Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier: EAbuAPKV7wVo/QwYcmtR+lpQ9dnLKghIPRqkBg60xz0=
Subject key identifier: 01:1A:2E:B2:0F:59:94:A0:F4:64:09:D3:28:B6:53:8E:D1:3F:BF:EA
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial: 019D382DE49E8B44030E17B8E5E4490C1939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number: 0224
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: GNqeHvBNL9XBkhV7RdwG0OrbvsDLDE5x46y14jaDBOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e4:9e:8b:44:03:0e:17:b8:e5:e4:49:0c:19:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=011a2eb20f5994a0f46409d328b6538ed13fbfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:c3:29:2a:47:8e:46:58:0d:43:80:c6:f1:
1b:04:a7:88:85:3e:48:bc:a6:c5:de:9b:40:00:22:
dc:86:4d:7b:2b:04:c6:b7:49:09:2a:5f:0c:42:a1:
7f:f6:fc:99:78:c9:c9:d6:6b:6e:79:11:25:6a:c9:
2b:ba:66:1e:33:8c:42:1c:22:b6:95:86:e5:c7:74:
9b:db:1d:71:3a:84:5f:88:a1:df:e7:24:63:09:78:
ca:a5:c9:94:b6:d3:0b:5b:85:ea:ad:d7:89:13:76:
18:f9:73:0a:f2:51:dd:14:c4:16:dd:c6:81:78:7f:
11:85:aa:ed:6a:36:76:d0:44:f4:4e:5d:ca:47:91:
32:d5:88:16:1f:e9:3e:20:54:15:35:68:c8:bc:6a:
50:b6:f5:dd:c0:62:c6:57:a5:90:27:71:d0:3d:2f:
a4:70:ad:3c:2a:e1:e2:76:28:1b:bd:0a:19:d1:13:
76:b6:a9:91:42:bc:fa:01:b0:69:52:4b:6f:56:01:
4f:5a:a4:ea:44:04:8a:d9:06:25:f5:ea:38:d6:89:
ef:01:e2:d1:bc:7e:a4:1c:16:16:6f:c5:b4:92:a6:
9d:ce:a5:3e:06:bf:61:96:7c:55:e0:d6:2e:93:c8:
ca:d8:f3:82:0b:b7:1d:d7:0d:15:c2:25:b1:7a:06:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1A:2E:B2:0F:59:94:A0:F4:64:09:D3:28:B6:53:8E:D1:3F:BF:EA
X509v3 Authority Key Identifier:
keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:14:19:ff:c5:b7:31:f7:6a:f5:c6:bf:14:3e:59:7b:49:a6:
10:9c:32:90:ab:11:57:01:a5:1f:20:07:9e:08:28:fa:9b:5c:
77:c4:29:63:e4:b8:c3:99:aa:07:92:46:54:6f:20:57:7c:db:
ab:14:81:5f:d5:25:20:82:73:6f:b1:fd:32:ef:79:d1:03:78:
c0:23:bf:d1:15:93:7c:87:9c:b2:15:42:39:30:75:43:1d:d9:
81:79:c8:09:f3:4c:ea:b9:33:06:4a:61:2e:9f:1f:8d:c0:c9:
fd:d4:7e:d5:2d:84:c5:ca:6c:66:51:e2:e0:18:71:3b:ab:1f:
81:c7:22:53:45:f3:cb:31:6c:bf:0c:f0:88:a9:c2:75:d3:74:
ef:be:4a:a5:1f:8b:c7:9a:c3:fe:8c:ec:60:f1:bf:d1:9f:54:
d7:b3:41:ac:86:07:44:7e:4c:b9:ff:9b:45:51:76:6b:c2:5c:
ee:00:9f:cb:98:d0:08:21:57:80:b0:71:fa:6e:09:97:ef:cc:
01:38:23:cd:95:cd:07:28:04:c9:cb:3c:f8:68:a0:3a:c4:19:
20:4b:f4:2d:ab:48:7e:44:d0:77:1e:3f:e6:3f:94:7c:2c:79:
16:5f:a0:31:31:0d:28:17:f1:ed:d7:e1:84:01:67:75:86:3a:
b8:fd:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:12 2026 by rpki-client