Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: FG6dOO+0L1i7r2OWMkad3KiAwvtalDm6kDKZmCtMAmE=
Subject key identifier: D6:63:8A:07:DD:2C:B7:BE:DA:CF:9D:2B:50:93:0F:82:E3:1E:B5:9F
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019D39408B8822843E0FAC848F4728D9578D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:00:24 +0000
Manifest this update: Sun 29 Mar 2026 11:00:24 +0000
Manifest next update: Mon 30 Mar 2026 11:00:24 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: X/aQcT6ZxdpiZsTC7yVj0banFZjJ0dEZtTcZWcC9lM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:8b:88:22:84:3e:0f:ac:84:8f:47:28:d9:57:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Mar 29 11:00:24 2026 GMT
Not After : Mar 30 11:00:24 2026 GMT
Subject: CN=d6638a07dd2cb7bedacf9d2b50930f82e31eb59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ec:21:db:ee:69:e9:9f:12:35:00:a7:87:b8:
d7:81:05:3a:17:bd:dd:cb:15:e9:4c:4c:1c:f1:5b:
8f:7c:61:21:d4:bd:d5:f8:a6:62:5f:67:b4:72:9e:
a4:9b:16:b5:79:10:c1:1f:31:45:33:d2:34:13:1b:
00:10:d6:53:b6:de:42:62:28:51:d3:07:20:25:ce:
f4:19:a9:89:3d:f3:0f:85:e2:1e:b4:52:fd:fc:e9:
3f:8a:a2:8d:a5:25:21:c6:db:e3:2f:99:f0:1b:0d:
fb:ef:86:0b:ac:06:78:e6:2d:a2:c7:1e:0a:1e:2d:
f5:15:56:3b:70:8d:03:bc:39:54:88:28:d9:7d:f8:
39:72:21:75:db:b4:ef:5e:1c:46:ce:c6:47:12:7f:
de:7b:fa:1f:ae:40:e8:cd:bd:e4:c6:e2:c9:0a:55:
55:15:4d:73:be:ea:a4:b7:39:f2:8b:ec:30:89:9f:
76:37:99:6d:ec:10:27:72:cd:23:3c:83:e3:a4:b9:
e6:8d:f4:e7:1f:ce:af:e0:ec:1a:9e:5e:a2:c1:a3:
ef:c3:fb:7b:a0:0f:85:82:df:a3:70:5f:ef:dc:d6:
75:20:1c:53:36:77:36:ad:0b:d6:87:c8:93:a7:a0:
b2:01:0b:63:cc:b2:34:7c:81:c8:d4:d3:c9:4d:99:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:63:8A:07:DD:2C:B7:BE:DA:CF:9D:2B:50:93:0F:82:E3:1E:B5:9F
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6e:cb:ff:06:ea:05:88:47:a3:06:50:9b:ba:d6:a8:29:6b:
6f:3d:ac:4d:8c:d4:1e:9b:53:77:f5:5d:0a:8f:30:89:7c:9e:
b6:c4:51:e3:b3:22:31:e1:ba:d6:71:3e:ab:b9:b8:cb:7f:c5:
d1:d2:cb:8e:b8:b4:df:4b:91:81:ae:ef:0a:cb:64:34:8c:7c:
8e:b1:56:b9:39:c9:85:8c:a9:53:36:d6:7e:70:6c:da:eb:d3:
78:03:df:64:86:60:39:a5:3d:08:76:27:e1:34:bd:c7:7a:07:
7a:0c:6b:12:49:ce:f2:0e:21:76:b7:b6:3a:9c:8e:67:93:d2:
dd:23:b9:4e:7d:93:c7:d7:85:b7:27:95:78:28:4a:01:7b:16:
0a:84:60:1d:2f:64:4d:bc:bb:84:95:bd:18:c0:b7:77:0a:ad:
63:13:df:24:20:96:70:f1:a1:60:bc:9a:1b:c9:0f:ff:1b:47:
40:25:89:cd:ff:dd:bc:fb:fa:8e:91:f2:1a:b1:2b:6b:03:e3:
d2:9d:0d:14:b0:cb:69:d2:61:1e:e1:41:e4:d4:5b:36:bc:c6:
a5:12:80:91:d3:06:a2:de:ec:6b:c5:29:39:eb:53:b7:c7:f9:
e3:fb:f1:fe:ab:e5:ae:1c:ee:28:b8:ba:43:b3:e8:49:8c:91:
a1:f2:6f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:12 2026 by rpki-client