Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
File: yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json)
Hash identifier: lyFMxrRq/Y33bm9aWrjTZUYHZVAkQ9bpNMHH0SXee/s=
Subject key identifier: 8C:F2:76:24:CF:5D:A5:B6:04:4C:48:A9:7A:18:53:DC:64:C3:A3:58
Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829
Certificate serial: 019CE47F1E899FFB511F8FA3D680BD54B6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 00:01:01 +0000
Manifest this update: Fri 13 Mar 2026 00:01:01 +0000
Manifest next update: Sat 14 Mar 2026 00:01:01 +0000
Files and hashes: 1: 1Y3Jx-pHnnlaAgkd81VS3ppPNg8.roa (hash: tTjmMx7gS2w8jTpbpktEzeLgDcYSzx93pMRGzj4kGes=)
2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: 2fEnWD4PfHoGU7ujNbFo7BDeNHrxg1rwkuaQzZLwF4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7f:1e:89:9f:fb:51:1f:8f:a3:d6:80:bd:54:b6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829
Validity
Not Before: Mar 13 00:01:01 2026 GMT
Not After : Mar 14 00:01:01 2026 GMT
Subject: CN=8cf27624cf5da5b6044c48a97a1853dc64c3a358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:b5:87:4c:72:56:b4:9e:30:2a:8c:89:73:
73:44:01:1b:a0:55:63:84:a7:e1:cf:de:36:0c:0c:
ab:d5:ed:4f:ef:69:9a:f5:8c:6f:85:13:91:04:f6:
64:7d:a4:6a:64:a7:18:a7:53:13:5d:c1:da:1f:a2:
5a:15:17:02:a6:68:b8:03:d3:2a:08:b2:1b:a0:ab:
85:de:d8:8c:e8:d8:64:d8:88:a2:93:eb:b5:06:18:
1e:1a:2f:86:19:58:ff:be:81:ae:a0:64:af:76:25:
5d:9e:53:d0:a5:96:4a:65:6c:80:c1:ee:f1:4e:68:
3b:dd:1c:1d:7e:36:af:fd:fa:5e:87:ce:48:ad:85:
0b:ff:a3:af:ac:62:cb:e4:58:22:eb:b2:26:c6:c4:
2b:2c:f2:81:bc:51:44:6f:96:d9:17:de:31:2e:7d:
74:2d:13:56:86:74:61:61:57:da:37:6a:0a:a4:99:
7d:be:7b:7c:57:35:37:f0:7c:98:22:12:9d:3a:ea:
6b:7b:ff:1a:ce:93:e3:ff:0b:81:8e:12:10:f4:cb:
a9:bb:d4:34:15:30:b5:b2:91:12:08:22:0e:b6:16:
33:cb:7a:4f:27:02:fd:69:97:70:b2:d5:0c:7b:84:
ed:a0:10:d3:56:e5:e6:05:62:dc:d9:ba:4a:13:f0:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F2:76:24:CF:5D:A5:B6:04:4C:48:A9:7A:18:53:DC:64:C3:A3:58
X509v3 Authority Key Identifier:
keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:98:d4:be:e2:2a:b5:58:6d:35:c9:ad:1d:ee:6f:7d:2c:85:
14:5b:d8:ba:7f:34:f1:c9:04:9b:a3:d5:2f:39:94:43:76:7e:
6c:a7:e3:c2:88:41:a3:bb:1d:6d:b5:4e:30:59:97:93:2f:03:
5b:f1:b3:c3:ca:aa:bc:0d:fd:34:37:f3:46:50:a3:99:bd:44:
8c:52:19:1d:a2:e2:29:f5:75:36:92:50:6b:3c:5c:dc:d7:f8:
76:25:22:46:f5:23:bf:24:cd:c9:15:5f:cb:59:a8:11:1b:de:
86:fe:42:48:a8:ec:45:67:41:99:21:63:fa:52:aa:6c:a8:24:
33:2a:48:42:d3:9b:f2:c6:6f:a9:0e:1f:79:79:9d:f6:e2:6b:
61:63:5e:f3:38:7f:64:ee:33:ec:91:0d:f1:1b:0e:04:ec:11:
9c:09:78:8a:12:2b:9b:94:17:d1:9a:cd:3a:2a:2b:1d:47:b4:
51:8b:64:0a:b1:38:65:7a:37:ed:d2:58:4c:54:08:c6:3d:9b:
02:98:b4:fa:9a:20:85:f3:e2:c2:15:f7:f4:ae:90:ba:22:9e:
6a:f7:8f:43:0e:95:35:b9:99:70:45:5c:d8:6d:b7:e8:35:88:
54:10:c1:25:69:32:be:38:0e:cd:f9:d9:8d:d2:aa:a1:bb:44:
7a:a4:12:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:13 2026 by rpki-client