Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier: cJ8ZudSoTaRSk1oi8FpVRqUo4CMasFAEf033aqQM6Qk=
Subject key identifier: D8:E7:89:98:DB:CE:9D:33:BB:4D:A7:C4:8A:A2:0A:09:E6:2F:EC:BF
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 019CE2FE34DBDDB75A8C5D0D8DC7799208C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number: 0C86
Signing time: Thu 12 Mar 2026 17:00:36 +0000
Manifest this update: Thu 12 Mar 2026 17:00:36 +0000
Manifest next update: Fri 13 Mar 2026 17:00:36 +0000
Files and hashes: 1: kmHpE0nIsqnNjXBHZzn8ghlLUAY.roa (hash: vHtrQdMnfFyM3Hed/jGaAR/NyxOc2xl8ZPzUXZL4Gvc=)
2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: bvLNW28yXU4F3A/YQmAcK7E5QVZmERI+R7P06MYm/HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fe:34:db:dd:b7:5a:8c:5d:0d:8d:c7:79:92:08:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Mar 12 17:00:36 2026 GMT
Not After : Mar 13 17:00:36 2026 GMT
Subject: CN=d8e78998dbce9d33bb4da7c48aa20a09e62fecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:d0:80:ce:eb:2a:42:82:d1:0e:3f:fe:32:
de:0b:62:fc:c2:ee:03:12:7f:22:f8:9e:70:34:11:
a7:0f:f6:b9:e7:c3:65:f8:06:d5:4b:6d:34:25:65:
b4:be:6a:f2:91:6c:37:01:f9:3e:ac:bf:58:a7:43:
d8:89:83:79:d1:1d:40:59:73:84:5b:38:43:ac:9f:
80:bf:e8:fa:fc:6f:58:d1:6f:80:f8:cf:f0:38:c5:
89:a4:dc:50:57:fb:36:5c:a5:45:30:dc:42:36:74:
06:a4:7f:7b:ea:eb:cd:3c:5f:5c:5c:5f:52:11:08:
86:55:ce:51:f5:c3:e0:8b:95:e3:62:2a:c2:9a:2c:
21:31:6d:a4:67:3e:15:a2:e8:64:a9:8a:e7:a5:12:
f8:1b:23:da:94:73:ee:6c:7b:d2:3d:b9:04:8f:0e:
16:ed:90:7d:45:b3:7e:d9:85:77:13:80:5a:ef:fd:
71:62:82:e9:a5:e3:df:30:b9:d7:48:e1:b2:46:5f:
e0:df:3e:e7:5b:f8:80:d9:72:4a:37:4b:15:69:d9:
ed:6c:c2:e6:e8:9d:84:e6:1d:96:66:48:57:26:84:
93:5f:69:31:f4:d3:44:29:8e:92:3b:d9:17:63:27:
6d:74:a4:13:1b:44:e8:4e:90:d0:73:8a:fc:a3:73:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:89:98:DB:CE:9D:33:BB:4D:A7:C4:8A:A2:0A:09:E6:2F:EC:BF
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:df:92:81:91:b3:34:02:61:4f:fe:ac:26:02:ea:54:84:05:
26:bf:1d:1e:d0:36:4c:89:41:96:ef:3a:7c:8e:69:73:15:5e:
14:75:45:fa:ee:b9:51:44:2a:0f:e6:77:26:c0:ed:52:cc:2b:
2e:4c:3f:1b:51:c3:6f:1d:73:24:7e:63:a1:08:64:85:01:53:
84:a0:63:49:a5:37:c9:03:5c:40:cc:a5:e3:39:13:a2:63:fa:
9a:fe:e6:5f:a9:51:fd:0b:bf:ee:a4:c0:af:d2:31:54:86:12:
1c:00:17:9e:62:fd:fe:f4:57:2c:62:7a:1e:fb:b2:71:73:6f:
87:3b:b9:9d:c2:1d:50:86:70:3f:5c:82:4a:10:40:0b:ab:2d:
06:e0:f3:13:01:36:34:f0:34:ca:05:a8:51:87:a9:6b:d0:74:
07:a2:45:66:e7:b6:ac:a9:54:13:73:26:86:8c:f6:f9:b9:4f:
13:fa:8a:b4:67:80:31:17:77:32:9f:c8:11:eb:61:52:e6:d7:
2a:0e:6c:fa:34:5d:a2:6d:07:e0:15:22:dd:ed:8c:82:c2:55:
b1:c5:59:21:fe:80:f8:7c:29:df:eb:f5:7b:a7:62:4c:c5:29:
ec:73:38:84:ed:1b:65:d0:ab:26:c0:c0:3b:6a:2f:b3:73:1a:
b8:bf:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:50:49 2026 by rpki-client