Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/1de3b8-7f55-425e-bb84-5797a01dea31/1/yrQKCrlcAJmOGEsD2cM6VBd-iK4.mft
File: yrQKCrlcAJmOGEsD2cM6VBd-iK4.mft (raw, json)
Hash identifier: JbxzkMWrYVQtNM6PXoxWjt6U/OrRQQT3FsJIjAx6ybA=
Subject key identifier: D7:A9:88:5D:B9:FA:BA:FC:35:D9:60:86:3F:EF:FB:14:78:5C:86:5F
Authority key identifier: CA:B4:0A:0A:B9:5C:00:99:8E:18:4B:03:D9:C3:3A:54:17:7E:88:AE
Certificate issuer: /CN=cab40a0ab95c00998e184b03d9c33a54177e88ae
Certificate serial: 019D390A24BA87D3E1CA4AEE9ECF71E2167B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrQKCrlcAJmOGEsD2cM6VBd-iK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/1de3b8-7f55-425e-bb84-5797a01dea31/1/yrQKCrlcAJmOGEsD2cM6VBd-iK4.mft
Manifest number: 30
Signing time: Sun 29 Mar 2026 10:00:59 +0000
Manifest this update: Sun 29 Mar 2026 10:00:59 +0000
Manifest next update: Mon 30 Mar 2026 10:00:59 +0000
Files and hashes: 1: WWiGaN5f62gOkQ1ogAgkTfq5oOI.roa (hash: xveksSBraHqFwffng7WOrCfHGMF0y0VOcbjId7rHfWg=)
2: yrQKCrlcAJmOGEsD2cM6VBd-iK4.crl (hash: ONL8Tb0LXspotKefC/kC4QO0Ey9DrRRbYDle/WirpYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/1de3b8-7f55-425e-bb84-5797a01dea31/1/yrQKCrlcAJmOGEsD2cM6VBd-iK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/1de3b8-7f55-425e-bb84-5797a01dea31/1/yrQKCrlcAJmOGEsD2cM6VBd-iK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrQKCrlcAJmOGEsD2cM6VBd-iK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:24:ba:87:d3:e1:ca:4a:ee:9e:cf:71:e2:16:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab40a0ab95c00998e184b03d9c33a54177e88ae
Validity
Not Before: Mar 29 10:00:59 2026 GMT
Not After : Mar 30 10:00:59 2026 GMT
Subject: CN=d7a9885db9fabafc35d960863feffb14785c865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:d5:0d:0f:f3:5c:19:8f:aa:29:67:66:ad:
76:52:6c:05:ce:d0:52:98:f0:2d:f6:2b:37:95:dd:
ac:96:78:eb:d3:6b:e2:6b:8f:20:35:11:c8:90:d6:
39:10:d1:f0:ca:3d:f9:fa:2e:14:d9:f0:8e:7c:2c:
e9:b2:d2:7d:d1:a6:95:95:9f:df:88:9d:78:07:a8:
b0:e8:34:62:e4:a1:95:b5:e5:ac:43:13:3d:42:0d:
be:8e:68:5f:28:1c:a2:cc:f9:4e:94:c7:7d:b1:49:
2b:0f:fe:55:2b:b8:22:74:c4:05:6d:e6:9b:16:f3:
cf:b8:35:29:9f:7b:eb:76:a8:c4:19:1b:81:87:69:
9a:27:df:28:b7:ad:3c:68:8b:25:6f:81:68:8a:b3:
fc:af:a1:7d:f9:86:44:2b:6f:4e:a9:33:e3:90:e1:
36:b3:a4:76:90:95:bb:91:b8:ca:68:d4:50:02:22:
79:c8:c4:ad:ba:41:e7:07:ce:d2:22:8d:8a:1f:1e:
ff:7f:b3:1e:3d:40:fd:4c:7a:66:97:a0:d5:93:81:
1d:ae:6c:0b:fd:01:94:c0:95:fc:9a:3d:d6:c1:84:
21:47:7f:f4:8b:0b:ae:b0:46:51:2d:58:d5:9b:68:
e4:f5:5f:96:e5:28:5c:21:55:34:66:20:6c:0d:5e:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A9:88:5D:B9:FA:BA:FC:35:D9:60:86:3F:EF:FB:14:78:5C:86:5F
X509v3 Authority Key Identifier:
keyid:CA:B4:0A:0A:B9:5C:00:99:8E:18:4B:03:D9:C3:3A:54:17:7E:88:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrQKCrlcAJmOGEsD2cM6VBd-iK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/1de3b8-7f55-425e-bb84-5797a01dea31/1/yrQKCrlcAJmOGEsD2cM6VBd-iK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/1de3b8-7f55-425e-bb84-5797a01dea31/1/yrQKCrlcAJmOGEsD2cM6VBd-iK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7d:8a:36:95:b0:4a:89:80:b0:08:5c:b2:02:32:ec:f8:e0:
5c:1a:18:68:ef:d5:55:5f:3f:e0:92:cc:11:d9:b8:e0:f2:4a:
80:ed:4d:3a:8d:f8:2f:6a:16:e9:8d:71:35:dd:17:91:14:66:
17:97:61:4f:fd:83:27:af:d1:f9:80:a5:68:bf:26:32:fd:f1:
8d:18:0c:52:27:5f:30:2f:b4:21:1d:89:92:a6:bb:3c:5f:a2:
83:b8:79:ac:da:42:3c:1e:5a:b7:6f:63:08:ad:48:e4:c6:d2:
20:ed:7e:cb:7f:0c:62:fe:f9:26:24:d8:90:aa:0a:4a:41:60:
7a:83:16:f3:41:ae:bb:20:e2:20:14:cf:f7:90:79:36:87:32:
26:7d:13:c5:81:77:93:c7:db:b0:c4:0e:8b:d0:0c:7e:22:ec:
c3:53:a4:6a:c4:93:49:ff:dd:37:ff:bf:b2:a8:7d:a7:aa:71:
80:b5:77:34:1d:9d:14:09:98:63:7d:e3:a5:5d:f0:5e:8a:a3:
00:48:e1:81:12:55:5b:f2:1f:84:4f:66:dc:84:4e:55:a6:b1:
57:20:47:fb:09:62:3e:6c:5e:da:4b:e8:8e:57:20:e4:ef:31:
a5:9a:33:05:04:9e:b1:8f:7d:77:f8:1b:28:7a:30:b5:72:35:
a6:ab:4a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:39 2026 by rpki-client