Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json)
Hash identifier: RVEeJl6wOnZ3BxDEPDpgs0Q79QzNWvEJuU93nQkGdrE=
Subject key identifier: 0F:69:1F:2F:3E:D6:92:AE:8D:D1:CF:BE:B1:B1:CC:EB:C4:B1:6F:EC
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 019D382E1A1E952E36E74C7E24E2A1524545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
Manifest number: 0FE6
Signing time: Sun 29 Mar 2026 06:00:38 +0000
Manifest this update: Sun 29 Mar 2026 06:00:38 +0000
Manifest next update: Mon 30 Mar 2026 06:00:38 +0000
Files and hashes: 1: SJ8xHe56ZjfCxTRlPLXv7qFZ7S8.roa (hash: hiWvSx1LIs95nwS/yqlT6EgpucPxVBdXThwk+Qru9lI=)
2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: QkyfVsdWqSKWCx0TvdzTidojH8xahCF9ML4nQUJ/nJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1a:1e:95:2e:36:e7:4c:7e:24:e2:a1:52:45:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Mar 29 06:00:38 2026 GMT
Not After : Mar 30 06:00:38 2026 GMT
Subject: CN=0f691f2f3ed692ae8dd1cfbeb1b1ccebc4b16fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:bd:30:fd:9f:da:f2:88:4b:f9:09:64:12:
ce:53:18:d7:d7:b4:61:e6:8c:36:86:23:2c:dc:80:
b0:89:9d:dd:8b:84:c6:b2:8c:52:67:6d:c4:a1:42:
9c:2e:d7:c1:7a:bf:21:4d:6c:c6:1b:6e:d6:6c:a8:
b2:9f:6b:e4:08:c4:04:32:87:be:24:1a:fb:91:11:
34:8d:c5:5c:a4:e1:60:02:af:b7:4f:98:68:ab:6f:
15:20:09:a5:d5:eb:a0:37:fe:be:ca:93:02:10:59:
7f:c5:08:d0:71:88:3f:49:a1:be:5e:f1:69:78:51:
cc:fe:c7:99:6d:d6:0d:d3:e4:d0:f2:c8:dc:42:f8:
b7:1a:61:df:00:47:53:5f:6b:87:b1:35:1a:1b:60:
64:c6:32:21:df:1c:8f:74:7e:2e:f0:ce:d9:27:20:
50:d3:55:41:0b:fe:af:76:96:b6:6f:9e:89:00:c0:
ca:0f:f3:fc:2d:e8:f8:3a:32:39:9a:62:56:eb:3b:
46:d4:50:22:17:2f:1a:a3:94:32:67:9b:35:31:2c:
b8:c3:91:48:2a:d6:ae:1b:37:ed:c0:b7:e7:63:e9:
cb:a4:d5:b4:12:a8:2c:4d:9d:82:97:c4:7a:bb:49:
01:2f:6d:2c:f0:8d:db:5a:58:ff:ce:4a:30:e8:21:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:69:1F:2F:3E:D6:92:AE:8D:D1:CF:BE:B1:B1:CC:EB:C4:B1:6F:EC
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3b:b7:f8:b2:a5:c4:41:c2:c0:31:ff:7b:46:a8:17:f3:cb:
2a:cd:bc:c7:1b:8a:32:32:85:cc:d0:ef:97:ec:a8:25:a9:09:
82:b4:3e:7f:cd:52:c6:79:55:c6:76:04:9a:d3:77:a1:e0:20:
0b:86:6d:e2:06:99:56:f7:56:1d:21:96:7e:dd:57:fb:1d:82:
30:e6:b2:01:41:72:b1:08:3c:56:ae:1a:29:9e:cd:b5:60:34:
35:d6:e0:ee:33:7a:1c:b1:05:89:cc:e7:bf:f2:1c:2f:34:bd:
76:29:85:f5:e5:b3:14:80:8b:fb:f2:cd:d0:f2:94:e7:a7:a0:
2a:50:05:69:88:c4:f4:56:5e:43:2b:69:6d:1b:d4:78:7b:88:
6c:b1:50:c0:aa:04:b5:1f:32:05:74:8a:34:84:2b:8d:92:f9:
38:5d:11:38:a2:79:71:49:01:3b:c7:3f:e6:05:e0:29:b3:fb:
69:68:68:15:64:b1:0a:a5:18:59:4f:14:90:23:7d:3b:bd:26:
18:c4:9a:ca:a7:d7:4c:7d:6a:68:f6:3c:ae:4f:d1:28:b7:ac:
c0:46:51:eb:a0:4f:d4:8b:69:f2:64:bb:f8:99:29:57:27:f6:
36:03:11:e6:c1:a0:ec:a7:6a:bc:9b:7b:2d:1d:f7:17:cd:a4:
d0:6b:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:44 2026 by rpki-client