Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier: FbWAisukv3xBamFlDWVabGO2pLCkztfBfRfS6TIyEe4=
Subject key identifier: A8:F3:97:CE:B5:8A:CD:DE:80:1F:A0:E4:C3:D8:71:EF:6A:D5:5B:92
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 019D382E949C62555E9E0383FF7F9CEF5C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: 45j6eHYF_02muc8QdARO0K6hDmo.roa (hash: RBkJqhmrXlwPWTL2teXXxMSS7p2416ywX2dYxmAUw9s=)
2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: jOjmg8CygDEIHwohJEtlVAakD49QRWEpevmKKDdL6k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:94:9c:62:55:5e:9e:03:83:ff:7f:9c:ef:5c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=a8f397ceb58acdde801fa0e4c3d871ef6ad55b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:2e:81:1f:69:cb:ef:73:24:a1:6a:b5:42:
81:de:69:ce:07:df:0b:2e:b0:d0:ee:71:db:1e:82:
f4:05:06:61:f3:8e:d7:9f:ea:7a:14:b7:d7:e1:3f:
35:63:9c:af:95:2d:40:d2:61:f4:2c:a8:10:4e:0c:
ff:0c:45:18:9d:93:e0:e4:b5:95:f8:b0:49:6d:7e:
5c:c5:2c:45:8c:b8:78:8f:f7:82:e4:58:d2:aa:76:
5c:96:98:a5:fb:ef:85:e6:04:fc:79:40:4f:07:b1:
49:2d:95:a8:11:78:29:d0:ed:b8:30:7d:c8:46:44:
5d:62:e6:a1:5b:9d:df:8a:cb:7d:05:e9:bc:25:b0:
62:7e:94:d2:7a:7b:b6:b3:26:80:5e:00:17:9f:eb:
98:4f:a2:9f:80:eb:2c:00:ec:8a:f7:94:c8:31:c0:
1e:76:f5:cc:31:72:45:ee:e4:a1:47:18:0f:75:38:
ea:40:fd:01:3b:2d:50:91:a1:c9:ce:b0:5e:4f:5a:
dd:1f:76:92:15:fb:57:60:c5:bf:bc:51:12:32:64:
a6:90:b9:18:fe:60:61:e1:c6:74:a9:6d:22:71:9c:
41:1b:47:bf:07:f8:3d:c4:b9:7a:8f:d3:69:95:ad:
53:dc:1b:6c:1f:5b:6f:3b:f0:b3:81:2b:9a:81:fe:
50:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F3:97:CE:B5:8A:CD:DE:80:1F:A0:E4:C3:D8:71:EF:6A:D5:5B:92
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c1:c0:6e:f2:5a:ad:04:4b:78:f0:50:42:9b:95:e7:eb:61:
6e:e6:a5:3c:8f:7f:f2:8a:0d:32:3e:ac:b4:01:73:0f:b3:60:
67:ac:bc:c4:8a:92:d6:0f:7b:53:62:19:60:7b:3d:43:07:b0:
3f:69:e3:ac:b5:af:91:6a:e2:19:16:56:64:1a:2e:df:60:f7:
fa:0a:78:6f:0a:fc:0b:4e:a7:86:f1:13:e9:b2:12:4b:f3:b7:
97:3e:5b:33:bb:d8:2e:0b:1f:6c:ec:db:56:ca:65:7f:8b:80:
3d:15:34:df:d3:3e:0f:04:d8:e7:34:e0:50:f9:5e:39:0f:0c:
fe:bc:43:7d:d5:a5:bf:10:83:2d:25:9e:ef:91:ce:42:a2:33:
79:42:dd:03:00:5f:b5:8e:6c:7b:0b:a5:8e:c9:c7:21:56:40:
61:c1:a0:38:74:85:65:09:81:c9:80:72:de:de:d0:f2:fa:fe:
56:15:7e:0e:6d:de:3e:31:00:b4:de:74:48:f4:00:79:07:26:
82:dd:9e:d0:6d:42:57:bd:31:b4:ea:49:43:d5:68:a8:fd:31:
69:78:f6:14:11:29:38:08:9f:99:84:79:fc:4b:6e:b0:01:a1:
78:50:95:cf:54:a7:bd:c5:56:4d:fa:19:e8:e4:fe:b1:67:d3:
6e:c5:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:51 2026 by rpki-client