Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
File: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft (raw, json)
Hash identifier: e77L+RJKJ7goXDITzcMndToVfDmAcAwy4V6EEa7KfJE=
Subject key identifier: 8C:D9:24:0C:1F:DB:DF:5D:BD:BE:FA:9B:FB:BB:09:1A:CA:4E:4F:18
Authority key identifier: 63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
Certificate issuer: /CN=6325f514270167a43e65e27df9b3d26efb29c31c
Certificate serial: 019D38D2ACCCEF218592745CE106AD550D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: L5e2K8bgP91xhefaZp4Rp5H5b_g.roa (hash: roY9RVYQ4JVwY7koRQuiYfCYvH5WdQZUxTSOLdnBJDA=)
2: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl (hash: qKsGBx2uaxh9euZGZtvtaoW3IbxMKE30yTFr/1vUc5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ac:cc:ef:21:85:92:74:5c:e1:06:ad:55:0d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6325f514270167a43e65e27df9b3d26efb29c31c
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=8cd9240c1fdbdf5dbdbefa9bfbbb091aca4e4f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:5d:b2:aa:d1:9a:b7:33:07:8e:96:3c:f9:
43:a8:4d:dc:25:c9:5f:f2:db:bd:2b:5c:20:a9:cf:
d4:e8:06:ca:00:35:95:cc:ea:89:b7:d1:52:0d:5d:
3d:01:e6:8d:ed:1b:dc:9b:c8:d3:57:92:71:72:2f:
a5:78:11:82:28:31:c9:8d:77:4d:5a:e9:ce:9b:4b:
95:8a:25:35:d1:bf:ca:11:f1:3f:0a:4e:85:71:a4:
9e:9c:85:e4:a3:99:6d:de:ca:ef:8e:c6:a6:bf:f2:
9a:2a:79:3b:12:74:86:ef:eb:0c:5a:16:71:f0:07:
38:79:ee:65:64:d5:91:6c:5a:4d:c7:5e:13:99:47:
fc:a8:36:a5:de:1c:2b:37:ac:6f:a0:a2:81:49:23:
1d:49:3b:47:86:47:9f:cd:05:64:6e:e6:77:b3:dd:
5f:a5:e1:87:5b:0d:e0:ce:49:b8:77:e5:fc:a5:2d:
f2:68:56:3d:51:9c:7b:dd:08:a3:15:1c:70:53:00:
e3:0c:0b:5c:6b:f2:17:49:e0:de:04:02:18:b0:a0:
05:fe:d0:ac:3f:29:27:3e:be:48:d6:fe:55:30:3b:
70:37:b3:c6:61:ae:ba:ea:fb:d4:b1:db:38:96:a7:
6a:e3:6c:64:79:d9:88:97:8c:a2:56:86:02:cc:ff:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D9:24:0C:1F:DB:DF:5D:BD:BE:FA:9B:FB:BB:09:1A:CA:4E:4F:18
X509v3 Authority Key Identifier:
keyid:63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:67:36:59:ab:56:37:11:f8:78:4b:9e:d7:5a:cb:7c:81:a8:
1d:1d:e4:50:89:24:9f:9e:9d:79:4a:64:75:51:27:23:b2:7e:
06:40:2d:46:ce:87:1e:72:07:2b:98:4d:23:59:41:c5:db:7f:
da:b7:c9:d2:1f:70:37:1a:c8:10:7e:5a:4c:4f:18:8c:cc:c3:
a4:9e:67:2e:fb:fb:5b:50:9e:2f:40:02:17:77:41:21:92:6e:
15:2f:b8:ae:e7:8c:13:e1:eb:fc:52:df:b2:aa:56:37:32:55:
aa:40:5a:ce:ce:be:d4:48:e4:0d:99:1f:6b:df:9b:97:f1:5e:
ca:cc:38:c6:de:fc:e4:26:11:6e:f7:1a:f0:59:3f:29:ae:74:
00:11:ba:b3:be:6c:a8:30:1d:27:b1:37:d3:54:59:4d:b6:e5:
d7:b4:b5:79:66:23:a7:58:e0:83:60:dd:d8:8f:df:bf:3d:59:
33:e3:06:b1:b7:93:53:f0:d6:86:dc:c8:79:ae:79:0c:d5:b1:
ae:b3:bb:90:7a:7e:52:59:68:8d:50:eb:ba:ca:fd:c7:38:e6:
6d:bf:af:95:e2:10:f5:8c:cb:fd:b0:91:3b:85:e3:39:9b:89:
0e:63:46:37:3e:39:09:b2:79:96:26:3b:c1:65:95:12:86:7e:
33:21:13:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:40 2026 by rpki-client