Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: lQsfJcgnDZFb7k5mPYKL1gCPi/gAQlZ22/Rg2YlAskQ=
Subject key identifier: 08:23:AD:CC:DC:38:1D:63:76:8A:79:DF:A2:04:B3:FD:4C:2C:C1:7D
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 019CE5FF4F6E6FF9FF7F56DB63D20E707AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 1204
Signing time: Fri 13 Mar 2026 07:00:40 +0000
Manifest this update: Fri 13 Mar 2026 07:00:40 +0000
Manifest next update: Sat 14 Mar 2026 07:00:40 +0000
Files and hashes: 1: 2N5xpRJZNXE8KzyralBufJCFAGk.roa (hash: Gqf6uvdiXISfNhnWADuNcf6vyOowNUUoaBaYKh4kdEc=)
2: sO9pZ5FwOgUvmAOslbboRpxPFe0.roa (hash: VzoA5+Tb86N+TDJqseTFSnd7RnKY9v3RHbW5iUpaNO4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: AkwnkC+N4yDDhycTtBHen5LQgy/dFM65RwCokYEeFfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:4f:6e:6f:f9:ff:7f:56:db:63:d2:0e:70:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Mar 13 07:00:40 2026 GMT
Not After : Mar 14 07:00:40 2026 GMT
Subject: CN=0823adccdc381d63768a79dfa204b3fd4c2cc17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ef:2f:16:b2:ed:fd:a5:7d:ab:0b:18:12:ea:
c6:96:a5:77:a2:fb:57:6f:10:86:fa:39:d8:01:98:
23:33:a5:aa:21:7e:77:53:96:e3:0b:a4:23:d0:91:
b6:a2:77:6a:87:c4:d2:8a:d3:73:91:bb:a1:98:e6:
59:9b:7e:5d:64:8c:13:9c:9b:4c:cf:18:d4:2c:65:
a9:35:4d:1f:ce:b3:f5:11:34:ce:b7:87:83:11:06:
c4:bd:68:44:66:20:8c:ee:ff:69:67:e1:f0:e1:cf:
80:05:92:c2:fa:2b:24:7f:73:2d:91:37:6e:bd:1e:
8f:aa:a9:42:64:f0:e0:d6:8b:12:ef:ce:24:39:8f:
24:33:92:6e:1a:ad:7a:be:16:d6:37:3a:49:f9:7b:
bf:10:4f:cf:c6:50:fe:51:f3:33:60:27:f4:58:20:
e8:f2:d0:e9:8a:2a:63:c3:30:d8:4d:e5:94:39:2f:
ba:32:34:fe:64:8b:5a:64:e7:2b:89:af:0a:3d:79:
4e:3e:8b:28:93:4c:c3:18:ed:76:46:16:77:98:2f:
87:62:92:21:51:97:37:89:2f:50:3f:c1:17:fc:da:
fe:54:1b:31:f4:a5:8b:3c:1a:b6:01:ef:e6:ff:82:
63:94:54:d9:89:05:84:2a:a0:98:77:fc:f5:32:0a:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:23:AD:CC:DC:38:1D:63:76:8A:79:DF:A2:04:B3:FD:4C:2C:C1:7D
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:81:dc:85:f0:a2:38:31:f8:1e:a5:a1:02:83:56:96:1b:f0:
7d:47:47:f4:92:b6:fb:2c:77:69:18:25:af:b1:36:59:ad:c8:
22:b3:bd:e5:61:7f:be:ea:aa:da:1b:ff:74:53:7c:87:9c:10:
a2:0a:29:d9:93:91:9d:cd:12:9f:ee:39:76:7f:7e:1f:28:a5:
bc:5f:9c:af:21:51:0d:c4:1c:20:60:b6:64:3b:2c:b6:94:ed:
59:52:bd:82:57:43:ea:1e:42:17:24:cc:07:50:63:5e:1c:4d:
8d:83:fc:b0:1b:ad:c8:79:03:76:9e:04:1e:82:67:6d:44:50:
ef:9d:16:43:5a:a6:f8:40:70:c2:8b:09:d0:67:92:e6:3f:d1:
42:0c:18:41:85:79:88:e5:74:ab:dc:e0:38:ca:b9:7c:4e:d9:
16:78:26:37:f0:31:e7:71:08:53:e5:dd:11:f7:9f:76:ff:41:
7c:5b:94:6f:4b:76:4d:85:c0:d5:d0:5b:50:d8:c7:17:d8:3e:
4e:e8:ea:20:a1:da:96:1a:89:6c:2a:3e:b5:f3:04:05:7c:66:
ba:f1:da:23:cd:a9:0e:de:09:c0:90:15:0e:d3:0f:b4:47:a3:
c1:98:0b:09:84:59:03:dd:c0:cf:b6:8b:28:9a:6e:bc:a8:c6:
8e:e2:7d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:57:42 2026 by rpki-client