Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
File: Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json)
Hash identifier: CpcNshXbL1+Zh2WRHvwpkCoHT08yBv54lEzlY9BQTbo=
Subject key identifier: 01:B7:5C:99:D0:85:78:83:6B:C3:F5:F0:78:F3:CB:05:D7:87:BE:36
Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722
Certificate serial: 019CF01608BCC6B19B260F6B954ADBEAB0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
Manifest number: 0828
Signing time: Sun 15 Mar 2026 06:01:41 +0000
Manifest this update: Sun 15 Mar 2026 06:01:41 +0000
Manifest next update: Mon 16 Mar 2026 06:01:41 +0000
Files and hashes: 1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: tXCxGUWTDzr9ubwJih/vWVBPM6usE64h5YzbcxD1lO8=)
2: eI-ehXddlcSy-ljw7tvO4bB6Wvw.roa (hash: IitlgjD1A9ywmqlI7KTae7u+H+3I3h+Rr83XGfruLVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:16:08:bc:c6:b1:9b:26:0f:6b:95:4a:db:ea:b0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722
Validity
Not Before: Mar 15 06:01:41 2026 GMT
Not After : Mar 16 06:01:41 2026 GMT
Subject: CN=01b75c99d08578836bc3f5f078f3cb05d787be36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:69:4a:7b:61:ea:a5:fd:d3:76:02:b0:e1:
ba:a1:bb:ff:01:82:16:5a:b2:f3:9c:77:f7:31:fb:
7d:48:ee:56:5d:25:f8:52:15:9a:20:66:c1:ae:df:
1d:68:25:5a:be:77:73:51:ef:5c:7e:96:2d:76:1e:
3f:3a:44:55:9b:16:d2:2a:0f:7a:34:9e:03:98:71:
c7:ec:a5:40:24:93:9b:7b:9a:e7:87:86:e9:8f:4b:
92:9c:c0:c1:1f:04:68:94:96:fb:ee:75:6f:78:4f:
0d:db:40:40:8c:a0:89:56:be:0c:10:7c:f4:2b:d3:
71:0a:d0:0a:5f:26:43:cf:f2:89:8d:dc:f8:6e:76:
50:6f:33:0f:26:00:d6:aa:93:1f:09:0f:fe:88:80:
b2:1a:1d:0d:ae:d0:70:21:10:89:f8:d9:23:69:6e:
5b:eb:a8:27:01:15:51:f3:4e:d6:e3:60:bb:00:52:
3e:37:35:39:26:31:cf:e3:23:49:89:ca:b2:4c:bb:
15:90:ea:2b:be:10:fa:ef:ad:82:98:14:0b:a9:f9:
4b:7e:dc:88:25:a7:71:8a:86:7e:db:7d:72:d1:81:
5a:28:b0:c6:4d:ed:22:ed:56:ef:5f:58:f7:61:9e:
1f:46:c5:67:e6:7f:87:bd:a9:dc:72:dc:b9:9e:57:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B7:5C:99:D0:85:78:83:6B:C3:F5:F0:78:F3:CB:05:D7:87:BE:36
X509v3 Authority Key Identifier:
keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d1:1c:59:01:e3:ae:6c:96:c1:df:13:dd:d2:ed:a1:32:6f:
88:c1:cc:82:d2:e9:ff:77:b0:d7:0c:2c:6a:d8:00:a3:48:ef:
1e:bf:e8:fc:9d:42:f0:9b:42:53:b2:fb:02:45:44:24:af:a4:
9f:c4:92:96:9a:35:5c:72:7f:c0:2f:d5:65:61:10:46:b1:9a:
b4:f7:81:88:f9:ea:bd:f1:37:ac:19:84:c0:3a:e3:36:ec:04:
9d:5b:06:73:22:94:b7:e8:07:ab:6e:23:2b:af:30:43:e2:ea:
ae:81:51:cc:02:f5:19:b8:dd:d2:ce:93:7f:fb:ea:d8:9a:ab:
92:de:fd:95:82:7a:93:3c:a3:ca:de:fa:ad:14:45:1d:cc:93:
e1:77:bc:ab:6b:5f:09:e1:92:eb:3b:ab:42:8c:3a:bd:1e:17:
2a:b0:88:df:61:27:39:f5:f5:9c:ee:64:36:5c:e1:7b:0b:31:
fe:e0:5a:d9:0b:ee:ea:45:b7:d2:e4:43:90:e8:5f:3b:ae:84:
95:f6:aa:cd:fc:ca:3f:9d:c1:2c:25:e1:f8:e8:92:da:ba:65:
86:c9:9a:fc:a0:45:03:e6:02:e5:99:0f:2d:7e:0e:a8:1b:8b:
07:a5:55:fd:55:62:60:9c:83:aa:86:99:2a:1e:d9:56:cb:73:
71:6b:1f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 16:41:20 2026 by rpki-client