Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
File: rYY6WJMusYMjlBahz2ao_8POchU.mft (raw, json)
Hash identifier: CiaITvQQsJ7d8/u8bKRiIXq3rAU/CN8VGPZIWrJYSoY=
Subject key identifier: 95:A4:BA:34:C9:B3:29:D5:FC:70:88:53:AC:D2:95:38:A5:BF:86:84
Authority key identifier: AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
Certificate issuer: /CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Certificate serial: 019D382EB00C3FFCE41521FDE1CA65825622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
Manifest number: 0F81
Signing time: Sun 29 Mar 2026 06:01:16 +0000
Manifest this update: Sun 29 Mar 2026 06:01:16 +0000
Manifest next update: Mon 30 Mar 2026 06:01:16 +0000
Files and hashes: 1: rYY6WJMusYMjlBahz2ao_8POchU.crl (hash: xeW8kOKuIO5mLm0a37aMXJT76vialV/0dvcY/YNWkCc=)
2: zdseOPWgg2lI8B3aFn07MpAjRqU.roa (hash: YqWsQFGJ8i94tJHUWkQ69hRrtwrZJWfCWmhdU6kJ5iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:b0:0c:3f:fc:e4:15:21:fd:e1:ca:65:82:56:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Validity
Not Before: Mar 29 06:01:16 2026 GMT
Not After : Mar 30 06:01:16 2026 GMT
Subject: CN=95a4ba34c9b329d5fc708853acd29538a5bf8684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:17:36:eb:aa:63:8d:07:df:5c:0c:ea:2d:3f:
f0:82:62:79:d9:94:e0:69:0b:04:54:9f:76:a7:a4:
ee:59:4f:bb:d1:64:1e:8d:d9:cd:40:4a:e4:72:22:
29:0d:7a:50:d3:6a:ba:49:ff:92:d7:96:1d:5f:1a:
94:7d:8e:f8:91:4f:88:e3:1a:aa:47:d6:36:5f:e3:
93:8b:9f:18:52:64:4d:6a:d8:36:52:c7:67:39:c6:
30:c4:02:7c:3c:97:40:d0:49:7e:47:61:ef:36:7d:
66:9e:7b:7b:70:30:78:6a:57:65:b4:05:63:de:fb:
41:fa:81:76:a2:3f:15:1a:48:15:0c:b6:0b:29:fe:
17:a5:59:5f:f1:03:a8:01:07:82:3e:3d:3c:c1:0e:
57:d9:94:d1:44:7e:f9:d4:77:b4:4a:1d:53:d0:65:
f9:9c:42:9e:3d:46:8f:09:30:9f:5f:ac:92:a3:b4:
6e:c1:62:8b:5a:be:ec:b4:dd:44:dc:7f:78:30:9a:
15:6f:87:71:cc:1f:6e:2f:b7:a1:52:69:1a:59:a7:
07:1b:bb:3e:ae:ce:75:a3:4f:1d:a6:c1:5b:62:6d:
fb:a3:4f:f0:d0:78:6b:0e:22:57:b9:89:75:eb:d1:
58:55:96:d6:45:33:8d:bd:5a:d2:c4:eb:4b:3d:86:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A4:BA:34:C9:B3:29:D5:FC:70:88:53:AC:D2:95:38:A5:BF:86:84
X509v3 Authority Key Identifier:
keyid:AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:12:e7:1f:97:3e:40:7a:4c:31:99:1d:bf:96:00:20:56:34:
bc:ce:7b:28:7e:a5:07:16:3d:df:80:79:4f:20:2f:cf:c5:86:
42:bd:aa:c8:ab:06:44:02:fb:fd:8b:8a:c4:07:94:0a:0b:68:
26:29:3c:55:09:0d:01:3c:7c:a8:52:e8:6f:f4:2d:bc:dc:02:
9c:f0:e0:27:78:0a:25:72:65:8d:3a:aa:17:47:16:86:10:51:
f9:6f:38:23:0e:01:74:d6:ec:d9:9e:30:94:9a:b7:24:01:32:
63:4b:50:9f:2c:e7:0b:26:bb:42:3d:9c:48:84:79:61:c5:a0:
12:69:8b:26:d8:4a:89:7e:52:8a:d0:bb:85:4e:4e:3a:a4:a4:
97:85:78:06:ef:81:da:fa:94:d3:03:4b:72:80:d1:a9:2f:6e:
df:b5:53:fc:a0:c4:2e:22:23:ef:4e:0f:2d:86:20:14:0f:3c:
d3:c7:90:7b:ac:b5:4f:4d:ef:7e:8e:a9:be:c8:31:96:4c:bc:
50:74:24:bd:d5:fb:f6:54:b7:b9:4c:d1:4d:11:bc:bc:bf:3a:
88:6c:1f:4b:df:28:92:1b:39:2b:6d:2f:91:5f:33:85:d5:28:
60:59:23:e1:42:87:0b:78:74:22:b7:b4:2d:3a:75:b0:f2:13:
5c:58:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:21 2026 by rpki-client