Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
File: p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft (raw, json)
Hash identifier: M5GnUZx2Z7bAjXkChnnBh14rvotJB/WrjhWXuL4eHug=
Subject key identifier: 1D:75:DD:E0:36:1E:51:3A:E4:75:C4:C8:88:F0:05:46:9B:7E:CA:C2
Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
Certificate issuer: /CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Certificate serial: 019D37897F685DB9C6FFDC30D28E1B52B18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
Manifest number: 0988
Signing time: Sun 29 Mar 2026 03:00:51 +0000
Manifest this update: Sun 29 Mar 2026 03:00:51 +0000
Manifest next update: Mon 30 Mar 2026 03:00:51 +0000
Files and hashes: 1: p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl (hash: 04wwWzKrAtu4uHeBMtuzOeorFiJRpkEzqfY98QBIVss=)
2: zIBznsYExuvGAYxMF0vlek62MTA.roa (hash: HZnWy7k6mRkdORmyH/fBqEuQQJtdSt6XxYg73qEplO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7f:68:5d:b9:c6:ff:dc:30:d2:8e:1b:52:b1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Validity
Not Before: Mar 29 03:00:51 2026 GMT
Not After : Mar 30 03:00:51 2026 GMT
Subject: CN=1d75dde0361e513ae475c4c888f005469b7ecac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:44:0f:7d:94:b5:1f:79:b0:74:e4:3b:51:
61:a1:af:52:12:cf:63:b9:58:26:ce:9a:d1:69:3e:
ca:0c:da:9b:97:9e:43:0d:ef:82:1a:64:c3:73:90:
88:58:d0:08:65:f0:3a:13:68:c1:cc:3b:64:b7:99:
44:5f:7f:bd:3c:28:16:86:a0:fb:f2:e2:85:8d:e5:
60:b6:0f:63:96:a5:fe:02:af:e5:77:51:0c:73:37:
fd:31:83:5a:e5:b5:54:89:6f:d3:03:21:53:15:8f:
09:f9:27:9c:7a:84:e8:14:07:88:d2:2d:4d:76:ae:
0a:3f:88:a7:8c:ba:38:51:8f:3e:b0:4e:2c:da:6e:
46:8e:d4:af:21:b6:3d:1e:32:61:a8:e7:92:45:b8:
92:8c:ee:2f:5a:19:41:e0:92:ad:11:06:4b:43:78:
ac:7d:61:3c:7b:fa:ef:39:17:1e:f1:17:fa:4c:f8:
33:8e:5b:54:d9:a4:23:b1:dd:fb:b5:71:42:a1:1c:
78:3d:fa:4f:02:74:85:e0:3d:c9:68:e2:c5:6f:02:
cf:cc:1a:5e:54:b2:22:b2:a5:be:51:b6:7e:82:70:
c6:73:29:b7:94:b8:7c:fd:80:2c:e8:1a:72:a2:3f:
54:38:2b:8f:83:b5:a4:39:37:7a:34:69:5c:af:ee:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:75:DD:E0:36:1E:51:3A:E4:75:C4:C8:88:F0:05:46:9B:7E:CA:C2
X509v3 Authority Key Identifier:
keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7a:b0:48:5a:00:4f:16:83:2c:c3:24:66:5a:8c:71:c9:72:
18:53:e3:42:c5:60:c8:35:37:ee:a7:72:1e:ab:c3:d9:fa:9c:
25:7c:9f:50:07:60:a4:2f:1d:43:fa:a8:1c:7f:1d:bd:c1:0d:
24:4c:2b:22:23:a6:c3:80:e8:ee:26:7c:ca:b8:cd:d0:66:2b:
58:a1:fa:89:35:85:9e:b0:42:5f:ec:6c:68:c7:e6:6b:a7:98:
0d:03:39:f6:0f:c6:97:91:83:f9:a3:96:6f:5e:b0:3b:84:55:
61:cd:7b:66:10:e7:25:20:60:bd:a2:a6:9e:d0:71:2a:15:46:
7a:55:f6:1c:48:c7:cb:6a:1e:46:d3:80:cf:44:28:95:c2:51:
ea:6f:24:02:94:39:43:e2:04:a8:d6:5e:35:56:a5:f2:81:77:
06:0f:d0:7d:04:90:35:f3:fd:1f:72:99:3d:71:ee:7b:69:43:
92:47:b8:09:d7:80:1e:9b:23:c3:dd:85:f2:f2:db:14:e3:3f:
7d:e6:76:8b:a0:ae:10:71:6e:7b:8a:fd:f3:79:76:a1:2e:c3:
10:e3:c9:97:4f:58:4b:4f:22:19:06:04:c5:f8:c9:de:d8:05:
4f:42:1f:68:ed:7b:15:bc:77:cc:6d:69:3b:5a:e2:19:79:bd:
c5:f2:56:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:43 2026 by rpki-client