Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
File: ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft (raw, json)
Hash identifier: G5kj6hy3CFrS4VxaR0ln2Im2Kzw/dRDyabg7jMGcEys=
Subject key identifier: 25:BE:86:B4:26:71:EB:EC:F1:46:8E:66:16:F8:61:D4:1B:3F:DF:93
Authority key identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
Certificate issuer: /CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Certificate serial: 019D371B645C8DB8877180B6ABA4AFFFC343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
Manifest number: 0307
Signing time: Sun 29 Mar 2026 01:00:35 +0000
Manifest this update: Sun 29 Mar 2026 01:00:35 +0000
Manifest next update: Mon 30 Mar 2026 01:00:35 +0000
Files and hashes: 1: aX-bCk9kbXqytG_4jbY-UgtjVKY.roa (hash: ZuwhAjD2QMVYYccyvC88HRDcRNRXFhvyNan7F7qqMoQ=)
2: ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl (hash: +p7ckjcKykP8DNFpYdlR9ThKzInpZsLVWJjgywuoroY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:64:5c:8d:b8:87:71:80:b6:ab:a4:af:ff:c3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Validity
Not Before: Mar 29 01:00:35 2026 GMT
Not After : Mar 30 01:00:35 2026 GMT
Subject: CN=25be86b42671ebecf1468e6616f861d41b3fdf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4d:53:cd:56:6d:5e:c6:a9:f1:bb:cb:41:94:
b4:6e:1f:5e:c1:c9:51:9c:7c:48:fa:3b:26:ba:10:
bf:2d:5b:9b:53:51:87:f5:b1:88:8b:4c:e3:d7:45:
5e:8d:22:e0:ae:95:ff:02:19:29:04:40:e9:4c:bb:
90:a6:07:58:65:ad:06:49:5e:87:4a:22:7e:de:52:
05:91:f9:69:aa:dd:7b:7b:f7:25:dc:80:d1:10:c0:
a0:68:e1:a1:c6:1e:9d:5a:6a:b8:b3:9f:3c:14:e4:
2b:57:49:ac:eb:ba:3a:ed:b4:ae:eb:02:c5:b9:c5:
a3:b1:5e:ba:ee:62:67:be:57:f2:29:e1:9a:06:41:
59:85:42:60:db:73:3e:29:89:45:67:13:ee:c8:ff:
a8:8d:d0:1f:c3:61:d4:ae:5b:62:2b:a5:11:af:1b:
fc:8a:69:e1:c9:e4:80:88:e0:0c:e9:c2:c3:f5:fa:
e7:3c:f2:c8:31:1c:2c:5e:d2:38:38:95:18:25:30:
eb:79:6e:01:43:26:08:1a:c9:5c:ef:30:3a:b3:fa:
a5:67:29:76:33:8d:a9:e6:ee:39:46:f5:45:d7:1a:
2e:2c:1c:10:eb:40:88:48:a1:db:e0:cf:25:f5:0c:
c3:2c:e3:3c:86:a1:d8:0d:7d:8b:41:b8:4c:09:cf:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BE:86:B4:26:71:EB:EC:F1:46:8E:66:16:F8:61:D4:1B:3F:DF:93
X509v3 Authority Key Identifier:
keyid:CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:39:fb:9b:e5:c3:68:c0:a8:25:6a:bd:5f:57:6e:d8:64:4c:
c6:87:11:77:c8:eb:7f:94:28:92:dd:2b:5c:99:ef:96:fb:72:
2f:b2:e5:f4:5f:a3:5b:69:2e:94:93:9a:2d:77:b8:aa:85:a2:
6a:d9:e8:ee:a6:b1:a8:17:2a:93:b3:09:a9:42:c0:47:fd:65:
05:c4:45:4c:2d:e2:31:ab:1c:2b:d5:3d:cd:4c:d2:5a:4b:70:
c5:b5:a7:c2:f4:32:b4:25:6d:1a:ad:58:9b:e8:52:8c:c7:24:
7c:4c:fe:00:e8:49:9a:93:e9:96:9e:ec:ae:73:45:cd:4d:b2:
3d:ef:cd:b6:02:b7:83:cb:ba:eb:a0:8d:8e:63:47:7d:19:00:
08:21:8b:cf:00:5e:c3:70:45:cd:ed:1b:b8:02:59:e0:3d:31:
a9:4b:be:5b:ed:e0:84:4d:6c:25:c1:78:28:ac:25:42:a7:0c:
ba:0a:44:3e:56:5f:66:1b:7e:c4:06:f3:23:4b:3c:b6:73:ed:
fc:0c:9e:2a:67:59:80:e5:59:1b:56:35:07:13:f6:d4:b6:bc:
b8:b4:a3:3d:6c:8d:d7:b3:91:cb:f8:4e:94:c6:47:6f:07:68:
75:d7:29:88:63:9c:d1:33:d1:c8:82:f2:84:6e:c9:95:5e:d3:
68:26:46:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:46 2026 by rpki-client