Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
File: YdnzrFCGTRj_Jokzx04qia7GEJ0.mft (raw, json)
Hash identifier: PfaEC9kPNIi10mrxgbACzAjnM7V46tU1pgMhmbWwlkk=
Subject key identifier: 55:5A:E7:D9:80:3C:66:98:3E:76:05:22:E4:4B:74:37:DF:68:66:62
Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
Certificate issuer: /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Certificate serial: 019D382E9B8380978B6D64AAB42D2E861C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
Manifest number: 05CA
Signing time: Sun 29 Mar 2026 06:01:11 +0000
Manifest this update: Sun 29 Mar 2026 06:01:11 +0000
Manifest next update: Mon 30 Mar 2026 06:01:11 +0000
Files and hashes: 1: 0i_alcfMXBsM8Yz7Pmg1_JjXkOU.roa (hash: MMsMTbsCqDU1LtCGJGBX/vBCIrKWQpXi11BOEfnfMFE=)
2: YdnzrFCGTRj_Jokzx04qia7GEJ0.crl (hash: kKlf2CVrPFBDe9WmNj7SkxU1Klr/mVQrNS+7dIijIDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9b:83:80:97:8b:6d:64:aa:b4:2d:2e:86:1c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Validity
Not Before: Mar 29 06:01:11 2026 GMT
Not After : Mar 30 06:01:11 2026 GMT
Subject: CN=555ae7d9803c66983e760522e44b7437df686662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:42:5a:9e:a7:76:c4:d6:a4:2a:72:1a:72:
18:62:ad:41:d8:71:90:e0:f3:32:5a:57:76:7c:e6:
1b:25:df:33:e8:42:10:bd:df:48:03:5d:96:5e:0e:
14:66:bb:c8:3d:94:ba:c0:bd:2b:0e:50:fa:4c:27:
c7:03:24:28:25:8e:ce:6c:3c:aa:cf:a6:1c:78:8d:
96:73:b6:14:f2:ea:3c:37:a4:ee:51:00:f2:81:41:
a5:24:1f:90:81:2f:53:96:1d:d1:1a:5c:6d:e8:e1:
94:bb:7b:9b:ac:9c:35:60:91:0c:0e:0e:f0:8a:c3:
67:1d:10:04:bc:ca:f8:55:47:cc:68:ba:df:6e:87:
62:fd:fe:00:c8:4a:28:82:e1:fe:94:01:b5:10:1c:
96:e7:77:af:a7:8e:f5:94:1f:73:62:30:d4:ca:41:
f9:5c:3f:95:9f:97:5a:77:1a:64:11:d1:73:c7:da:
b5:16:65:74:93:09:d4:fc:d7:20:46:c3:e3:53:da:
c4:95:49:0e:3f:41:f8:e4:f0:5b:92:89:a9:6d:14:
af:53:21:9d:bd:79:bd:e7:19:cd:98:a4:04:18:59:
ac:82:15:b5:2f:fc:9e:b5:f3:90:99:b8:3b:e5:d2:
e8:2a:c9:bd:6b:bf:1a:1b:a9:0f:13:0e:ec:2a:fe:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5A:E7:D9:80:3C:66:98:3E:76:05:22:E4:4B:74:37:DF:68:66:62
X509v3 Authority Key Identifier:
keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c0:77:99:f4:e5:18:f9:03:e5:d5:2e:89:bb:be:d2:f2:31:
dd:3e:cd:3f:94:de:cc:c2:9b:20:83:c1:7e:61:bf:6d:48:6f:
b1:d3:ad:b0:45:db:40:a4:34:66:ec:9e:99:2a:32:b8:8b:f0:
e5:93:6b:5e:d8:44:8c:42:f1:fc:8b:3a:0f:cf:d5:73:a3:69:
86:5b:47:63:60:d6:f0:a2:41:b7:d7:b3:82:11:82:94:2d:9b:
b5:07:51:1e:80:15:ec:33:3b:e8:82:32:00:2b:5f:ad:16:2c:
25:c9:51:4e:c9:83:fe:95:36:d0:41:d3:93:3d:67:e5:e3:5d:
99:c7:e4:87:f0:d3:19:2b:1f:a0:2f:0d:36:e9:95:cc:29:73:
bc:2e:fa:ef:fa:10:01:d0:11:7c:c7:1d:56:8d:2f:2c:74:7c:
62:85:aa:eb:0a:3f:f1:40:7a:5d:a3:03:09:4f:d1:d4:93:78:
08:54:a4:be:43:d2:c0:72:6a:1d:8f:6b:14:30:c8:d7:81:eb:
ea:7a:7c:9b:e1:ac:50:b9:6f:3a:ac:9c:f3:a8:8e:9e:9d:86:
c1:d9:92:f9:87:73:eb:65:6f:2d:cf:69:fa:93:38:c5:9e:49:
80:55:36:59:49:eb:d9:69:bc:e5:41:9a:54:7b:4d:af:7d:f7:
ea:75:df:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:16 2026 by rpki-client