Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: pJAqyTmxn9wBBzqT39PRuTdiSCkMdvwNCYX99drxtfo=
Subject key identifier: 86:72:38:B4:86:57:60:09:D6:AA:2E:EF:C7:44:AA:12:2B:C5:77:A6
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 019D37C011C5D827A335C7CF4C734CC507F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 1756
Signing time: Sun 29 Mar 2026 04:00:27 +0000
Manifest this update: Sun 29 Mar 2026 04:00:27 +0000
Manifest next update: Mon 30 Mar 2026 04:00:27 +0000
Files and hashes: 1: JsdL78tRGAWeb9S9iMdRfRQLDXk.roa (hash: lV6DbCoLT2AIp73UdWBqM+s8hS1sGFViY9AJ+gxGCI8=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: 1QsCX1OsDQ29ob/XaHRgilJbFeS9hzFym94cr3u2z8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:11:c5:d8:27:a3:35:c7:cf:4c:73:4c:c5:07:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Mar 29 04:00:27 2026 GMT
Not After : Mar 30 04:00:27 2026 GMT
Subject: CN=867238b486576009d6aa2eefc744aa122bc577a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:fc:c7:d7:93:1a:9d:95:7d:5e:d4:e4:aa:
b3:6a:1c:67:96:f6:23:35:b1:ca:0c:38:44:c6:8d:
f8:b8:4b:d2:24:2a:38:d0:74:9d:b3:5f:0b:54:cd:
91:c7:78:6f:11:5c:07:64:e7:0d:41:27:ae:55:1a:
13:6d:27:73:25:92:7c:7d:3c:97:50:90:c8:a9:1a:
b9:5a:62:2e:8d:6c:f1:d5:68:fc:66:ca:6d:88:71:
73:4a:95:5c:50:21:2d:88:fb:fd:73:cd:eb:a3:59:
44:56:5a:c4:fc:90:79:c2:f6:74:b8:0f:a9:3a:eb:
16:2b:d2:16:a7:11:c9:5f:33:a8:f5:69:7b:d1:cc:
80:81:10:3e:74:3f:e3:00:ea:db:ea:83:11:25:9c:
7b:ec:29:f2:e3:f5:15:24:cf:42:f9:29:ae:c1:56:
76:67:40:26:5d:c0:ae:51:26:26:61:20:60:dc:67:
b4:92:80:c6:68:c7:c3:93:20:17:c4:52:e9:6f:8a:
11:bd:c1:8b:06:96:53:27:c8:07:a0:8f:d2:7b:06:
32:55:cc:33:f0:9e:7e:99:29:92:68:8e:12:52:a0:
8a:cb:41:89:94:ae:e1:8f:b0:9a:f1:c8:4f:5f:22:
42:6f:a6:a0:33:5f:50:ef:27:22:d4:25:c5:fe:78:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:72:38:B4:86:57:60:09:D6:AA:2E:EF:C7:44:AA:12:2B:C5:77:A6
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6f:ee:65:3a:b1:b6:a7:58:f4:55:90:ea:cb:d9:70:b0:3f:
b4:87:a9:7c:61:34:97:32:e6:aa:c6:b8:15:46:4f:5c:f4:da:
2b:c1:7e:e4:90:b6:bf:09:00:8f:ce:53:28:b8:b3:32:e1:c1:
a7:0f:67:42:02:70:69:9e:c9:89:11:51:41:5d:2c:34:60:e3:
d5:07:44:61:a4:c1:22:99:a1:f7:b1:78:21:b9:96:6d:3a:c7:
23:8c:61:77:b9:44:5b:23:ad:a4:6b:db:dd:33:8c:f6:ee:c5:
0d:a2:81:b1:1d:0d:94:ba:81:ad:0e:10:b6:50:b2:ba:34:98:
a0:bc:2d:71:b9:70:60:f0:c9:86:b3:8d:f7:be:9e:f7:06:d2:
a6:cd:2d:ab:65:f4:ae:6a:e1:60:84:68:9b:fb:03:fd:87:33:
59:7e:c0:bf:ff:88:f0:9e:7b:73:54:eb:cf:de:f4:b0:25:d8:
78:75:b1:bd:28:7f:22:b2:6e:b7:1e:1a:9d:3a:34:57:f1:e7:
f0:72:ee:28:47:27:ee:42:ea:c2:45:a5:1e:3e:71:bb:3e:d5:
9d:c6:46:b2:96:25:8a:d4:f7:2c:24:53:86:78:77:20:4d:fe:
0a:66:72:0b:53:d6:62:b7:9c:06:1d:5d:bd:60:c2:45:59:1e:
6b:5b:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:12 2026 by rpki-client