Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: Bdzxrx2ysINjRCj732TY1U+4bvXBVOsWbCmfzEXw8VQ=
Subject key identifier: 75:8D:5A:DF:F3:10:9F:7B:48:3F:C9:51:D4:5E:9F:08:3C:4D:EF:C0
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 019D3909B26002838A05E8E02B95E0A52BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 11E1
Signing time: Sun 29 Mar 2026 10:00:29 +0000
Manifest this update: Sun 29 Mar 2026 10:00:29 +0000
Manifest next update: Mon 30 Mar 2026 10:00:29 +0000
Files and hashes: 1: WEResR1vKVF1XFqQZFnpiSVDhdQ.roa (hash: nNBq14HUZikLjgzpH3qRgEC7vVQNRFCy0PpayQuzXVc=)
2: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: bYWd+ieOFaAqaLT94YOpR1W868gLmv7YjaKZu5YeX2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b2:60:02:83:8a:05:e8:e0:2b:95:e0:a5:2b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Mar 29 10:00:29 2026 GMT
Not After : Mar 30 10:00:29 2026 GMT
Subject: CN=758d5adff3109f7b483fc951d45e9f083c4defc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:94:d3:14:73:d3:c2:84:72:39:1b:1e:1e:
57:63:58:90:a3:0c:04:ee:09:6f:6e:2e:af:43:32:
a6:b3:10:67:fd:fa:bc:b5:59:ff:99:b1:10:df:f6:
e1:44:0a:68:18:98:2d:4d:d3:38:52:7d:82:f3:c0:
3a:09:36:3b:43:b1:5f:44:48:64:67:92:5f:9e:33:
bc:f1:b4:a3:74:49:8b:fb:43:ac:98:20:17:c5:7f:
22:97:2a:ae:a5:7a:d3:e2:66:a4:bf:1e:06:38:15:
48:27:c7:0b:0d:45:7f:a2:05:c8:01:ee:62:2f:63:
cb:45:99:7e:9d:3a:6c:09:18:09:bf:dc:6c:1f:11:
17:95:97:a1:76:bb:db:88:31:09:fb:b6:89:1d:3d:
7b:f6:90:73:c4:16:28:b0:84:df:d1:85:a0:84:c8:
42:d2:75:5c:d5:a2:22:58:b6:75:81:90:df:68:6f:
e5:97:28:2a:43:c5:90:b5:bb:a4:43:4d:67:60:68:
0f:11:80:02:30:d3:8e:ab:7c:b3:e5:12:2d:ad:5b:
df:a8:4d:71:60:2e:1a:79:18:54:f9:a8:e5:b6:94:
26:bd:7f:11:a7:e0:0e:05:f0:47:b9:0c:9e:f3:02:
36:5a:35:3c:36:35:09:1a:5e:82:f6:cf:0a:0f:d2:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8D:5A:DF:F3:10:9F:7B:48:3F:C9:51:D4:5E:9F:08:3C:4D:EF:C0
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c9:27:42:01:46:07:dd:fa:a2:85:31:cc:de:95:db:b0:20:
07:bf:69:c2:05:51:d4:db:b3:df:36:40:bd:99:af:22:12:d6:
a2:0a:16:84:76:f0:7f:65:eb:ed:b5:69:f0:d2:e8:00:50:cc:
5c:5f:38:6e:91:31:00:f8:8b:60:9f:7a:5b:a2:f2:f8:ee:97:
b8:c7:c1:f1:d8:30:94:16:40:02:8a:78:56:48:03:c8:bf:03:
86:20:89:4c:91:02:1d:13:0b:84:47:b9:58:d9:24:e8:fd:6d:
9d:2c:22:0e:94:87:2f:a7:a0:4c:61:81:40:b5:cb:4d:ef:f4:
d0:55:a0:50:9f:9c:05:24:95:cc:bd:ad:e7:38:f5:8f:8e:f6:
83:03:d6:4c:c5:4a:9b:69:52:e6:d6:a4:ef:8f:74:8e:d5:38:
53:e2:f0:27:f7:db:ce:1c:fd:0f:2b:11:15:56:f8:19:f1:ff:
39:a7:36:ae:b0:dc:c8:49:b8:d5:de:6c:9c:36:2b:0c:65:2e:
a9:db:58:44:06:a5:41:af:64:b3:33:ef:5a:2c:a0:80:a4:9c:
f3:51:a7:7e:44:99:a2:b9:a0:d9:1b:a4:ba:45:e8:46:07:a6:
45:91:04:6b:ef:d7:9d:7d:83:3c:ab:41:33:e3:c9:c3:d0:6a:
6f:96:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:54 2026 by rpki-client