Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
File: yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft (raw, json)
Hash identifier: E0qhtponZzsAbkhg5+mpQCbAl7Q9v+qJR7Ib8a1pDpE=
Subject key identifier: 43:C2:6E:93:8C:D6:FE:26:7B:7A:69:17:D2:BA:A8:94:0A:75:B7:01
Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
Certificate issuer: /CN=c87fefb4db5746680ad6036934662e236ca77772
Certificate serial: 019D382EAF8015A8A110C22D717AC612F869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
Manifest number: 04BB
Signing time: Sun 29 Mar 2026 06:01:16 +0000
Manifest this update: Sun 29 Mar 2026 06:01:16 +0000
Manifest next update: Mon 30 Mar 2026 06:01:16 +0000
Files and hashes: 1: QWfQGr4z8VEUuY5YGNgr59n5bZA.roa (hash: lETgMikwnnnSO1uZ9XbjvLYBMxyEwNCLWUmrzKcWQbI=)
2: yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl (hash: +3XgvA/Vtb6UkzBO0qU4Sd2f7jhrotXnTbaLNM0vIs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:af:80:15:a8:a1:10:c2:2d:71:7a:c6:12:f8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772
Validity
Not Before: Mar 29 06:01:16 2026 GMT
Not After : Mar 30 06:01:16 2026 GMT
Subject: CN=43c26e938cd6fe267b7a6917d2baa8940a75b701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:c7:dc:b9:f6:19:c0:cb:40:d6:7f:0b:fb:
3b:9d:92:1e:9b:b6:bc:5b:69:09:58:95:74:12:96:
34:43:76:9e:9c:bf:8e:47:9a:90:b3:c9:f9:31:48:
50:83:0a:b3:d6:0b:ae:e7:24:4b:2f:7d:f5:0a:83:
6b:98:90:4b:56:a4:a4:af:c7:ca:f5:eb:15:c6:20:
80:45:3e:23:0b:05:ea:a2:f8:2b:6d:43:42:dc:c4:
85:17:51:b5:91:4e:a1:f4:3e:ea:5d:76:18:09:8f:
b5:0f:95:da:f8:14:05:4a:36:e7:ce:fb:cd:60:ff:
67:11:da:2b:b2:09:41:ef:a9:84:b1:0d:86:bc:ac:
c7:1e:86:b7:b4:fd:91:ff:c2:fa:1c:7a:1f:8f:1d:
36:5b:cd:c7:f5:9e:f4:8a:07:c1:80:eb:06:da:ad:
f6:5e:30:0b:95:69:e5:05:53:1e:26:c8:f5:51:36:
65:bb:b9:0b:e0:e6:99:8e:04:1c:35:b9:c6:e5:66:
3a:82:b9:c9:d3:cc:d4:de:9c:b8:3b:30:1d:6d:d4:
65:5b:1e:a8:68:20:e4:e6:09:30:f5:64:9b:01:f6:
89:6e:ac:c1:15:18:50:c1:dd:be:3b:c8:43:a6:cb:
62:26:7b:2a:d2:8e:6f:33:81:23:37:11:de:1a:25:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C2:6E:93:8C:D6:FE:26:7B:7A:69:17:D2:BA:A8:94:0A:75:B7:01
X509v3 Authority Key Identifier:
keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:64:63:9a:93:9d:02:d5:e1:92:f7:d8:9e:4a:26:2b:15:94:
fa:fc:ff:25:e1:22:f0:b0:9d:88:7e:79:1b:79:6f:72:47:e1:
bf:9d:bc:d7:e0:ab:52:75:68:3d:02:d2:7d:dc:71:1c:f2:c2:
03:33:db:95:58:e2:d0:f5:6a:f7:d7:1f:ea:66:16:50:b5:17:
b6:d8:f7:2e:10:be:29:bf:3d:83:9e:9f:34:60:a5:e3:8f:3f:
61:62:11:b5:ba:b1:28:76:ff:67:75:94:ea:e8:81:6e:c7:aa:
74:b5:06:d1:68:da:85:d3:80:d4:80:c7:01:ec:7f:c4:e0:45:
a7:b2:9b:cb:bf:db:92:0d:cc:56:63:f9:cc:16:74:b5:45:e7:
a5:9d:60:3a:4a:5c:38:9f:91:cf:b7:0d:ac:5b:e9:6f:ca:b6:
07:5c:83:aa:16:99:7b:0b:0e:22:25:69:40:dc:97:9f:a4:42:
47:4b:70:53:95:a7:1f:3f:79:f3:de:e0:90:7f:c1:49:ff:36:
ad:b4:cb:de:0c:c8:2e:ec:3f:c0:03:d8:c4:8b:c7:33:e4:b2:
69:63:2b:42:65:79:7f:2c:ef:70:ff:1a:65:82:49:e4:e9:9f:
ab:fd:3a:3d:42:15:7b:5e:ea:ab:75:04:a4:55:28:1b:4a:5f:
14:c0:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:55 2026 by rpki-client