Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier: YTu/Xfj2Hx/YQnDC/IeOTR7R0Qnm4sOMMmPKxkwk2ek=
Subject key identifier: 46:E7:79:2C:02:29:C2:78:82:4A:29:D0:0E:32:46:08:EA:A2:6E:A5
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial: 019D3865F7EB9A57ACCD218B9A1944B1C892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: NITgwZ0BoycrXSGPU8iX7ZnWyHc.roa (hash: 5tWOFXf/UnsBI5wfRpAA1+yDyuJUDNX32cEt3vj5vdk=)
2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: 53OpEdSzWICV2loW9sGhL0jrB6BbUwQZU+0Y2hvXDdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f7:eb:9a:57:ac:cd:21:8b:9a:19:44:b1:c8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=46e7792c0229c278824a29d00e324608eaa26ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:19:e1:a4:3a:b6:a9:cd:e7:52:fa:86:dc:
01:9b:cf:8d:6d:d6:b3:4f:21:8b:ba:20:35:fa:7e:
e0:c9:c0:6c:b3:f9:77:94:db:28:d0:2e:ee:3a:e1:
80:28:bf:dd:f2:c0:11:e4:e4:c1:61:1d:a2:5c:c5:
f0:73:58:ff:0a:83:d8:53:aa:7f:ee:0f:6e:a0:d0:
13:75:6a:f0:9c:dc:2a:d1:0b:75:0d:90:64:84:b6:
1c:45:83:27:e0:83:3c:da:49:4e:0c:10:17:c5:2f:
22:48:7d:a7:5d:19:02:e4:0b:3d:52:41:c8:b5:95:
1d:1e:dd:b5:88:7a:fd:c5:79:79:78:c0:07:29:f3:
a1:48:34:97:b7:04:ad:f8:75:df:9f:89:f5:55:2e:
c3:bb:2f:ec:2c:da:dc:ec:e5:c2:67:e0:04:e2:fb:
e4:f2:fb:94:9b:59:57:47:d8:b5:28:30:55:a5:f4:
90:de:6a:5b:c5:e3:1f:b2:bb:0c:a6:1e:02:e0:26:
60:63:a7:22:96:06:85:36:00:38:a4:88:a2:3d:c1:
95:c3:eb:45:7a:b0:09:76:eb:69:36:16:16:3f:6c:
15:bc:a6:84:7f:54:c5:01:94:54:a5:39:91:bd:a8:
ec:d8:8d:c1:b4:75:22:ad:a9:8f:18:b1:a3:94:f7:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E7:79:2C:02:29:C2:78:82:4A:29:D0:0E:32:46:08:EA:A2:6E:A5
X509v3 Authority Key Identifier:
keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:30:3f:b7:2f:62:d7:8d:0a:d8:8e:34:e6:13:6a:be:70:75:
e7:37:68:41:ef:ba:6a:29:29:c9:1d:fc:fd:aa:a9:cc:c9:f1:
61:fa:91:f4:8a:4e:23:8a:c3:12:1f:32:1b:ad:81:a2:c2:ad:
dd:9a:54:36:ed:11:db:a4:67:0e:0b:b8:db:a0:cd:2a:62:ae:
2d:f8:19:3c:69:a3:69:9b:7d:82:58:5e:c8:ea:e7:c0:81:1d:
88:6d:65:4c:74:79:d0:9d:d9:27:08:eb:99:52:64:6e:6d:60:
47:37:cf:14:12:08:17:cb:21:c4:c1:21:3f:2f:80:8c:46:5b:
0f:ce:18:d6:2d:b8:5b:7e:6c:09:7f:60:96:63:3f:46:04:89:
3d:6e:2a:7c:53:16:32:6b:34:38:66:e2:17:04:bb:f8:b4:03:
a4:46:34:d1:f8:30:de:71:8e:b4:77:92:c4:1b:dc:34:3c:ab:
f1:95:33:82:03:02:fd:c1:ba:b7:72:a6:b8:dc:4a:64:e3:fe:
00:6a:36:b2:97:ed:85:ea:03:05:23:41:60:d4:44:c7:cd:53:
50:14:81:54:e0:6b:81:28:f3:a1:73:8b:75:9f:fb:98:f8:99:
cf:73:c0:76:0c:9b:61:38:ad:2b:01:fd:1f:6f:c0:0d:95:a5:
cd:08:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:26 2026 by rpki-client