:ac:80:37:f3:d8:a6:a3:f3:a1:53:cc:5d:49:
19:db:f3:43:94:50:17:c2:65:f6:f5:f3:4f:fe:de:
43:53:9f:33:d4:98:a6:bf:5c:b6:db:45:49:b4:47:
c5:e1:db:cb:d5:02:83:f7:c8:f8:ca:4a:4c:1d:8e:
68:61:97:d1:61:f5:44:68:2c:5a:ff:78:38:ae:a5:
8e:35:7e:82:37:72:3c:22:49:79:12:6d:ce:ee:cb:
f0:80:b5:c1:de:ce:9b:90:5c:62:bd:8e:13:77:58:
9e:b5:90:55:a9:02:b1:f1:a1:f1:02:f7:b2:a0:21:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:76:25:FE:9F:23:35:14:00:B7:B7:4C:D8:75:AD:C4:BA:90:D0:70
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2d:e1:54:cb:eb:71:b0:ec:6f:44:3d:1f:5c:5a:52:f6:f5:
77:5e:b7:e3:74:bd:39:8b:1b:80:46:fe:e4:7b:2f:8c:dd:4c:
81:f8:18:7c:bd:49:7a:b8:79:56:f9:cf:ef:68:b9:1c:c5:c4:
9c:b6:0d:c7:34:1c:8f:da:21:f6:cf:ee:7d:65:dd:9d:b9:a5:
0b:e1:ee:7b:01:30:7b:d6:72:6e:b1:8e:f5:38:3f:f6:8f:57:
e5:b5:b5:65:ce:45:63:f0:1b:c3:cd:52:6b:fd:9a:6f:61:50:
0d:a0:1a:48:b6:ae:cf:15:6e:0a:a3:ac:19:d4:8f:58:19:03:
b6:c1:10:4b:b3:07:a7:9d:07:6d:9f:71:09:e0:e0:5f:c7:49:
29:98:85:d8:10:ba:b6:57:7f:7a:21:c5:1c:e7:b9:41:7f:46:
77:3c:bd:5c:ce:fa:c5:a6:c3:7a:35:4c:f0:ac:1d:cd:4b:ee:
b9:dc:34:a4:47:5f:cc:28:50:de:a0:93:ef:52:65:a8:78:6f:
c3:a0:86:d5:cc:72:ad:5d:a1:c9:94:f9:e1:a6:6e:98:5c:13:
ea:86:af:71:2c:8d:c2:d4:3f:7e:c7:68:79:5e:40:13:c6:d0:
08:30:2e:c1:91:67:47:8d:73:54:85:98:05:66:00:93:ed:cf:
de:87:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:31:59 2026 by rpki-client