Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
File: YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft (raw, json)
Hash identifier: Xit/YkymCRzE+bcumIVUOz8O9GeXniJyXgzZWIdmf/8=
Subject key identifier: E5:FC:E9:8E:54:1A:C2:BC:7E:DF:DD:4D:59:A9:2B:31:E3:16:D0:6D
Authority key identifier: 61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
Certificate issuer: /CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Certificate serial: 019D05F871A72C64AA3DE5EBA6C70D069005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
Manifest number: 01C8
Signing time: Thu 19 Mar 2026 12:01:01 +0000
Manifest this update: Thu 19 Mar 2026 12:01:01 +0000
Manifest next update: Fri 20 Mar 2026 12:01:01 +0000
Files and hashes: 1: 1-_NirjIbixf3IjujxY08hJ4sR0w.asa (hash: hVFgDzF+0WyJCjBVO7SZls0NW5esHMScirMPVBWG/Wk=)
2: SthetgpXxzE5DDJOcie_LsqpRQs.roa (hash: 1G5wA/BqRdbf365y+2p8DrgYId5s873fPHSYZ3snZ28=)
3: YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl (hash: XSCnwtkbL4nNUuCqS1hFa4g7QtoXzlHcWQOJrQK+CYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:f8:71:a7:2c:64:aa:3d:e5:eb:a6:c7:0d:06:90:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Validity
Not Before: Mar 19 12:01:01 2026 GMT
Not After : Mar 20 12:01:01 2026 GMT
Subject: CN=e5fce98e541ac2bc7edfdd4d59a92b31e316d06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:eb:23:3d:a9:7e:32:6d:57:e5:07:c9:53:
41:89:c4:a5:63:5f:2f:bf:b1:d9:6a:a0:1e:13:ec:
5d:0e:94:29:33:73:a7:b8:25:ad:ab:7c:fc:42:24:
ed:53:75:47:0e:af:94:73:a5:51:f1:79:03:d9:0c:
70:79:df:64:eb:14:7b:00:6d:a3:4b:99:e2:56:07:
9e:4a:40:c9:4e:b6:2d:5a:b5:5c:6c:5c:8b:30:c4:
ce:db:cb:49:de:17:75:af:36:af:2a:e2:70:71:8f:
50:bd:7a:16:45:f8:05:32:cd:e3:98:1b:58:53:43:
8d:65:66:69:54:b1:bf:ab:6a:a9:03:17:71:1c:07:
f0:37:64:67:6f:e9:ed:50:42:e6:b2:51:18:bb:8d:
ab:a4:72:8c:ea:92:b1:4c:2b:79:6f:5e:ec:c6:fe:
b7:27:6a:51:4e:b6:42:71:93:82:d9:79:65:3d:08:
be:98:b6:4f:dd:d3:cb:a8:1c:de:68:dc:5d:8a:0c:
59:a4:d5:c2:45:7a:e9:1e:8c:73:01:53:de:b7:b5:
28:8c:f0:52:88:47:04:66:2f:7d:19:85:ff:91:84:
d8:a6:22:50:9f:07:32:d8:44:ee:ed:04:4c:52:ae:
64:4e:a4:d9:41:42:2a:a6:95:d5:7c:f8:e8:90:49:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FC:E9:8E:54:1A:C2:BC:7E:DF:DD:4D:59:A9:2B:31:E3:16:D0:6D
X509v3 Authority Key Identifier:
keyid:61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0b:49:bd:bb:b0:18:45:91:5c:08:02:a5:f9:46:5d:0f:f0:
c3:45:d2:88:48:d4:8d:cc:81:6d:d9:28:28:b2:26:89:ab:18:
0e:35:0c:18:b9:7e:f3:6d:a1:cb:c4:2f:60:a6:2c:33:97:82:
f8:84:5c:4c:73:81:58:45:31:d5:41:8e:08:fd:84:ea:4d:60:
ff:b9:a4:62:c8:32:cc:80:12:d9:5a:17:67:db:8c:6c:0d:0e:
d2:20:02:17:24:51:17:dd:4a:62:75:4e:83:52:78:bc:60:4d:
9a:6e:58:18:6c:9f:ac:21:00:5c:71:b7:48:42:25:c3:8a:90:
9b:52:6b:5c:54:0b:0e:d5:c2:3c:a4:99:32:ae:d7:c3:d6:d5:
83:0d:fb:fd:67:11:c9:31:23:fc:b0:11:50:2f:19:b1:7b:dc:
28:e9:6d:31:61:96:75:5c:5d:a9:0e:b9:a1:a8:c2:0f:35:a4:
57:eb:8d:0f:a6:e9:25:d5:12:82:41:40:bd:28:64:40:4c:e1:
35:49:15:fa:5d:af:d4:15:c4:0b:c0:8c:4d:49:b9:ac:b0:9e:
ea:48:d1:35:bf:dd:96:d1:41:56:26:84:89:53:13:04:14:8c:
46:5c:c4:de:97:02:4a:6a:7c:ed:73:59:f7:43:7b:d9:93:92:
c0:12:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 19:19:24 2026 by rpki-client