Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier: YE8Rf2/etWZHVPH1FxCNkIiLmqIDGklG5+wxwPOp+yU=
Subject key identifier: 55:5C:49:6B:FC:4E:65:DC:2F:CA:CA:8E:4E:4C:86:B5:E3:28:76:B6
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial: 019D3865C021208845C857360D742405230F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number: 1054
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: 7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa (hash: Ku59KYA/bpOTiSrNCRzEUdSrtiwxD1BQ8G4rzI5+xwk=)
2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: bM3LsAy/bON9Pob4LHQnA92IHJan0I19xLkv5Oihm8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c0:21:20:88:45:c8:57:36:0d:74:24:05:23:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=555c496bfc4e65dc2fcaca8e4e4c86b5e32876b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:a6:af:60:89:bd:c5:31:1e:de:b7:d9:fe:
21:0e:6a:95:66:b8:c7:7a:7f:3f:2a:26:59:bd:4d:
d6:e5:b3:06:7c:e6:d5:b6:6a:36:9f:7f:e2:ce:bd:
ff:2e:be:ed:7e:3c:72:d6:5d:d0:91:b4:5b:39:59:
5c:50:5d:a1:97:3b:01:4b:d5:e6:f3:83:41:8c:14:
59:2b:bb:b4:6d:f5:92:59:3d:25:31:a5:88:22:5d:
7c:b3:bb:d3:ce:4c:9a:04:87:e3:97:39:a4:eb:9d:
e5:44:a3:32:76:28:3f:e4:4a:c4:8a:49:62:96:4d:
d4:39:8f:d3:d0:cd:d0:bf:38:1b:29:32:f4:bf:a5:
de:81:d1:66:f3:0c:3f:58:9c:df:c9:f5:4f:87:e2:
66:cc:30:81:3c:e5:51:c4:48:21:5f:a0:b9:9e:26:
e7:79:83:c5:e5:a6:cb:3f:75:bd:d9:c2:f3:ae:05:
ea:45:8a:3b:29:77:1b:00:43:00:ab:47:51:c0:75:
5c:99:70:80:91:33:4c:90:3a:f5:19:cf:0a:84:a5:
e6:24:bb:a3:ef:17:a0:21:ab:4e:dd:c7:d4:1c:fc:
c4:1e:07:f3:1b:33:e6:4e:c6:d4:d1:ab:9e:24:4d:
44:30:ab:35:69:a7:11:f4:59:e6:37:d1:b2:12:89:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5C:49:6B:FC:4E:65:DC:2F:CA:CA:8E:4E:4C:86:B5:E3:28:76:B6
X509v3 Authority Key Identifier:
keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:51:5f:4b:02:09:d1:f0:61:de:1c:be:f8:a5:ac:fc:fe:c5:
47:cf:fc:76:f5:79:44:d8:8d:c6:88:75:9a:ce:48:cb:8e:f3:
f9:91:87:63:3a:f5:16:1a:bd:48:ca:6d:0b:68:8f:d4:f2:50:
5c:0c:ce:2a:11:f8:59:2b:02:e0:a3:70:54:72:81:92:a3:5a:
c9:e7:88:d4:d0:f8:83:6b:19:53:20:31:8a:4a:fb:c1:d8:48:
80:a3:f4:cc:85:a6:fe:1e:87:97:bf:4e:db:4b:24:20:92:3a:
d7:7e:f6:d3:ab:90:09:5e:0c:05:9a:94:7d:93:41:62:14:27:
e0:e3:e3:f7:3f:93:ee:0d:75:6b:c9:ae:73:b0:1a:a5:92:10:
fa:fd:7e:0e:af:12:af:88:f1:46:be:ce:4a:2d:d7:39:18:36:
7b:13:07:ad:60:df:d5:c1:6e:c5:be:a8:86:ef:7e:7a:ae:58:
96:e4:ff:ff:fe:b9:0c:7d:b3:e2:e3:9d:8f:52:8e:a2:95:06:
58:27:f7:6e:9d:6c:4b:fd:18:af:d3:2e:a2:fc:78:10:73:c7:
66:a0:94:b9:c4:8f:a3:2f:80:e1:5b:7c:3a:c3:97:54:da:76:
95:a6:6a:fb:97:43:2f:ba:20:6e:c4:dc:0d:59:24:94:60:3a:
ee:7c:28:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:05 2026 by rpki-client