Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
File: yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json)
Hash identifier: WAzMKXM4T3Y6dzcKdyHkWCZ6JYsNtEixKSPVN8qL8fM=
Subject key identifier: 65:D8:B3:6D:C0:03:2E:51:B1:E2:BD:F1:22:16:45:59:D7:D6:A3:86
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial: 019D38D30BC589279746B78BEB906FA8FF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: 1-DbHlApWvHSbpBcMnUYSNB33bx0.roa (hash: OBuf9H667a+ueEzKXN1f4R7v9DKwH4hbK0fjD7m4gDM=)
2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: rI8Bqg6v/y20KjRIAGAoUnjPTC8WCf/KcVNFPv82NFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0b:c5:89:27:97:46:b7:8b:eb:90:6f:a8:ff:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=65d8b36dc0032e51b1e2bdf122164559d7d6a386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e8:7e:bb:a3:ac:06:30:25:e5:41:5c:c5:87:
18:d1:4d:41:51:aa:f1:59:11:1a:3c:89:ee:c4:ed:
89:59:cf:7c:07:b0:cd:15:d1:d8:b6:ca:d4:ed:fd:
66:20:f4:98:e5:08:f0:17:d5:a0:43:6b:8e:88:69:
c9:16:af:1a:92:f9:ab:1a:2c:d5:ff:c7:07:f7:05:
8e:c0:0e:97:a4:92:f5:d5:66:8b:2d:a3:b3:f7:5b:
0d:8d:8c:97:d8:b1:06:72:d7:21:aa:44:af:fb:c8:
04:f3:7b:4c:ba:0f:23:dd:b8:b3:dd:71:5a:a0:99:
5f:36:34:1d:36:27:8c:2d:6e:9e:03:ff:a3:1b:88:
82:62:d3:69:1a:2c:96:ed:5b:50:47:35:53:97:7c:
f3:25:a7:4f:ea:b7:b5:af:61:bf:13:3c:9c:02:81:
60:a3:19:c7:fb:b0:53:bf:58:f5:f3:a2:b9:26:d6:
a1:ee:8d:de:00:d0:89:ec:d2:09:b0:3a:42:ed:32:
11:73:94:6b:1c:f5:f7:fa:5e:ad:6c:62:96:ec:7a:
42:7e:af:7c:68:4d:74:a9:03:ec:e5:ed:06:19:32:
78:ff:9a:80:fd:12:38:e9:2d:fb:67:52:35:dc:6b:
b6:c3:1a:28:34:db:36:d7:5e:a8:36:87:5b:e8:83:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D8:B3:6D:C0:03:2E:51:B1:E2:BD:F1:22:16:45:59:D7:D6:A3:86
X509v3 Authority Key Identifier:
keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b1:6a:51:83:01:19:9d:38:e9:27:6a:89:59:1c:b1:e8:0a:
22:77:3b:a8:63:22:15:29:02:01:a6:33:b2:4d:67:20:d1:20:
7a:ff:52:8c:b1:3f:63:ee:cc:95:fb:6a:ea:50:85:79:f1:26:
5d:ff:2f:d7:86:f4:96:14:dd:12:48:72:ce:10:19:3b:87:f3:
42:2d:da:07:f4:7e:21:96:72:c1:e3:97:27:00:b6:dd:3c:8e:
a7:3c:b6:6b:73:ba:f4:90:98:48:8a:73:98:e8:38:b9:8d:69:
d4:61:92:99:13:08:b3:72:32:e0:bf:da:50:56:c5:c6:c7:e6:
b5:e8:fa:45:2e:46:56:ac:4a:3c:9d:24:8a:e9:e2:4d:d6:88:
c2:59:44:d5:1e:51:fd:62:ad:fa:50:f4:92:65:df:6e:4f:6a:
2e:30:be:18:1e:d0:70:95:59:9b:ac:59:5a:a8:da:7a:0b:d9:
16:df:20:77:b4:2c:37:7e:57:b2:82:13:74:5b:88:8e:95:a9:
14:bb:27:d8:59:48:21:47:44:46:b0:2a:3f:7e:d2:93:be:38:
ca:59:8b:84:e8:5f:9d:53:e1:61:4c:f3:5d:e5:ce:3a:6f:04:
74:b3:24:c9:67:49:4a:cc:99:ef:a4:19:58:ac:17:8a:57:f5:
66:32:4c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:14 2026 by rpki-client