Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
File: ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json)
Hash identifier: BzlOBTmgHu5QLNOY8iekuPtp4MTfmuWQ6VVia1KOfKs=
Subject key identifier: 59:88:F6:DF:A7:DD:9C:F5:1E:C2:F7:22:17:AB:2D:21:9C:33:43:27
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial: 019D3977ED96E5B4BA178F03E0C2B71F2E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 12:00:54 +0000
Manifest this update: Sun 29 Mar 2026 12:00:54 +0000
Manifest next update: Mon 30 Mar 2026 12:00:54 +0000
Files and hashes: 1: mDqresBCjx5tB2O9064HotHQuTM.roa (hash: VNWcNf8Sdt3FuYIE0VhCUYSxFFyBe4BxXJfzVVJjUDM=)
2: s_AKvxWCsACkF3KVOQOZnp7oWW8.roa (hash: 49Z2BVMcidGjzi+D5MSkcRcdFDX2/JcSVY9r82t0hoI=)
3: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: yAttfnscWfvhjWvKvII/XPRegIymbybKLhTClaGi2YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ed:96:e5:b4:ba:17:8f:03:e0:c2:b7:1f:2e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Validity
Not Before: Mar 29 12:00:54 2026 GMT
Not After : Mar 30 12:00:54 2026 GMT
Subject: CN=5988f6dfa7dd9cf51ec2f72217ab2d219c334327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:12:70:9b:4d:19:f5:95:f4:f6:5e:e3:d2:
db:3d:20:5c:d6:7a:74:95:d9:b7:55:b9:7a:f8:d3:
d5:73:93:fc:31:aa:c2:ad:e5:30:7c:df:ac:bf:06:
5f:4f:b1:27:79:21:80:5f:f3:9c:4c:1c:a9:fb:2f:
61:8b:1e:b8:a9:a4:41:84:d4:d2:45:e6:97:34:91:
e3:09:0e:b8:7b:b4:3a:3c:ab:09:f2:ec:ab:0a:ab:
f8:09:10:b1:65:3e:25:2c:df:1e:b6:bf:74:fa:1c:
8b:42:c8:f6:1d:b8:0e:44:2e:5b:0a:e2:b6:54:65:
98:48:37:82:b4:66:5b:7a:48:c6:49:19:6c:af:49:
b6:5f:83:e7:5a:ff:6d:72:23:e2:7e:3b:98:4a:a4:
06:1d:4b:83:c9:b0:63:cf:f9:f0:51:79:08:c0:99:
70:2f:12:38:76:8b:19:b4:19:84:d1:86:ac:8d:d9:
fc:3e:4e:7a:cb:b5:21:d8:d1:41:c9:c7:61:20:38:
79:b1:8e:cc:b5:9b:cb:d9:9b:0e:8b:cd:af:96:16:
55:4f:64:bf:59:48:a5:b8:e8:80:a3:3b:3c:99:1b:
84:b8:2f:56:ca:64:97:fb:15:6d:54:97:e9:5b:03:
85:ef:f0:61:f5:8f:8b:92:df:c2:5b:50:43:99:33:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:88:F6:DF:A7:DD:9C:F5:1E:C2:F7:22:17:AB:2D:21:9C:33:43:27
X509v3 Authority Key Identifier:
keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f0:ed:2a:0d:f5:e5:4c:ef:ea:3c:84:af:01:c5:bd:a1:62:
72:af:a9:de:91:97:de:46:40:b5:62:31:25:fc:5f:c0:b6:39:
d6:cb:d6:8c:bb:8a:9f:0f:06:fc:2f:ed:10:27:d2:d0:90:cd:
e0:07:79:47:71:74:bb:1a:c1:84:27:65:58:1d:be:ca:24:bf:
e6:22:a4:e0:95:01:5a:6d:e5:85:54:43:b7:06:1b:62:4d:03:
85:65:d6:1f:5a:f3:03:34:01:1f:94:f1:a1:37:16:b7:ff:0a:
89:e2:62:71:16:81:8a:b0:d2:c3:5f:d0:fe:26:44:91:7c:03:
65:c3:e2:14:ff:1d:14:e7:d1:ed:88:72:67:80:ba:69:51:8f:
22:ae:02:40:6c:e0:4a:5e:a1:15:9a:e7:78:0e:d0:2b:72:90:
cb:98:33:69:94:e1:0b:97:af:f1:05:86:0b:a7:be:54:4f:95:
47:c4:f5:fe:41:69:ad:29:4d:ed:20:d8:fc:2a:84:3a:96:0e:
c6:df:27:ae:58:d9:e1:8c:2a:0a:2f:3f:49:92:11:09:25:40:
a3:e7:b7:ca:b6:10:ae:ac:8f:16:81:51:27:53:3c:f2:f4:0c:
80:e2:8b:0b:d0:13:83:1e:32:ec:47:e6:7b:3f:88:57:07:82:
dd:a1:a1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:06:07 2026 by rpki-client