Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
File: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft (raw, json)
Hash identifier: 8fKu1e4neptm6z7pIMHlAXRnps3Djmra+L1BylCHwLQ=
Subject key identifier: 40:B6:85:12:DA:56:EF:9C:2D:C7:96:A9:17:85:82:FD:32:A1:0A:FB
Authority key identifier: 62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3
Certificate issuer: /CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
Certificate serial: 019D3941614717F4AB6E8A6ACFE94B2BF3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
Manifest number: 010B
Signing time: Sun 29 Mar 2026 11:01:19 +0000
Manifest this update: Sun 29 Mar 2026 11:01:19 +0000
Manifest next update: Mon 30 Mar 2026 11:01:19 +0000
Files and hashes: 1: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl (hash: +fkc4iauMMFGiff2g7IiOqnyHw7ZZzrN/PKGiq5ltBg=)
2: nURomofbDgSrxYM0O1_tcq9RI08.roa (hash: tbGTgdyklPOm5IjmielhkBjtWa6HmczItFnGfm4z+A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:61:47:17:f4:ab:6e:8a:6a:cf:e9:4b:2b:f3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
Validity
Not Before: Mar 29 11:01:19 2026 GMT
Not After : Mar 30 11:01:19 2026 GMT
Subject: CN=40b68512da56ef9c2dc796a9178582fd32a10afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:13:4e:e7:dd:a9:23:37:3a:51:08:e2:ff:
6d:cc:44:e3:f4:bc:d8:65:21:95:5b:01:cc:03:43:
53:1d:8c:39:e7:53:5a:ef:7f:73:f0:61:44:b1:de:
cf:b5:84:7b:f3:46:41:7c:3e:aa:ef:fb:fa:6f:a9:
5c:ad:be:5b:8b:1a:a8:a7:84:52:ef:63:32:72:da:
ff:bc:fe:5b:f3:2b:88:f9:e3:0a:ee:d8:63:a9:40:
8b:00:e7:ee:00:c0:22:2b:15:5c:4f:71:67:04:04:
c4:ac:10:ba:4b:96:f2:c4:78:f2:93:b6:6c:10:e0:
1f:42:65:c8:00:41:4f:70:e7:c1:e3:59:b7:21:69:
40:7d:c8:18:e0:7b:6f:bb:e1:f4:fc:d7:67:da:58:
bd:2f:0e:95:98:74:01:2b:7b:71:1b:99:d2:82:01:
14:fa:3c:e4:b7:ca:a0:d2:bc:ff:2c:2c:cd:8d:c0:
37:fc:fc:bc:56:ec:1c:46:d1:32:d9:1d:64:2a:b5:
24:e1:4e:02:06:75:29:5c:64:8f:e9:ed:1e:ab:68:
57:bd:73:04:39:76:9f:ca:d2:53:dd:4a:13:1e:83:
03:e9:63:fe:b7:ba:60:31:ac:71:83:66:09:ef:49:
fa:ac:56:80:47:79:fe:c2:91:78:de:ca:4e:b0:b8:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B6:85:12:DA:56:EF:9C:2D:C7:96:A9:17:85:82:FD:32:A1:0A:FB
X509v3 Authority Key Identifier:
keyid:62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:27:40:5b:14:80:c1:f6:90:df:e7:a8:48:4a:c7:ce:bc:a5:
5a:5b:ae:4c:ba:fe:4c:0e:b5:52:e1:c0:a7:c3:42:99:33:33:
25:ec:10:4b:db:f8:69:46:30:f2:c4:9d:f6:52:dd:81:e3:22:
b3:cb:c8:78:f1:36:8c:fa:5d:78:0f:fe:f3:3e:d4:2c:87:e2:
12:51:2c:4c:1b:9e:0c:bd:1c:d3:d7:f8:a3:24:74:fa:91:78:
47:4d:be:e5:28:b9:e1:4a:24:15:89:a5:71:9b:74:9c:a9:8c:
13:77:2e:fe:49:45:5d:ec:a7:a3:d7:c4:bd:2e:1d:fe:df:b1:
15:6e:4d:e7:cc:2b:0e:2f:ec:e4:83:15:ae:55:36:9e:b0:07:
d3:42:1c:47:7f:40:b7:49:25:d1:9f:12:93:60:da:4d:bb:84:
f4:1f:0d:2f:52:21:fe:a9:9f:85:12:5f:34:6d:1d:a2:e3:f9:
98:d8:18:3a:93:8c:b1:de:42:f5:7a:e7:65:d3:06:de:16:8d:
9a:27:b7:50:d2:1d:d4:01:68:f4:1a:a8:0e:7c:c9:2a:70:14:
7b:aa:9f:15:63:0f:ed:73:e2:01:d3:9d:29:7c:e5:8b:df:aa:
fc:91:7a:88:67:f3:d6:8d:e2:aa:8f:32:72:87:e3:55:3e:18:
e4:65:a1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:24 2026 by rpki-client