Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
File: yPJYziA-BKM_TpBlEVOyWc_6Pog.mft (raw, json)
Hash identifier: 7FQREMIQlHwEP6Tjj6H24z6nCppheDMjt4i4fkm+6zs=
Subject key identifier: 8C:D1:09:8F:5C:B8:98:BE:7F:57:B4:E8:9F:B5:8C:2B:58:3C:68:7E
Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
Certificate issuer: /CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Certificate serial: 019D390A44BB418DEC3CBA3E89265EC66B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:01:07 +0000
Manifest this update: Sun 29 Mar 2026 10:01:07 +0000
Manifest next update: Mon 30 Mar 2026 10:01:07 +0000
Files and hashes: 1: 3rjZfOqcfFgp1DYLD9jqNvMWGus.roa (hash: fSrCbQZ8+s27wLebGDrZ4ZZ4/1z3UheqrVAoboGJ7Y8=)
2: G8OGJTANN3qV1kv7JX6zy4FVdM4.roa (hash: bFzkgRJFLCrTAvumUZb4z2jl9zK7iTZ0HUn21c/bwrY=)
3: abI-CtWCRebzyOLyUaEn0-e6TwU.roa (hash: L0A0kZevsrDZAJ7HVJnBmP3E5ETyTmhjlqZotXcXVI8=)
4: yPJYziA-BKM_TpBlEVOyWc_6Pog.crl (hash: ENAiuBpifubLFWnmTtRx8r3pLdnBHvK2+M54IegdOzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:44:bb:41:8d:ec:3c:ba:3e:89:26:5e:c6:6b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Validity
Not Before: Mar 29 10:01:07 2026 GMT
Not After : Mar 30 10:01:07 2026 GMT
Subject: CN=8cd1098f5cb898be7f57b4e89fb58c2b583c687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:4f:28:83:bc:0b:0f:eb:93:de:55:e0:8e:a3:
22:4f:cd:5c:a9:bf:69:f4:cd:44:6c:e5:d3:89:63:
a4:7a:72:f1:32:fb:69:09:40:c3:d5:1b:6e:e0:7c:
96:ba:19:7d:12:f6:3f:68:24:71:75:19:5c:44:1e:
88:66:f8:ef:a2:a2:98:30:37:0c:5e:7c:4f:7c:06:
20:22:33:48:a3:e2:a9:f9:c7:6c:51:20:45:45:97:
fe:ad:4d:78:a1:df:a5:dd:3c:89:f1:d7:b2:07:c5:
6f:af:78:a6:29:c0:49:b6:b9:b5:ca:cd:14:d0:d6:
dd:26:69:60:a6:8d:f9:55:64:38:d4:4d:d7:fe:7f:
b1:92:c4:61:8f:bf:09:be:0d:53:a2:dd:77:43:bc:
7b:ee:49:41:6a:2c:00:00:b3:57:2c:2c:34:c5:4b:
93:66:97:f2:41:85:c0:bb:67:b7:92:2d:0d:4d:53:
38:63:f9:d7:c3:04:32:b9:46:37:7f:2b:f2:25:49:
34:8e:60:b1:8c:b1:71:00:26:92:6e:5e:6a:bd:49:
eb:41:ad:b3:4d:2f:f4:e1:ce:91:7f:9d:2d:e1:da:
e0:78:75:36:91:c6:75:a0:42:d3:d4:59:72:f9:05:
b0:dd:be:42:1c:a6:86:48:0e:b9:d5:76:df:ed:8d:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D1:09:8F:5C:B8:98:BE:7F:57:B4:E8:9F:B5:8C:2B:58:3C:68:7E
X509v3 Authority Key Identifier:
keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:30:33:79:17:5c:d9:6a:f5:54:ec:8e:00:a8:59:95:5c:dc:
17:55:64:d8:f4:17:18:56:3b:6c:f4:bb:6c:9d:64:34:1c:8e:
af:01:57:27:f6:5b:9f:a7:ad:92:1b:43:2c:42:38:e9:5c:fd:
24:06:c4:66:ae:e4:b1:9a:59:55:5c:af:bf:03:13:7a:eb:2f:
5a:44:c6:de:80:74:8f:52:db:17:5b:b4:8b:91:f5:a1:6d:86:
d0:65:d6:6e:e6:55:d5:76:57:70:59:95:3f:19:06:49:6e:ac:
01:89:72:c5:8b:cd:22:6e:ba:e7:b3:14:12:b9:ec:b7:2b:2a:
db:3f:10:1f:6e:db:d3:04:8c:ff:1c:08:82:cc:b9:a8:47:25:
5c:d3:f5:5e:d2:4f:b5:96:3b:bc:26:e6:81:7c:49:f3:44:dc:
88:3c:c6:95:fe:14:91:2f:90:59:15:02:a7:0c:2c:94:5c:dc:
18:9f:8b:09:f8:51:0e:6f:52:9d:f3:c1:4d:45:12:59:98:88:
fd:71:98:4a:3a:e6:c2:9c:eb:d0:96:28:e2:59:89:8d:dd:c5:
78:1d:19:ac:50:bf:f2:fe:fe:0c:8e:e4:fb:bd:df:88:57:d3:
eb:cd:fb:a3:03:b5:4b:01:27:a5:e8:f3:39:73:c2:0a:d3:cb:
e7:f5:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:01 2026 by rpki-client