Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
File: ybssFI7w7gD_WiIa8bxhx-GKpLw.mft (raw, json)
Hash identifier: T+E1u7ASNiZ/09bh9Xoxpbbx90LCyY2Nsfw1HNuE4UA=
Subject key identifier: 6F:EC:0F:68:89:16:2F:63:01:B8:D5:AB:87:1F:76:CE:A0:42:10:B4
Authority key identifier: C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
Certificate issuer: /CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Certificate serial: 019D382E3B94528C645D5F1F855FEE4A3AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
Manifest number: A1
Signing time: Sun 29 Mar 2026 06:00:47 +0000
Manifest this update: Sun 29 Mar 2026 06:00:47 +0000
Manifest next update: Mon 30 Mar 2026 06:00:47 +0000
Files and hashes: 1: 2vfd_kX6R8_1pSce-qH7ueF_CFI.asa (hash: gyU2q6SGexsT0na8dPH6q8my1zwHUMQLEgtgSUYyBL0=)
2: ybssFI7w7gD_WiIa8bxhx-GKpLw.crl (hash: OeGvXdwPzEdxJaTtBJfIbWVK/yTI06QeZNszMduWyr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3b:94:52:8c:64:5d:5f:1f:85:5f:ee:4a:3a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Validity
Not Before: Mar 29 06:00:47 2026 GMT
Not After : Mar 30 06:00:47 2026 GMT
Subject: CN=6fec0f6889162f6301b8d5ab871f76cea04210b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:a6:8d:36:12:0d:ea:ba:86:2d:4c:1f:85:
da:85:40:94:33:e8:03:bb:76:8a:ad:da:e3:7e:44:
89:0f:0d:61:cd:08:09:b9:25:c5:c7:ed:05:fe:90:
09:d4:c8:12:05:5d:3c:24:77:ff:ac:df:04:13:40:
7d:64:46:56:1f:ed:2d:89:93:98:8b:3d:a7:02:4f:
6c:c7:de:d1:d0:3e:8d:23:49:3e:fc:48:c0:8c:7d:
7a:15:4d:e9:0b:37:d0:39:e8:13:83:b7:a3:fb:d7:
f8:db:f8:20:65:20:a4:1d:9b:74:93:11:0b:ca:5a:
10:5f:0b:e7:57:64:72:3f:bb:65:c5:d4:7e:16:60:
b3:94:8a:e3:dc:23:fb:0d:90:28:4d:e7:0b:17:e4:
4e:1b:bd:4f:08:a3:07:84:19:21:9e:2e:68:6a:29:
40:3a:4a:5b:2e:73:4d:c6:9a:00:3d:21:49:af:bb:
23:5f:b5:47:87:66:09:9c:3c:53:24:9a:b7:2c:7b:
e3:94:b6:a9:59:f8:07:57:7b:12:f9:95:90:b0:53:
45:94:a5:a8:64:5f:df:34:1a:67:16:83:4f:d4:f0:
42:a6:e3:7a:85:1a:fb:e9:08:3b:e8:6c:dd:8e:ef:
de:47:fd:db:7e:e8:91:fa:05:d4:de:39:51:4a:1a:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EC:0F:68:89:16:2F:63:01:B8:D5:AB:87:1F:76:CE:A0:42:10:B4
X509v3 Authority Key Identifier:
keyid:C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f2:fe:c0:05:13:76:a4:41:f2:3e:fb:e4:b7:9b:81:df:ad:
f9:9a:41:de:81:ca:39:af:9c:2d:c1:ee:9b:ad:ec:49:0c:33:
78:4b:b4:08:fb:58:b7:4d:76:9f:ae:4a:23:e7:f0:b8:f5:31:
44:c2:04:84:01:47:a5:d8:16:2e:2b:e0:32:ae:40:a9:3c:85:
8a:14:e4:3c:fc:29:19:eb:ba:81:29:a4:6c:61:63:c0:c4:a3:
fa:80:cc:f5:7a:16:69:17:e1:1d:18:b5:0c:4f:7d:f3:21:e7:
7d:d0:26:f8:87:6d:7f:3e:8a:cb:08:42:15:83:4a:3a:cd:63:
20:f9:d3:57:57:4a:93:82:dc:95:10:65:0c:7d:e8:13:59:78:
de:a4:d0:de:dc:8d:a0:11:d3:1f:99:f6:59:1e:b2:d5:b9:b1:
35:db:fa:5a:86:15:e7:05:bd:1c:1e:90:3d:7e:9e:21:93:31:
2f:e0:01:68:7e:31:c2:c2:f5:17:e9:e8:88:4e:a5:34:80:02:
7e:ec:c4:ad:30:cd:7f:34:cd:b9:61:3e:9e:c4:e3:78:b0:aa:
f7:40:91:1f:af:65:0b:6e:2a:67:57:ad:02:b1:71:25:dd:c7:
e7:13:9e:01:aa:4e:e0:61:f3:37:15:a9:da:a2:b9:0d:58:10:
15:b2:dd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:37 2026 by rpki-client