Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
File: yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json)
Hash identifier: h+IPtMJMlhE4kNrKx8X3+a1lNczalfolYj6pF7+4/+0=
Subject key identifier: E2:6C:36:B7:D3:B0:9D:FE:02:15:79:1E:62:2D:EF:97:64:21:39:E1
Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Certificate serial: 019D3A5371AA97C1A3E1DFD5912EC8CDEC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
Manifest number: 0494
Signing time: Sun 29 Mar 2026 16:00:40 +0000
Manifest this update: Sun 29 Mar 2026 16:00:40 +0000
Manifest next update: Mon 30 Mar 2026 16:00:40 +0000
Files and hashes: 1: s7yoUaWs_cdTcfxb23hHNbYxU34.roa (hash: HOPZhoocxgo394BFWR+fVdoYGl8HfSPhqPdNa7STymE=)
2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: hhLQiJSURhBIc6zb2NOOpGbmQbLCQMUVNYNkLf4a8nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:71:aa:97:c1:a3:e1:df:d5:91:2e:c8:cd:ec:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Validity
Not Before: Mar 29 16:00:40 2026 GMT
Not After : Mar 30 16:00:40 2026 GMT
Subject: CN=e26c36b7d3b09dfe0215791e622def97642139e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:51:f4:0b:ba:b1:6e:85:39:da:6a:65:ac:
d1:e2:3f:b9:66:a2:2f:b2:43:b8:d9:d8:52:d0:d4:
4b:c6:6b:af:8e:56:a4:1b:49:de:26:af:a8:2e:5c:
18:0f:f1:ab:6f:90:6c:d2:da:a5:fe:df:df:b2:30:
98:7b:b3:96:06:9b:26:46:42:69:0b:f5:68:86:ec:
86:65:58:82:bc:e2:f7:e0:79:6a:03:29:f4:c6:a5:
2c:c3:3a:be:d8:02:1b:5f:7f:68:01:b3:7e:71:8e:
a7:47:3b:26:fd:d4:b0:f0:9a:61:01:83:7b:3a:2e:
15:62:67:44:dd:0b:4d:9c:11:14:e5:95:a9:ce:5e:
87:81:c7:75:60:da:0e:e6:7b:c2:89:4f:85:bd:ff:
4a:99:40:7b:28:97:0e:f0:b9:7a:3c:90:59:ad:b7:
96:e7:d8:7f:f4:26:92:38:eb:cc:c0:30:2c:9f:b0:
db:2a:e2:c3:f1:22:b0:6e:5d:c3:1e:d0:61:df:6a:
ed:eb:35:57:3e:f5:a0:b2:ce:eb:36:df:a5:ce:de:
15:a0:8c:63:a2:58:17:39:ca:a7:f7:a1:1a:44:ff:
69:71:cf:22:61:c5:31:67:34:ca:d4:10:28:97:e5:
90:36:63:b3:23:11:d0:aa:84:be:1a:41:f2:45:8f:
f0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6C:36:B7:D3:B0:9D:FE:02:15:79:1E:62:2D:EF:97:64:21:39:E1
X509v3 Authority Key Identifier:
keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8c:e4:31:84:ab:66:9b:d1:0d:a9:7a:8b:bc:9f:95:03:ad:
fc:52:8f:b8:04:0b:99:3a:72:cf:e6:62:04:a4:84:f5:82:f0:
a5:b9:8c:77:e9:d5:92:ec:f7:93:97:71:79:6c:1d:ff:59:70:
c0:38:ac:58:4b:1c:f8:3d:2f:c2:08:1f:05:ff:4f:2e:dc:a4:
c0:bb:6e:3a:65:fb:81:ad:8a:7e:d9:6d:d2:29:2e:92:2b:f3:
37:71:14:42:40:2d:28:19:e1:34:fe:1e:83:3a:fd:0b:69:d0:
98:fe:b4:5c:4c:be:e2:c7:4d:cf:30:30:98:58:5d:0d:a2:44:
98:74:22:86:f0:58:a5:70:1a:1f:98:52:c9:03:e5:b7:37:59:
91:6c:1e:33:fc:87:10:5a:ef:3c:4f:ed:84:e1:5f:9a:c9:bb:
88:4e:39:2d:3b:6d:b8:09:aa:64:46:e3:3d:0b:f1:8d:bc:71:
36:0f:a5:ff:ea:27:2f:60:f4:e6:d2:97:3e:78:49:21:df:bf:
96:33:96:b6:39:e0:40:61:14:33:7a:26:27:c6:ab:a3:dc:a6:
76:58:9f:fe:70:cb:b3:70:04:62:cc:0d:52:75:1a:a5:c0:d2:
10:38:37:57:ba:9a:b2:9c:28:36:15:14:0b:9c:dc:ae:d9:e2:
57:58:36:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:43 2026 by rpki-client