Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: NxpjYS09Zw2Qh8ZY8Dx6HfV9BOW/em8tq0pN1jR2N3o=
Subject key identifier: 6B:65:A9:25:AE:9B:F5:E0:79:FD:08:3F:5D:6E:E5:BD:26:96:F7:69
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 019D37C0F57562EBDD88ECE702A08529319E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 08AF
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: 8IDx5l-vl87yboZtOHYH4Nxu2oU.roa (hash: LyXSZWGcyRZHN3eXs85eKbB2V3kbw5mcU0mpJ2FqTj4=)
2: FBT-vF2CcpLQNwXtIK41eliOmdU.roa (hash: d7F1API+Zjp2HL3r+LaBPUl+vvTa147uB3W0MbbAhyY=)
3: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: oRD97omIwY2o+fgeJF7T3TGBPJVa68CmPIEFfRbdClo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f5:75:62:eb:dd:88:ec:e7:02:a0:85:29:31:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=6b65a925ae9bf5e079fd083f5d6ee5bd2696f769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:90:55:08:66:01:f8:08:ea:a7:40:d1:bf:
31:75:73:17:44:cb:37:77:ca:b9:3e:5d:46:35:46:
68:95:a8:b3:18:13:1f:31:d5:39:a0:de:08:cc:e1:
9b:55:73:ef:f4:ee:85:57:83:f4:72:2f:b0:5f:69:
53:07:a9:e9:86:8d:d6:8d:06:58:4e:04:a9:4d:23:
79:ec:04:2d:4c:fd:0f:3e:d3:9e:a9:7a:0e:bf:90:
e6:34:c8:fb:50:f0:fc:0d:38:63:f6:63:96:9d:99:
3a:47:44:0c:b1:c8:ad:bf:a4:7e:01:d6:dd:b0:b9:
e9:e0:f7:1f:b4:85:1e:ad:31:5f:d4:6e:8e:b6:a8:
27:c2:6c:9f:76:40:31:6d:88:ba:8d:4d:e1:fd:f8:
39:43:f2:c0:df:dd:86:5b:1f:d5:22:a0:c5:42:d4:
b8:dd:70:e7:45:00:1d:58:2c:fb:0b:9a:1a:60:21:
3a:b2:36:33:11:9a:a7:82:eb:da:27:e3:fc:bc:9f:
39:d9:2b:10:b1:4d:e4:c7:a4:6e:65:c2:0f:a4:97:
3d:49:d7:dc:86:81:00:9d:f0:5d:92:11:72:04:c4:
31:31:eb:5d:2c:07:43:fa:25:d6:3c:3b:ec:57:d8:
40:69:cc:79:ff:76:2b:52:34:90:00:aa:e6:5a:0a:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:65:A9:25:AE:9B:F5:E0:79:FD:08:3F:5D:6E:E5:BD:26:96:F7:69
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2e:9c:ef:9d:e5:53:e1:24:93:5e:03:10:c4:c9:33:f5:3f:
89:87:da:82:b9:ff:79:20:5d:94:92:a8:1d:0e:80:bc:6c:f5:
19:1c:c3:b4:0c:c7:5d:4f:08:3d:12:bd:56:03:80:e8:4b:b2:
32:21:1f:74:78:8a:23:d3:ea:91:42:00:97:5c:c2:db:c7:7a:
2e:bd:5d:6d:48:f4:9c:12:e0:13:c3:3b:34:8a:c4:a2:1c:95:
7a:66:4d:ae:62:d8:0a:fe:96:d2:15:28:8a:ad:32:ca:76:c3:
47:a4:61:b6:2a:da:cc:c5:52:38:aa:1c:9f:b8:36:3a:c0:e8:
c1:45:d9:bb:e9:fb:d0:be:6b:79:65:ba:a5:a5:11:4a:1e:7d:
b4:f6:23:de:f2:06:91:78:c4:71:b4:e2:43:c2:bb:bf:3e:b1:
f8:be:12:a8:35:58:22:4a:f4:c3:63:8c:3f:89:72:39:1e:23:
92:30:c3:f5:32:e0:73:d8:76:a0:8e:62:97:de:e9:38:37:e6:
05:e7:59:3a:75:c6:79:6b:7c:33:35:d9:c4:df:90:4a:85:82:
cb:c0:51:60:67:55:d2:1e:b2:35:74:66:1d:23:48:e3:67:85:
03:9a:12:30:ab:93:48:6c:9e:c4:fc:4d:d1:cc:42:67:17:85:
66:94:f2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:27 2026 by rpki-client