Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
File: yyBgbecwRW7dczXMiCy99DlvNGA.mft (raw, json)
Hash identifier: AH/YCUZHwvF4I33vUvNg3SoZS8a7kQVEF26eV4CozeM=
Subject key identifier: 5D:22:61:D6:50:9E:82:B3:17:AC:72:A9:62:AE:EE:C5:92:99:5E:44
Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
Certificate issuer: /CN=cb20606de730456edd7335cc882cbdf4396f3460
Certificate serial: 019D3A1CE7A89DD85E51FE1FD52E734E11CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 15:01:06 +0000
Manifest this update: Sun 29 Mar 2026 15:01:06 +0000
Manifest next update: Mon 30 Mar 2026 15:01:06 +0000
Files and hashes: 1: 7EwL1mGTu0TBGPi1jaD8k2mdYVQ.roa (hash: PjxOGxkijM0b0jF5UHBjyKfR1LLX9sThl/uiUwJesfo=)
2: R7hZuzSJ3fOJ-YsqrV0cyLkIQsU.roa (hash: H1csasv2Sk5dYaopJkvpDFzXW3jjYLOcsq1z9G486ss=)
3: yDVUQqdjVn-Gy8jXRHre7qqmO2w.roa (hash: G6iS6MKZGANp8S6J6RugxQ+QOiCCsXNcGfScixS1Z8s=)
4: yyBgbecwRW7dczXMiCy99DlvNGA.crl (hash: SjBehXTQM/BZQDcmgN7xwy3PCRRZ4vOyyciJaETk2Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:e7:a8:9d:d8:5e:51:fe:1f:d5:2e:73:4e:11:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460
Validity
Not Before: Mar 29 15:01:06 2026 GMT
Not After : Mar 30 15:01:06 2026 GMT
Subject: CN=5d2261d6509e82b317ac72a962aeeec592995e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:35:15:d4:a9:9b:42:48:29:f2:91:88:9f:
87:43:5b:d2:a6:8e:16:4e:a2:06:98:7d:b4:ad:e6:
eb:a9:85:ed:4a:5c:4b:15:23:69:37:37:65:34:47:
6d:6f:a7:cc:18:57:93:3b:dc:7b:c9:12:5b:9c:ce:
dc:a9:8d:74:7f:4a:8a:42:8f:19:d0:68:21:7e:19:
0c:89:ee:ba:dd:11:87:56:bd:c8:20:03:c1:7a:0a:
33:2a:96:82:25:2f:1e:e3:c4:49:d9:18:df:c9:86:
8c:da:8e:b9:30:1e:76:99:3a:94:54:a9:13:5c:77:
82:26:ee:bd:e4:4b:6c:9d:10:c0:bd:64:0b:28:c8:
e0:1c:fd:b9:d8:d7:68:99:21:84:7e:4b:c1:32:8e:
94:b1:89:8d:ce:1c:ee:c1:e1:63:da:b3:93:ec:d0:
4d:0a:dc:98:4c:07:0c:3b:e3:9e:7f:84:e9:29:fe:
c6:38:ce:35:6e:fc:87:e0:a1:ef:a4:a4:bc:99:ea:
52:99:2a:d2:e6:6b:75:51:a4:ae:df:c4:3e:b2:96:
3e:3f:11:a3:46:e9:c7:62:a2:f9:38:e4:5a:3e:d9:
64:d5:75:a8:dc:d7:69:65:b5:4f:0e:34:ad:17:84:
0c:70:ba:22:1c:09:af:ec:47:5d:a5:40:65:95:70:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:22:61:D6:50:9E:82:B3:17:AC:72:A9:62:AE:EE:C5:92:99:5E:44
X509v3 Authority Key Identifier:
keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b7:85:0f:0a:6c:a4:89:ee:7a:9f:a2:79:a0:fb:bf:ac:58:
6f:21:fc:ca:a8:51:4a:f8:c1:37:1b:e0:8c:ba:cc:15:33:ed:
de:a0:d1:87:7e:da:38:f1:52:19:06:a1:88:26:16:92:7a:52:
51:b9:09:e4:36:b2:a1:6b:22:ca:ba:e4:7a:48:c2:32:73:68:
64:48:cb:70:47:2b:42:63:57:25:56:e5:10:25:84:2e:1b:f8:
9b:cf:38:12:a9:b1:ba:be:65:3d:f0:00:bb:c8:ef:8b:b4:62:
c1:86:fd:9b:16:a3:89:aa:ca:23:b4:71:37:51:e2:0f:3c:e2:
3d:31:ea:f8:e1:0f:90:eb:ac:85:60:f3:e6:88:e5:94:74:13:
4d:fe:7f:41:6f:a5:f4:50:18:97:ea:16:5c:87:dc:f6:e6:bf:
ff:6d:15:7f:97:21:81:ee:e5:8e:f3:a0:49:9f:a9:22:f3:0f:
56:02:7c:86:94:af:ef:45:30:8a:4f:63:4d:83:20:3d:a4:69:
c3:53:7c:56:cb:9c:74:49:03:78:69:66:87:bf:ce:be:49:d4:
20:de:8b:f0:aa:d0:86:41:61:10:44:72:c7:d6:c3:65:3f:1e:
b5:5b:d5:3f:82:8c:7e:28:cf:3c:4b:15:28:46:6d:69:53:a7:
f4:2e:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:50 2026 by rpki-client