Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier: +ouWcFdkFZBHeRzoUcqBh6XbD7FQArNwecnkqvlMLkE=
Subject key identifier: AF:B0:AB:15:F4:8A:F0:1C:F0:0F:66:5C:B5:E8:7E:43:51:05:F3:85
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 019D38D346282939D15893F314F11F772AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: _xsLd4qUBjb6_7VD2WkixJfaVoY.roa (hash: nohQUdIFn7a7lR0P0bYRkbo26wNDU405wKs7TmIgPaA=)
2: jyhNKA-sqNdbKhKjDCM2oFmxAKA.asa (hash: +kK89jyXB9T4Lltl2vWeU7yjctVLp1sfe0s6KqTiyYE=)
3: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: h7Cw94Yw0bCrU+WF0D2AYWl3RirTLn4pXIJ0+TpWAkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:46:28:29:39:d1:58:93:f3:14:f1:1f:77:2a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=afb0ab15f48af01cf00f665cb5e87e435105f385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:4b:56:72:51:23:2c:d7:e7:b2:83:f3:a9:
b1:39:57:12:c8:66:d5:24:24:4c:74:3d:bd:12:75:
79:7f:a6:28:3c:28:e1:b3:bf:89:ed:33:98:af:bc:
af:71:c3:e5:8c:9b:8e:d6:5e:43:65:5a:cb:95:ed:
9a:2a:50:59:c4:42:64:cb:2e:d4:a7:59:a0:59:8d:
00:5d:26:43:86:ef:36:c3:97:bd:5f:73:8e:60:9a:
6e:74:88:df:61:8f:84:f6:8e:e5:3c:ff:eb:7d:cd:
92:d7:54:53:b8:2d:1e:3c:ef:81:54:c4:60:fb:1f:
54:d6:fb:68:84:68:6e:9a:3a:ab:f5:35:00:c2:f3:
f3:79:32:af:1f:21:46:2f:34:e9:18:0a:ac:bd:59:
49:a8:3e:02:d7:8a:2d:d4:3a:1c:35:8d:5f:fb:cb:
07:6d:b0:dd:e5:04:e3:f8:ec:29:7a:00:b1:54:0a:
9c:52:c6:af:6c:15:ee:e7:80:b0:e8:8e:df:96:4b:
8f:ee:11:36:83:3c:c1:af:2a:4b:72:f6:e0:86:50:
03:01:12:22:d4:1b:e8:66:86:6d:9d:ca:39:01:79:
f5:fe:e1:05:c6:19:35:47:0d:74:7b:25:b4:c7:f0:
40:5c:71:69:aa:ce:c6:6d:c3:b5:f8:20:26:61:39:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B0:AB:15:F4:8A:F0:1C:F0:0F:66:5C:B5:E8:7E:43:51:05:F3:85
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:97:79:c4:40:27:95:7d:7d:d2:d5:80:de:db:87:ec:ab:20:
5c:61:91:f5:99:f1:82:66:34:34:c3:66:7a:72:5e:36:59:83:
3c:52:25:00:b3:bf:93:29:fa:27:51:a2:80:dd:d6:b7:55:b2:
26:c8:86:23:f5:4a:56:b8:3f:ee:c2:03:42:ff:12:20:dd:d5:
55:3d:ad:89:2b:ce:cc:c4:9d:b8:03:f9:55:16:52:3a:b6:a8:
53:1b:98:cf:da:14:40:3e:18:e2:fe:67:70:98:12:f7:58:93:
f9:21:75:2d:c9:8b:75:e5:60:8e:02:0d:71:16:db:48:90:8f:
ae:9d:c0:46:ff:7a:ee:6e:52:2f:9f:bb:60:01:65:a2:3f:32:
ea:84:a9:27:26:45:d3:0f:f8:ea:a8:dc:ed:33:50:82:a4:49:
33:54:24:fa:03:22:f9:b2:6d:48:2d:6f:dc:a8:1e:3a:12:87:
8e:a1:02:d5:12:5f:bb:c6:1d:20:9e:a9:fc:bd:ab:d3:0c:98:
21:37:12:a5:6c:5c:4f:af:56:e6:74:5c:07:6b:bb:04:1e:1e:
69:12:d1:65:db:85:18:33:ab:25:e0:d5:0d:9c:33:e0:10:89:
99:6c:b0:57:ec:57:f9:3d:db:86:2e:73:87:64:8b:1d:9c:85:
e6:fc:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:05 2026 by rpki-client