Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
File: _y3yl9sa8DdqWipy5pin6yh6868.mft (raw, json)
Hash identifier: uUJ1WOqsRBHGH4lOn2AUvyPbP53gdLTB7K4Wcn0qXQo=
Subject key identifier: E3:BC:6A:F8:2E:BA:E9:92:BC:DF:95:03:92:F6:36:97:B6:F8:09:E6
Authority key identifier: FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
Certificate issuer: /CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Certificate serial: 019CE55B4AFB4B7F6A746E78A1724429F36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
Manifest number: 0720
Signing time: Fri 13 Mar 2026 04:01:31 +0000
Manifest this update: Fri 13 Mar 2026 04:01:31 +0000
Manifest next update: Sat 14 Mar 2026 04:01:31 +0000
Files and hashes: 1: _y3yl9sa8DdqWipy5pin6yh6868.crl (hash: JFvlZVBLoRH+sTjZHnDcmdXbhP/IXZr5Vyuz8TjZY8E=)
2: vkinxgiyd_YGCc2FvXGXlifXXZw.roa (hash: ae69pULyWQhzs8GCwJJ69Rg2AhZZDsijjjtqdA5+8Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:4a:fb:4b:7f:6a:74:6e:78:a1:72:44:29:f3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Validity
Not Before: Mar 13 04:01:31 2026 GMT
Not After : Mar 14 04:01:31 2026 GMT
Subject: CN=e3bc6af82ebae992bcdf950392f63697b6f809e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:98:b4:90:7c:5e:96:c3:1a:a5:68:26:58:
67:1b:15:76:3e:05:75:ed:84:a1:c7:7e:b8:da:46:
68:32:ab:08:65:0a:20:f2:2c:86:41:6b:7d:5c:11:
aa:47:1f:17:e6:73:a0:59:83:75:30:b2:0d:24:4a:
33:66:70:41:ff:1b:f1:36:15:e2:10:7b:28:3a:64:
ef:3c:01:1f:fe:e1:61:6f:d7:4f:a2:bd:d5:3c:98:
04:f4:a4:b3:02:53:57:18:8a:c7:b2:5f:04:72:58:
a5:a8:ab:31:e9:48:65:b6:7e:bd:57:56:16:96:2d:
19:fc:0b:79:78:6e:fc:07:4a:6b:78:d5:bb:ea:37:
1f:8b:cd:b1:8f:7b:26:89:ac:e2:4c:53:e6:a8:ed:
e7:23:48:54:0d:98:69:bb:ec:ce:6c:db:9e:c7:6e:
5f:e7:16:15:09:99:21:31:18:8a:3b:f7:c9:82:61:
39:75:24:bc:fa:68:ef:bf:10:43:58:7c:31:8e:11:
af:99:45:1c:ec:65:0b:31:0f:fe:9d:bb:e1:b2:1e:
dc:6b:21:a9:50:a6:a1:b0:39:a0:d2:76:d9:cb:fd:
77:78:51:2c:f7:3b:c7:8e:92:28:19:71:2d:97:2b:
e8:a3:c5:bd:fa:4a:e3:ac:fe:7a:a7:2d:77:0a:5e:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BC:6A:F8:2E:BA:E9:92:BC:DF:95:03:92:F6:36:97:B6:F8:09:E6
X509v3 Authority Key Identifier:
keyid:FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:a4:8b:6e:08:9a:fd:40:97:77:4b:cb:f1:4a:60:8c:17:91:
8b:47:df:de:b7:52:8b:0a:ff:4a:42:df:59:e2:db:b9:64:8c:
57:ed:1a:eb:b2:23:08:78:89:bc:e0:41:cf:96:1c:16:e5:33:
ca:cd:fe:8d:54:3f:01:72:48:4f:14:fa:e3:79:79:a5:f4:59:
0c:ec:ef:03:b6:09:d0:8c:19:1d:26:4d:84:a6:87:d7:d8:7d:
73:5d:f1:45:11:bc:65:07:9f:dd:0a:f6:3f:91:a3:67:5b:48:
29:35:07:5b:e7:79:73:f0:30:77:19:26:14:77:1c:16:b5:e9:
db:0b:a5:42:34:7f:71:ad:58:f5:74:92:97:49:27:f3:c7:1a:
58:d2:13:4f:b8:81:f1:08:27:61:82:a7:98:b5:1c:19:a0:39:
6a:15:8f:c4:8c:27:16:79:1b:d7:f5:2c:eb:07:b4:c1:d6:fb:
9b:83:23:fd:26:bd:a9:2c:6d:a2:21:9f:83:1e:51:36:52:f1:
0c:5f:88:2e:63:2f:15:5e:db:24:08:4e:2f:11:13:35:b2:02:
5e:3d:48:5e:0b:8c:4f:e2:10:6d:9c:90:55:28:ae:fa:a9:0c:
4a:3e:25:fc:f6:fe:1a:87:12:fc:b5:e6:49:07:ca:90:45:b1:
1d:b2:08:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:19:51 2026 by rpki-client