Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
File: Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json)
Hash identifier: Pih5mEVxo4LZLuJS90TvgkNg60r0qlwc6/xMKrLynD8=
Subject key identifier: 36:BC:DD:DA:E1:A8:E2:74:D5:7D:8E:32:80:B8:B1:A1:EA:D0:BD:1D
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Certificate issuer: /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial: 019D394177DA9AB2B5C698F7FE8396C3E094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
Manifest number: 07FA
Signing time: Sun 29 Mar 2026 11:01:24 +0000
Manifest this update: Sun 29 Mar 2026 11:01:24 +0000
Manifest next update: Mon 30 Mar 2026 11:01:24 +0000
Files and hashes: 1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: fv/pN9LP8J65C3mCdb/fhIc7pGeADcfCwuC3LEMS0dY=)
2: lx_m8lIf1dHw-IAcYKK_R-Ht8Qk.roa (hash: lr8Q0BYtKVvTJjMgHZk4vVtiuhJT4h3L6oT8ft8o5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:77:da:9a:b2:b5:c6:98:f7:fe:83:96:c3:e0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Validity
Not Before: Mar 29 11:01:24 2026 GMT
Not After : Mar 30 11:01:24 2026 GMT
Subject: CN=36bcdddae1a8e274d57d8e3280b8b1a1ead0bd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:a8:e5:00:a3:8d:31:19:68:96:b4:b1:85:
3e:5e:99:cd:49:be:f7:88:07:f4:f9:4f:f8:2b:dd:
30:5b:50:20:da:b3:29:5a:1f:c8:4d:d8:31:09:6b:
43:93:29:60:cf:ad:5a:da:81:d3:ba:99:e0:7b:b5:
2d:81:1d:8e:42:5f:24:c7:92:84:2a:ab:de:7e:ef:
c3:51:12:51:60:a8:89:e6:65:2e:af:fe:7b:6f:08:
d6:54:31:85:ff:41:41:b3:94:a4:c9:f4:a1:a2:90:
7b:17:4f:7a:67:aa:84:8c:a3:c2:c9:19:de:15:8d:
1d:48:e9:14:95:5e:5b:91:62:1f:d9:6d:dd:0a:d2:
3f:35:20:da:bc:c7:88:32:da:5e:2b:a8:57:ea:47:
29:64:82:17:72:5c:04:cc:c8:1f:e0:37:05:d6:d0:
aa:81:b5:21:83:73:0d:c6:84:bc:f3:55:d2:ea:13:
3a:4f:38:d8:ce:65:5d:51:66:9b:ff:3e:07:f7:39:
ad:2c:aa:72:05:e8:7b:77:43:24:b4:35:38:c0:83:
b3:60:7b:e4:9b:c4:f9:0a:b1:4c:03:6f:d4:82:5f:
23:b9:e6:d9:b4:8e:a8:92:ac:ab:4d:09:98:33:f4:
1d:39:63:98:a1:84:39:34:a8:73:62:60:10:98:c9:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BC:DD:DA:E1:A8:E2:74:D5:7D:8E:32:80:B8:B1:A1:EA:D0:BD:1D
X509v3 Authority Key Identifier:
keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:68:a1:26:bd:f5:02:05:63:fe:bf:89:62:e3:b4:24:1d:b1:
66:6e:b5:3a:ef:15:48:1b:6b:cd:b1:31:fc:45:85:3f:dc:c9:
60:94:be:bc:42:df:c9:1f:81:2c:54:97:3b:a1:16:df:c9:d7:
17:4d:4f:4c:49:5e:b0:2d:82:1d:62:a4:7d:0a:48:9d:f1:02:
05:46:b0:7d:a3:90:35:84:23:c0:06:d3:f6:44:71:ab:e8:98:
36:bd:c9:d9:0d:3e:c0:95:ca:b7:27:e8:75:9f:4d:b9:d1:4c:
77:b4:6f:1e:aa:87:8d:2d:d7:4e:a9:a9:79:40:7a:70:1d:48:
4b:4b:ac:ab:52:2c:c2:17:b2:b8:4d:5b:48:f4:34:bd:d6:69:
92:10:ed:d7:00:3a:f1:a4:fa:db:30:bb:87:ef:1b:3c:9d:24:
bb:21:72:df:63:f7:04:41:48:00:c6:0e:df:7e:00:f9:6c:1f:
c4:e8:09:57:c4:c2:87:b9:88:42:3a:67:71:a1:85:7d:47:62:
eb:93:78:b2:fa:9e:1e:a6:9a:cd:89:24:1a:6e:63:8a:0b:61:
07:76:6c:e6:67:c0:c9:09:ef:54:8f:d8:02:71:b6:fc:73:74:
9a:d9:0d:5c:f1:3f:98:ff:e4:b8:47:67:c2:1c:95:b6:06:89:
0d:85:28:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:45 2026 by rpki-client