Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: Sa1mg7XfvZjwlv8xeokw3frjwjlfvoTtHd3Vd0EDop4=
Subject key identifier: 10:89:BC:C0:A6:F1:84:91:5A:57:31:60:BF:CF:EF:93:BB:2C:36:F1
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 019D3909EBF28CE71D0BDC80F949DA11B7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 08E6
Signing time: Sun 29 Mar 2026 10:00:44 +0000
Manifest this update: Sun 29 Mar 2026 10:00:44 +0000
Manifest next update: Mon 30 Mar 2026 10:00:44 +0000
Files and hashes: 1: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: 0GBvk+ejF+WPb9cdcteMgV3XMIP7JqX5TlXWLZOQIRM=)
2: ykn6ra4wP0urmcyUyxV1FWZ2Kp0.roa (hash: IJ1D7ZuY9/uNKyGnyBgDEp0dSpIFh5mPiRSScoZkO+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:eb:f2:8c:e7:1d:0b:dc:80:f9:49:da:11:b7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Mar 29 10:00:44 2026 GMT
Not After : Mar 30 10:00:44 2026 GMT
Subject: CN=1089bcc0a6f184915a573160bfcfef93bb2c36f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:5e:1a:27:29:fc:37:41:1c:9e:ff:b5:65:
61:3e:53:db:fc:4a:80:20:6d:6e:c5:06:01:58:76:
92:e1:d1:aa:99:14:da:a4:dd:5d:36:98:e6:bf:a6:
85:05:6d:a6:7b:59:9d:20:e7:11:53:a7:17:b0:22:
ab:cf:0d:6c:f2:2f:0c:5b:8b:e0:86:14:ed:5f:cb:
19:7c:4f:03:09:a9:c7:73:0d:e9:8f:5f:d7:fb:95:
ac:75:84:b8:4c:ac:e4:2a:1f:cb:15:c9:64:14:d9:
c5:d4:50:4e:5d:a4:ab:d5:0d:65:29:26:b0:8b:1a:
ae:da:22:2a:1d:27:96:50:b9:5d:67:8f:50:ec:e3:
1f:a0:ac:e8:43:30:84:a3:82:2e:4c:dc:4e:2c:a0:
b6:e0:e0:00:10:81:6e:34:2c:67:0f:51:b8:a8:f0:
7a:22:30:ce:5b:84:8b:49:b3:9c:49:46:86:6d:83:
b7:65:fd:2e:7b:a4:9e:b3:73:8a:de:41:66:dc:26:
1f:f1:2d:bb:aa:14:bd:64:01:4f:09:54:ca:bf:7c:
56:ee:ea:36:33:53:30:ff:e1:86:3b:35:6f:bd:5f:
62:59:1f:f5:27:0d:b0:2f:98:46:55:fa:3c:71:2e:
1d:c1:b8:ca:b6:07:30:23:9b:36:a0:f0:61:0b:94:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:BC:C0:A6:F1:84:91:5A:57:31:60:BF:CF:EF:93:BB:2C:36:F1
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:98:95:ee:0b:ea:eb:c4:37:f7:87:55:6f:0a:68:85:b5:dc:
0e:df:bb:0a:02:46:e2:c9:f4:92:9f:ff:eb:ba:a0:fc:87:d3:
65:22:62:2b:38:13:83:dc:01:e6:51:03:d9:fb:37:2e:5a:42:
bc:9a:63:a0:99:7b:3c:94:44:93:7f:20:0f:44:2c:59:ef:ad:
08:ab:e0:1c:0c:5c:d0:9f:09:7c:84:4a:13:d7:f8:5d:2f:21:
f4:a7:da:23:24:17:23:46:7b:f8:b7:59:fb:5f:78:90:d7:76:
9d:db:93:65:aa:20:6b:35:70:76:13:58:20:f6:80:9f:b5:56:
38:fc:39:f0:c0:69:64:23:26:7d:7e:d3:53:6f:2b:da:52:2f:
b7:90:9a:9e:45:a5:1b:e8:7e:a4:26:96:db:74:29:a3:50:aa:
35:59:f4:93:e4:a4:4d:5d:85:f7:43:f6:65:4e:33:c4:e7:e9:
92:16:ee:54:7c:d2:8b:60:46:09:20:2b:3c:a1:da:85:b7:0f:
ba:94:12:8f:8f:ef:7d:dc:a4:ca:4e:f7:38:91:d3:58:bd:1e:
e5:fc:cb:c0:88:f2:4f:72:28:a2:7c:37:68:1d:a6:44:6d:df:
28:fa:d5:a7:ee:cd:c0:63:8e:05:f1:4d:e7:11:a7:f4:d7:2c:
cc:af:c6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:10 2026 by rpki-client