Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: XX2l+/roF8Sp0JDAdZpMzCDtb/3SCunW+ULp8n17fiM=
Subject key identifier: 4A:E8:F4:18:9A:A6:60:C0:81:C7:74:00:EC:18:18:4C:A9:B7:30:AE
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 019D4167F46B6983A1F4851AB8E43520A425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 09A1
Signing time: Tue 31 Mar 2026 01:00:24 +0000
Manifest this update: Tue 31 Mar 2026 01:00:24 +0000
Manifest next update: Wed 01 Apr 2026 01:00:24 +0000
Files and hashes: 1: 5cWjha-GN6V_9NCDJSfw9KGOEhk.roa (hash: H2Otkpibc9NdK0JV6LzlQxY+/YrLYIKAppuBF7pGTck=)
2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: iIWUlxGksBWAcpkqjBDPNcobjOMlCLqjW/sXNI4vKxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:41:67:f4:6b:69:83:a1:f4:85:1a:b8:e4:35:20:a4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Mar 31 01:00:24 2026 GMT
Not After : Apr 1 01:00:24 2026 GMT
Subject: CN=4ae8f4189aa660c081c77400ec18184ca9b730ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:a5:3a:85:30:bb:1b:f5:17:fc:aa:9a:34:
b1:47:8e:92:03:8b:47:66:50:67:c0:0e:94:e8:17:
75:09:e1:c4:d7:7c:59:3d:15:7e:58:fa:1d:fe:db:
6c:d3:55:50:5d:81:4f:b6:0b:8f:be:14:54:70:6d:
d3:33:ea:d8:f7:3c:5c:97:02:f2:44:b9:51:32:f8:
a3:cf:82:86:4c:b6:1b:33:53:20:08:f7:1f:14:e3:
a1:59:f2:ab:82:a5:30:ae:aa:28:e3:64:32:7f:25:
5f:57:c6:ca:8c:c3:34:91:59:f0:3c:24:71:f0:ee:
c6:55:37:13:b1:b3:b8:7c:7a:64:92:c6:eb:d7:41:
c0:51:e2:28:16:7a:f0:11:76:ef:a5:93:13:cb:7e:
6d:c6:38:f2:da:a7:f1:1f:34:ba:b6:0b:05:53:1d:
53:5d:7c:89:86:c5:3d:b8:5a:9b:e0:d8:41:e4:95:
b0:c0:92:01:28:b8:78:d3:bb:1b:1a:8c:44:e2:e2:
ba:2b:31:60:51:8f:78:68:bf:18:57:34:15:8c:32:
a6:25:a0:92:42:77:07:c5:d9:a5:71:e8:66:0a:27:
68:ad:cc:9a:43:0d:99:00:6b:ba:ae:13:04:18:d2:
1e:e0:be:62:8f:77:3d:42:87:03:b8:02:5f:e3:8c:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E8:F4:18:9A:A6:60:C0:81:C7:74:00:EC:18:18:4C:A9:B7:30:AE
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:86:27:7d:67:98:dc:f4:ab:71:10:21:e9:f5:de:6e:08:c9:
8c:6c:04:20:f4:c9:3c:66:a9:1b:ab:1d:c8:9c:cb:7b:a8:b0:
9b:f3:09:70:58:84:a8:00:c0:e4:fa:52:87:c4:99:d6:d8:2b:
d6:82:90:c1:bd:5c:d2:f2:f0:be:c3:ec:05:25:f0:7c:4d:da:
f2:96:e5:e8:81:99:44:a2:a9:5a:b5:fc:8f:f2:d9:8b:44:a7:
2c:82:fb:df:bb:2e:8e:ba:97:77:d9:48:c2:ce:50:6e:81:05:
27:b1:ca:84:d8:0a:26:4d:14:09:fc:de:7d:fd:34:ad:98:89:
2f:a5:e9:c6:34:c3:83:a5:b9:8a:ad:28:38:26:c3:9a:d4:01:
65:3a:60:c2:30:f1:a7:68:00:61:41:fe:2a:b5:f2:71:77:87:
5b:96:4e:7b:d0:7c:30:6d:95:6c:5e:f3:cc:80:00:bf:d1:2f:
db:61:bd:07:38:48:d8:49:45:60:f5:3c:26:05:bf:fd:ed:0d:
ab:df:b6:93:27:a2:b1:d1:f8:cf:68:f2:31:4f:08:cb:99:7d:
0c:26:d1:dd:13:76:7e:18:86:8a:b0:4a:48:08:04:09:ba:1a:
91:e3:3a:d0:0b:b2:84:0d:0a:28:1c:b0:8f:35:9b:2c:dd:ad:
69:e1:b7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:14:56 2026 by rpki-client