Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
File: ySynGDiuM8zsxfEKtU7D_HG_u4I.mft (raw, json)
Hash identifier: 6LmmC+5rrEygYYmad5w2ehMQROTOg5UsCZKCxPyhXyA=
Subject key identifier: 69:D0:78:B6:8B:36:5C:72:66:81:28:48:A1:8E:2A:07:2B:F9:98:15
Authority key identifier: C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82
Certificate issuer: /CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
Certificate serial: 019D37C02EA70DC463813A6B688D971C4678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
Manifest number: 0A67
Signing time: Sun 29 Mar 2026 04:00:34 +0000
Manifest this update: Sun 29 Mar 2026 04:00:34 +0000
Manifest next update: Mon 30 Mar 2026 04:00:34 +0000
Files and hashes: 1: mmjMofrrbKgoCjPRlZXSZw-GT9g.roa (hash: WPU4HxsKpJGTw0PZwb4XnnI8k0102pp1cmkJ3VryINw=)
2: ySynGDiuM8zsxfEKtU7D_HG_u4I.crl (hash: E36E/Qy9M29owGf/5NDUJe4jptaEo23lKiekDhUHC6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:2e:a7:0d:c4:63:81:3a:6b:68:8d:97:1c:46:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
Validity
Not Before: Mar 29 04:00:34 2026 GMT
Not After : Mar 30 04:00:34 2026 GMT
Subject: CN=69d078b68b365c7266812848a18e2a072bf99815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:c1:21:ae:08:0d:31:dd:77:50:af:30:55:
92:d6:bb:9b:b7:52:f5:19:4c:05:b1:5b:32:02:8a:
f7:c7:21:1a:c8:dc:8d:bc:4c:91:97:de:c3:7b:53:
df:77:70:6e:88:d2:a8:4e:9a:bc:2b:ae:4d:31:1b:
72:10:e1:62:c2:77:5d:32:85:70:cf:3d:f6:54:a1:
2c:65:82:ff:8f:0b:bc:0c:8d:88:09:d5:ee:34:5e:
4d:28:ff:ab:c4:58:b8:e2:45:ec:19:cd:f1:7e:a2:
34:f2:25:56:98:7a:6a:eb:60:b9:2c:7c:cd:15:67:
5c:e2:9c:db:1c:2d:a0:96:e3:98:f4:e5:8b:3a:11:
23:d5:82:92:b5:d7:4c:a2:4f:e2:d8:b8:5a:48:54:
ba:32:e9:b3:84:66:65:0c:89:85:6d:bf:17:cc:92:
7e:f6:9e:ed:00:94:c4:12:c7:15:37:1e:d0:fa:da:
22:0c:34:c2:72:87:e0:07:8c:23:f1:7e:c0:c9:9e:
48:ea:2a:82:4e:b8:94:c2:ff:17:e9:94:39:95:8a:
c7:68:0b:ff:86:2d:3f:9b:39:f3:80:03:75:9c:ff:
bc:7e:3f:9a:4f:0c:19:dd:4d:32:04:5a:7a:7a:2f:
69:89:58:f9:17:fc:b2:8c:cc:af:c5:4d:23:7f:a7:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D0:78:B6:8B:36:5C:72:66:81:28:48:A1:8E:2A:07:2B:F9:98:15
X509v3 Authority Key Identifier:
keyid:C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9a:40:39:01:a8:35:3b:e9:0e:15:35:8f:24:d3:74:53:97:
f5:81:9c:77:0a:ea:df:eb:97:f4:c9:58:cc:dd:14:13:91:6f:
aa:ae:e6:18:c9:c3:5a:4f:78:bd:6f:ff:e6:00:46:01:d0:ef:
ae:7a:1e:80:e3:8a:df:00:46:63:36:e9:fa:31:bb:35:57:3d:
06:7e:a5:29:2e:cb:09:c5:00:a3:cd:f5:34:02:99:02:fa:a7:
c3:22:df:d4:48:43:b4:4f:6b:33:6a:d3:fe:96:9c:2f:2d:c4:
a8:69:9a:70:8f:e8:82:93:58:be:9b:11:45:5b:64:15:44:c5:
b8:2c:c8:84:54:e5:50:fe:bc:89:55:bd:c5:fa:d9:43:68:f0:
6f:80:52:b4:4e:ba:2e:ea:98:6f:81:3a:fa:46:9c:06:82:95:
3b:50:d0:22:cc:d1:7f:c9:b3:e1:10:58:4c:26:6e:f7:f5:c7:
b1:bf:10:a1:c6:0c:aa:17:c4:b3:92:30:df:fd:90:fb:a0:7c:
bf:bc:d2:92:c5:74:36:98:61:e9:c3:9f:0d:b2:c3:d0:26:a5:
2f:f4:3c:31:a2:16:c8:a2:6c:4e:c0:52:9d:8d:25:9c:fd:e3:
1f:bf:a4:4f:f4:97:4f:09:44:49:4a:37:ee:08:8b:6c:b7:bc:
12:ee:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:07 2026 by rpki-client