Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
File: _YmzSchPx7NBKlLWX_Jg0swomrk.mft (raw, json)
Hash identifier: iU+e7AN4hXFTlHCxhbqVMGdRxBYILmDEkhXghIBDXKc=
Subject key identifier: DF:74:82:56:57:49:BF:BB:6F:9D:29:D0:D8:BF:86:17:D8:D8:62:83
Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
Certificate issuer: /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Certificate serial: 019D3977A814126B6137CC6AC15376744FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
Manifest number: 0F20
Signing time: Sun 29 Mar 2026 12:00:36 +0000
Manifest this update: Sun 29 Mar 2026 12:00:36 +0000
Manifest next update: Mon 30 Mar 2026 12:00:36 +0000
Files and hashes: 1: 7B9W0clLzsK4p1pr53bEH61EQBg.roa (hash: g9Qq+800T4dGI74x3Nt1LLvxWvY9mzvmzZ74GSFdjw0=)
2: _YmzSchPx7NBKlLWX_Jg0swomrk.crl (hash: DS4VGF5anHgClpm7r8kE/pU9x8/vyrcRMHE8YlXUkMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a8:14:12:6b:61:37:cc:6a:c1:53:76:74:4f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Validity
Not Before: Mar 29 12:00:36 2026 GMT
Not After : Mar 30 12:00:36 2026 GMT
Subject: CN=df7482565749bfbb6f9d29d0d8bf8617d8d86283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:78:ac:ef:b4:fa:d9:d0:60:74:22:fc:98:
03:d1:51:46:4f:88:db:28:f5:8f:f7:e8:5e:6d:d5:
59:49:50:9d:71:b6:9c:61:c5:ae:c5:ea:f0:e2:f5:
5f:65:91:1c:98:67:d5:9e:97:50:63:33:84:f1:04:
2c:b0:e7:08:8e:65:75:9b:64:c2:38:ba:35:95:76:
7d:6b:79:3d:53:e6:ea:5d:f7:83:cc:00:0f:8c:ed:
74:6f:94:2e:9d:e8:c7:6e:a6:49:de:ba:c3:ef:19:
69:48:c2:2d:89:2e:0e:eb:9a:68:18:5e:a0:42:71:
09:11:38:64:eb:ae:7e:e7:37:ad:13:d8:15:e5:af:
f2:c1:7f:7c:04:e8:ba:f5:8c:c7:8a:f1:e5:aa:59:
f5:f5:0f:ca:0b:e8:47:d9:7a:58:91:58:48:9e:09:
e5:6a:04:bb:75:4a:99:79:1b:d3:8b:ee:7b:c3:2d:
2f:59:a8:ba:43:07:92:5e:e3:68:73:2e:b3:67:60:
66:47:d3:5e:e8:2f:b8:1e:fe:21:20:5a:27:86:9a:
39:9e:bd:07:27:62:0f:6e:87:1d:ca:b8:01:a0:16:
cc:9b:16:01:4c:62:c5:a7:31:c7:ac:68:1b:55:15:
26:3b:ce:f0:ed:1f:87:ea:6e:52:99:b0:3d:46:de:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:74:82:56:57:49:BF:BB:6F:9D:29:D0:D8:BF:86:17:D8:D8:62:83
X509v3 Authority Key Identifier:
keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ce:65:d0:14:2a:01:82:c5:b4:ae:cb:36:9a:cf:c0:58:1a:
2d:0d:7c:6c:8b:30:5a:a9:c4:f5:eb:b6:48:d1:c9:33:78:72:
31:e5:18:12:a4:5e:0a:be:00:40:44:3a:2f:32:d7:c2:ed:d2:
f0:35:7e:d7:4a:70:30:27:e4:a8:72:bb:36:d9:70:ac:b1:24:
6c:86:e2:a0:a0:a2:8e:f4:3b:e1:90:ea:bc:a9:d5:e5:6e:21:
ce:77:46:5d:ac:51:28:05:0e:e7:c7:49:18:91:e8:f1:41:e9:
57:40:d6:bc:23:b1:ae:22:12:5c:6f:d2:b7:29:f8:a1:10:00:
7b:8a:38:ad:26:0f:b0:f2:d9:c4:2b:a9:aa:f8:e0:6e:de:d5:
e7:c0:47:48:5d:27:a9:d0:15:6b:6c:de:5c:cb:52:9c:4b:cb:
33:78:22:a1:2f:0e:c5:18:34:fb:08:d6:e1:40:f0:69:3b:22:
1f:29:24:5b:26:0b:ee:da:0d:58:76:a6:f6:21:0b:61:11:bc:
f7:ac:fd:69:95:d2:af:b7:4d:af:f7:8e:f7:d6:31:bf:54:2f:
d1:3d:f3:91:c5:1d:1e:71:77:eb:b7:06:08:6a:13:bf:26:0f:
a8:f2:c3:f1:8c:11:54:b9:51:8b:ec:7d:7b:f3:15:ed:db:36:
57:ec:99:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:48 2026 by rpki-client