Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
File: yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft (raw, json)
Hash identifier: ztglur9+deH+dmVN0x2hESxdtEdoTTwy9ua5TvyQgrE=
Subject key identifier: 00:CD:59:D8:01:91:87:C0:34:32:7C:5C:83:69:50:92:AF:B8:84:62
Authority key identifier: C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
Certificate issuer: /CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Certificate serial: 019D37895CBBE44F8FA42A98528DFA45B830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:42 +0000
Manifest this update: Sun 29 Mar 2026 03:00:42 +0000
Manifest next update: Mon 30 Mar 2026 03:00:42 +0000
Files and hashes: 1: Y7bdVsOqZQqj1I_OKBkoS9oMFd0.roa (hash: uxAajtv2PDYgeD7fkffrgQE1gHL9LPe5ZmBXFSGnqgI=)
2: yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl (hash: 02Z+LUm0VBmxByVznIHUopbS0GuWvfJy9BmegEXlpes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:5c:bb:e4:4f:8f:a4:2a:98:52:8d:fa:45:b8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Validity
Not Before: Mar 29 03:00:42 2026 GMT
Not After : Mar 30 03:00:42 2026 GMT
Subject: CN=00cd59d8019187c034327c5c83695092afb88462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:1d:f6:b6:65:b0:30:b6:30:ca:f3:27:a8:
be:f9:68:21:f3:a0:fa:63:e2:d7:b8:71:6c:ea:ef:
eb:99:f4:0c:84:d8:90:cd:be:33:1e:9d:09:98:75:
5d:a7:48:7a:3d:98:1e:4c:c2:2e:cc:e3:e8:63:25:
41:bb:6c:4c:be:3b:84:e0:14:dc:67:8d:44:0b:b1:
9c:64:25:7c:9a:d2:f5:6a:5b:cd:36:cc:03:8d:65:
43:6c:eb:48:ea:bc:83:bd:c0:25:5d:56:36:b8:55:
eb:cb:03:11:a1:55:0f:cb:47:6e:4f:f1:c7:7b:9a:
72:a7:8d:90:b2:13:fd:87:52:77:0f:6f:ec:52:c1:
fb:d1:e2:78:26:81:6e:6c:90:eb:2d:50:6c:0e:1d:
fc:65:dd:58:4b:3a:cd:fb:da:a5:43:d4:43:03:fe:
84:18:f2:39:93:85:93:bb:da:60:5d:29:61:95:ad:
58:28:b6:ef:11:49:b6:64:ff:54:06:0b:26:06:3f:
09:ed:a4:23:a0:e3:93:a5:16:a6:54:ba:7f:d6:b3:
99:52:a9:40:79:4c:c8:f7:2d:6c:e6:05:1b:98:b7:
71:31:0f:f0:2c:e5:c0:9d:83:2d:9f:ba:ac:9d:ba:
e1:00:19:31:86:84:02:98:13:29:21:15:a4:f6:80:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CD:59:D8:01:91:87:C0:34:32:7C:5C:83:69:50:92:AF:B8:84:62
X509v3 Authority Key Identifier:
keyid:C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:71:83:a3:f6:74:c6:6f:ad:c6:0e:0d:4e:e2:bb:f9:88:15:
4e:0f:5e:bd:02:1f:f0:47:b6:7c:30:aa:0a:16:10:ee:f5:e5:
c7:e5:a4:2f:87:52:6b:55:1f:14:c0:2c:bf:47:42:86:93:ba:
0d:da:62:67:51:39:00:a2:93:8f:3b:81:51:99:72:3a:d4:b1:
80:8c:ab:17:25:78:73:ed:a4:24:80:4a:6b:e5:cc:13:10:d5:
a0:91:d1:e4:60:84:aa:b6:ff:d3:c2:22:6c:e4:e9:4f:df:72:
77:81:60:59:48:bb:c1:08:4f:38:24:11:ee:5f:5c:62:af:e8:
22:d4:c3:e0:e8:e2:d0:b6:bd:b0:73:8a:bd:a3:9d:60:6b:95:
5b:a3:11:ac:55:7a:79:fd:06:8b:fd:b1:6a:25:bf:e2:85:fc:
36:b9:d6:09:99:2c:cc:cc:82:68:0b:04:74:3c:c2:7e:1e:10:
fb:01:ee:6d:8f:8e:1c:6a:45:70:b5:22:55:f2:5a:bb:99:d2:
ba:4a:a8:5b:00:75:d9:fa:cb:b9:00:7f:cd:d8:26:5c:fa:7e:
b0:f6:c1:da:23:c4:4b:74:af:d5:93:c2:ea:2f:99:2e:91:e2:
c7:a7:e4:a3:65:1c:63:4e:be:01:12:e5:55:54:84:c3:01:aa:
b3:63:46:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:53 2026 by rpki-client