Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: RYklu6zHhTdkGBrw19BM4Ee7sHZ88ce5r+bga374u0A=
Subject key identifier: 63:9A:44:4A:38:A2:30:32:F7:13:F6:3D:A3:CB:A8:CA:BF:FD:55:73
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 019D3865FB6ECB368F8638A78823BABB8B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 0832
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: C_wku5jNWsis0PL0WlmaY8cUefc.roa (hash: J88psE63nbYG3X/J1+2VVAZBNf7cffwkkrlJw1ScQ80=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: o7bWXcwbxq4IRPvrpjAiXz24F64mqW6hJNiB8aEgzCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fb:6e:cb:36:8f:86:38:a7:88:23:ba:bb:8b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=639a444a38a23032f713f63da3cba8cabffd5573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:cd:42:0b:95:f7:d4:8d:96:ea:96:3f:22:
43:fe:64:a3:f5:d4:5f:56:79:c8:1d:57:c4:ed:6e:
2a:b4:c6:7d:ef:fd:28:c3:d4:5c:f8:f3:7b:b5:87:
97:a3:fc:cd:c4:05:10:24:a4:df:75:3b:a8:60:2a:
82:63:9f:38:62:3d:2d:c0:05:4a:43:30:c5:c8:c3:
ec:d3:ec:67:3c:7c:d2:37:b7:be:ad:b1:5b:2f:38:
a3:19:ca:c0:31:65:52:fa:f4:27:55:ef:d8:d3:e8:
e2:5c:9e:eb:36:e5:1d:c8:de:67:83:1e:61:76:76:
22:4d:d2:3a:fd:68:c6:3a:4e:09:90:f9:a1:21:ee:
f2:96:35:34:85:46:05:be:28:cc:99:ba:69:34:d9:
fc:27:e5:c4:65:3e:15:74:6d:77:bc:7d:15:de:3b:
80:ed:32:c7:65:a0:96:81:76:d2:91:4f:b6:e0:2c:
32:b5:a2:cf:86:e7:44:5a:fc:db:7f:e7:34:e0:9b:
ca:e0:c5:c9:37:c0:bb:1d:96:47:17:c8:9b:89:3d:
51:0e:a6:f4:2b:25:3d:65:01:bf:9c:05:c9:43:b2:
00:0e:84:89:58:f9:4e:cb:c0:5d:f6:76:de:55:30:
56:87:d8:f6:34:97:c7:d9:65:cc:5c:b1:3d:e4:5f:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9A:44:4A:38:A2:30:32:F7:13:F6:3D:A3:CB:A8:CA:BF:FD:55:73
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f9:a5:c1:cb:44:d5:71:4e:92:2b:34:9a:2d:02:b4:ee:de:
cd:c5:d9:90:49:28:d7:2f:49:93:52:c9:60:7e:bf:fc:90:74:
fc:1a:4f:d2:8a:eb:f2:e6:51:63:67:3f:86:33:c4:72:d6:28:
19:cf:9a:5a:67:7c:ea:f5:02:40:39:60:cd:8a:0b:74:61:82:
52:90:90:1b:f5:80:b5:fa:1d:b4:0f:56:61:70:7c:cf:ca:a7:
31:ce:6c:6a:2c:6e:fd:fd:42:e1:20:2b:90:ed:80:0d:e4:fa:
4e:40:0d:01:69:fb:97:b2:e3:0c:36:06:83:16:ab:02:71:fc:
6c:1d:73:24:94:38:22:de:99:fc:99:6d:46:3d:56:76:d0:3c:
54:11:cb:a1:52:af:36:ef:44:71:5c:69:8f:fd:40:c5:40:ad:
5b:ff:1d:5b:eb:34:62:36:17:2b:90:ea:ef:78:9d:99:dd:e3:
0e:4d:73:f9:f3:68:6f:df:32:90:d4:b2:11:cc:ad:bd:c5:37:
a9:aa:4e:72:48:9f:b1:52:72:82:16:43:6d:c4:7e:81:4e:68:
e8:a8:93:b1:f7:2e:f9:dc:a3:f6:0d:43:2f:36:a3:fe:06:b7:
96:2c:12:91:b8:0a:2d:42:05:23:cc:e8:4d:7e:46:38:cc:73:
0d:67:62:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:55 2026 by rpki-client