Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
File: yPV2sjbj7l0fmZnD27fBbEUfnh8.mft (raw, json)
Hash identifier: czpePVjPBqwgOpfX8qRnaJzIwqEKJwpq7M26ycmXtlY=
Subject key identifier: DD:22:FC:65:AF:75:14:09:5D:A8:2A:44:FB:AC:68:CF:46:7A:6F:3F
Authority key identifier: C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
Certificate issuer: /CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Certificate serial: 019D3789C292C469B3A6C0B3D4B495F3C95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
Manifest number: AB
Signing time: Sun 29 Mar 2026 03:01:08 +0000
Manifest this update: Sun 29 Mar 2026 03:01:08 +0000
Manifest next update: Mon 30 Mar 2026 03:01:08 +0000
Files and hashes: 1: CP7XAwVQiMz2Q6ounln3ad2WPSs.asa (hash: dHCmJ8L0c4EENwwKULgdmd0i+CmSQXVp+UAKeU6FrFw=)
2: XE1hA9GoSwCCQTzlrJPud8rwosk.roa (hash: YUFGp3JRLfRJAoIp1SDL1Gd34rSXV9G2A1bQuPoViQw=)
3: yPV2sjbj7l0fmZnD27fBbEUfnh8.crl (hash: UdZVfMNcs/qbwt4gvMaPjkaQDZItFSODAgGmMj5uhOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:c2:92:c4:69:b3:a6:c0:b3:d4:b4:95:f3:c9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Validity
Not Before: Mar 29 03:01:08 2026 GMT
Not After : Mar 30 03:01:08 2026 GMT
Subject: CN=dd22fc65af7514095da82a44fbac68cf467a6f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:d0:35:9d:df:bc:06:8d:89:b5:1f:d0:ff:
ae:78:7e:27:28:ef:65:21:40:09:b7:ea:66:71:aa:
79:1d:c1:84:e8:d6:cb:4c:62:96:92:ab:fc:ea:95:
9f:5e:b6:1d:20:bc:ce:4d:48:50:8b:87:1f:19:07:
e7:12:2e:5b:9a:88:b4:5f:f2:77:89:19:4b:62:2e:
2c:6a:ea:26:1b:54:c9:aa:c4:40:c6:b2:d5:59:c8:
c8:07:5d:7d:70:18:d2:15:e8:7e:44:13:79:74:5e:
49:ed:dd:d8:51:3c:d4:30:5c:cd:48:e0:e8:5d:67:
1b:5f:75:22:24:f8:99:b1:54:ec:43:b2:99:43:b0:
d2:70:cc:6a:ca:39:d4:40:d6:39:5d:1a:37:fa:de:
10:5a:87:82:d9:34:1c:86:b4:ed:2a:c2:59:8e:5f:
33:e3:32:42:83:58:51:98:42:7a:4b:56:26:a1:08:
76:a1:ea:10:58:2b:75:d2:ed:19:8f:9d:4c:9e:52:
78:e2:a3:2a:c1:eb:db:d9:7e:f8:2a:99:31:fd:8a:
3d:65:e1:52:bd:08:10:11:1c:53:2a:a7:c0:b2:53:
9c:c0:83:d5:a8:2c:95:cc:b4:49:b8:a1:e7:5c:54:
e0:c1:ee:a2:c0:dd:d8:15:43:ad:8c:df:5d:c6:6c:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:22:FC:65:AF:75:14:09:5D:A8:2A:44:FB:AC:68:CF:46:7A:6F:3F
X509v3 Authority Key Identifier:
keyid:C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:10:d2:fd:f7:b2:f2:da:30:30:89:9a:16:38:23:61:99:28:
f8:57:e6:e4:c5:c8:e7:79:e6:85:81:c5:a3:eb:73:bb:da:8a:
13:9b:50:ba:fc:9d:0f:b9:23:86:fe:db:80:c9:18:c1:9d:c3:
87:11:1d:75:c7:77:ca:d5:db:f0:b1:90:d3:58:58:7c:8a:4e:
66:f3:2d:45:9c:74:2b:29:cf:f3:71:c6:e2:5b:fd:84:88:88:
47:d9:8e:27:25:02:fe:71:fd:28:cf:f3:b4:10:4e:c8:ec:a9:
74:1c:71:82:f9:1a:ce:bc:ef:13:d6:87:7f:f0:4c:67:e9:54:
67:c7:12:c2:c0:6f:cd:74:5a:c2:45:a6:21:17:e2:31:57:45:
cf:33:e7:b0:62:66:38:df:77:2f:0d:93:83:ba:6b:20:cd:d5:
c0:7c:9c:ef:2b:f7:d8:aa:31:63:9d:46:63:14:b8:8d:4d:dc:
c4:fe:f7:69:ea:77:80:9e:41:ee:11:3b:88:88:48:06:70:cf:
7d:17:23:d1:73:dc:1d:89:16:43:f9:77:01:83:1d:aa:af:c7:
94:55:35:3d:e3:85:be:8b:80:01:0c:8e:a5:e3:a1:cb:d9:3b:
69:9e:83:1a:4a:de:80:ac:05:c6:94:cf:57:4a:4c:7b:e9:f7:
04:54:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:30 2026 by rpki-client