Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
File: yjNIq_Fz0ndMiUIAjK321gEqPVI.mft (raw, json)
Hash identifier: fLpvkzQUVEqSkTH+xxDyLiLNDA4H8WPRoZ0yPzERR5E=
Subject key identifier: D4:62:E2:F0:29:BA:94:D1:FB:8B:20:12:B1:70:D3:82:E6:25:64:4D
Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
Certificate issuer: /CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Certificate serial: 019D38D3203ABEDF04EAE687CF589F5BCC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
Manifest number: 0885
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: bYnmxW1SSsOpZ_UdEnwHgLbPMLE.roa (hash: xTGg5NX2D1kbyIr1y0FxLhbgTth/OEV0XdRYTihXaZU=)
2: yjNIq_Fz0ndMiUIAjK321gEqPVI.crl (hash: br674BvMa8OoZaOk6SNunW1/sVn8p3eqQG8LQ1BkMlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:20:3a:be:df:04:ea:e6:87:cf:58:9f:5b:cc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=d462e2f029ba94d1fb8b2012b170d382e625644d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:f8:93:b7:2b:0f:20:76:e3:e6:c8:5d:dd:
63:47:97:96:c5:8d:1c:71:78:df:c6:dd:26:14:40:
87:1b:81:b6:11:90:f3:ab:0c:78:07:62:94:c9:e7:
12:0f:38:36:5a:dc:95:43:18:04:7c:b2:93:79:5b:
67:8e:6f:e8:c9:a1:56:22:47:4d:12:fc:fb:ae:cb:
76:81:16:bf:27:16:ea:72:83:5e:ce:fe:3a:91:2f:
cb:ec:2c:9b:a6:b9:f8:d1:6b:51:53:ee:bc:7e:64:
6f:0a:08:8c:fa:ba:ec:8e:7b:65:3f:88:5b:b4:04:
62:11:e7:dc:ef:fe:14:9e:e9:b5:d5:c8:4e:2e:22:
86:8a:b8:80:2d:cd:13:5a:3c:67:c6:fb:c1:f2:a9:
b9:9f:c8:46:a8:7c:68:1d:5d:15:2a:da:fa:9e:af:
97:89:8e:cb:f6:e1:7d:cf:fc:a3:e8:af:35:55:67:
08:4e:c8:49:9c:53:17:f0:5a:95:64:34:45:8e:46:
79:c2:7f:06:b7:dd:e9:21:62:71:cc:53:fd:42:a7:
b3:e2:4f:21:c4:35:ae:3e:be:ad:6c:0b:c3:84:86:
38:df:52:6a:01:ff:14:28:37:96:ae:ea:f3:49:f4:
5b:33:4d:58:4a:1a:fa:44:bf:93:a9:89:b0:f7:9f:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:62:E2:F0:29:BA:94:D1:FB:8B:20:12:B1:70:D3:82:E6:25:64:4D
X509v3 Authority Key Identifier:
keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fb:7f:c0:06:e2:e0:a6:0e:90:9a:47:c9:62:b7:a1:29:64:
7d:9a:e3:4c:3f:cf:8b:8f:1e:1c:89:7d:d1:6e:76:b4:97:11:
64:63:bb:6d:74:60:39:9c:fc:42:a4:1b:bc:1b:7e:3e:8c:40:
83:b6:99:71:ce:dd:5a:3c:3a:11:3d:a5:76:92:ee:c9:d7:0e:
98:84:2e:11:e2:b5:a3:3b:56:2d:91:3b:dd:9e:89:92:63:0d:
ae:4a:d0:0f:70:aa:ee:e6:9a:c2:55:54:ea:5d:b8:b4:1d:45:
8b:f1:ea:48:42:fb:da:06:4c:b1:14:06:d7:35:1c:d7:b0:2a:
96:61:e4:74:ca:02:76:c5:81:f5:31:53:71:22:36:dc:67:15:
9c:6d:80:30:c6:4e:b1:85:f0:c2:49:f4:51:2a:81:4f:9c:f2:
08:13:b7:2e:d3:e9:75:4a:d4:19:5b:e8:d4:32:dc:21:03:f0:
d3:22:22:d4:46:5e:d1:df:6d:3d:d8:18:e3:26:ae:d9:3a:22:
45:c9:97:1e:63:1c:6b:54:ab:82:c7:62:08:04:9e:19:14:2c:
9e:7f:cf:99:3c:19:9e:9d:e9:af:17:7a:28:96:32:8a:50:4f:
ac:c9:be:5f:04:8f:f1:21:12:47:b5:3b:64:10:0c:83:ab:9f:
ab:98:b5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:55 2026 by rpki-client