Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: LnNoMfmd0WxAxlJk8/Zfeww4t6fj8zFwaY+fYwiWavE=
Subject key identifier: 6E:3B:C2:54:87:E4:C4:B4:F5:41:25:6C:55:7C:DB:C6:1C:18:4B:DB
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019CEC38FF235F4F7B6391BFFA0347EFE998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 1152
Signing time: Sat 14 Mar 2026 12:01:24 +0000
Manifest this update: Sat 14 Mar 2026 12:01:24 +0000
Manifest next update: Sun 15 Mar 2026 12:01:24 +0000
Files and hashes: 1: BWIxZ78uKyw4vY-xhhwszjKA1Gg.roa (hash: DJhZH5ULKuTFx2qZjif4i5VCgjFcTYiLUvWNXLkT1QQ=)
2: GILkzrnW-WLXBiCMka03WJecbH4.roa (hash: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: mcXGfVz8mFaqXL1H3q8SPh+ipuhuFPBqnLAIn8i/Nyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:38:ff:23:5f:4f:7b:63:91:bf:fa:03:47:ef:e9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Mar 14 12:01:24 2026 GMT
Not After : Mar 15 12:01:24 2026 GMT
Subject: CN=6e3bc25487e4c4b4f541256c557cdbc61c184bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:eb:63:49:89:4a:28:6c:0f:88:7a:be:1b:
3d:13:7f:29:f9:15:fb:42:1c:2a:7b:69:20:3e:cf:
92:ac:d9:3e:18:cf:55:63:d6:10:9b:a4:99:06:b2:
2f:fa:f9:07:6b:b3:3c:d7:91:4b:3a:c0:68:a5:23:
da:87:8d:b4:fe:48:12:d8:7c:f9:2b:3d:d5:8f:74:
f1:f1:28:b6:3e:18:2b:75:7f:08:ec:b5:18:99:8d:
d6:27:dd:10:6d:a0:35:06:c4:44:19:86:57:87:e8:
ba:d0:3a:78:ad:46:28:91:85:a2:b4:75:33:70:e6:
43:22:83:20:f5:f0:c6:3b:29:9c:0f:03:f4:03:0b:
0c:e0:dd:3c:c5:64:c2:e1:fc:44:6e:d7:5d:1e:fd:
fc:af:cc:1d:96:1a:50:73:fa:c2:7a:da:8f:9d:34:
c2:17:cb:1a:42:e9:94:3e:a2:ff:23:12:9c:73:10:
9d:d8:9c:e1:3d:f2:4e:36:53:b6:1e:31:7c:21:f9:
53:76:2f:c7:f4:5b:29:b0:03:19:f4:e0:fc:dc:95:
44:d9:4f:b3:c1:ed:09:ec:68:63:c5:74:ac:43:51:
3c:80:fe:2c:32:57:bf:30:43:08:4c:d5:dd:67:97:
df:bd:c9:b8:57:b0:35:16:dc:68:3c:e8:47:2f:e0:
e8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3B:C2:54:87:E4:C4:B4:F5:41:25:6C:55:7C:DB:C6:1C:18:4B:DB
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:91:c7:14:6d:4f:9d:60:41:a5:27:f4:af:7f:2d:1d:63:99:
a3:20:59:68:ad:8b:46:1b:1e:94:08:50:95:29:ef:46:01:7a:
2e:48:1e:b9:70:4e:8c:a7:f7:70:ef:93:60:27:d7:8d:cc:07:
a0:09:ae:89:3c:ba:38:ba:96:02:90:fb:b1:b3:87:be:21:d7:
67:04:7a:84:f5:d3:92:cb:ce:e2:fd:78:dc:5c:52:ec:88:72:
a0:c2:5d:b0:97:26:eb:fd:a6:f6:65:b4:f9:ae:52:ff:65:7d:
b8:52:62:5e:9d:96:20:65:08:54:a2:16:14:64:2b:7f:5a:ec:
a7:cc:07:58:ec:17:60:b4:98:2d:af:d5:fd:48:5d:a2:9d:80:
4e:87:13:3a:33:32:b6:fb:38:bf:86:67:b8:ad:00:8c:39:af:
73:07:64:69:a0:64:24:df:c6:eb:06:61:a5:d3:5f:f1:a1:98:
ed:4e:29:a0:f5:59:16:f3:c5:00:3b:9a:21:c9:a8:d1:68:a3:
8c:29:af:60:ab:0e:f1:17:a7:19:05:69:bc:99:51:30:fa:00:
e2:6d:ff:37:36:28:ba:56:6a:fe:70:8f:f9:d1:7d:62:b8:eb:
fb:0e:1a:6b:a7:4b:ce:29:2c:b1:8a:1e:30:9c:18:28:b8:77:
a4:18:7e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:22:19 2026 by rpki-client