Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: Zph+IkEWDqEXv2xQeoSZsArxgx7cCxvkvrmHMpll61w=
Subject key identifier: 20:84:C8:06:63:8D:ED:25:F4:B9:0C:AB:7D:D9:E2:96:F3:9C:45:B6
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 019D37531831A04A1BCFA293BFEA04859824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0CDD
Signing time: Sun 29 Mar 2026 02:01:25 +0000
Manifest this update: Sun 29 Mar 2026 02:01:25 +0000
Manifest next update: Mon 30 Mar 2026 02:01:25 +0000
Files and hashes: 1: wUbhJ1Q-nlV3uEvjLuk77UUB7Gc.roa (hash: R+RnalKmquQEDqC7KdcNQz1uImcCiR+mgzNPx6OERvI=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: xK464ueryWd9MuuBn00i/5TuWQnZwfNUKtLiuaKuBPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:18:31:a0:4a:1b:cf:a2:93:bf:ea:04:85:98:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Mar 29 02:01:25 2026 GMT
Not After : Mar 30 02:01:25 2026 GMT
Subject: CN=2084c806638ded25f4b90cab7dd9e296f39c45b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:a4:ff:41:25:b6:6a:65:6a:60:de:a6:7b:
66:2f:7a:74:b0:d9:a3:bd:ce:1f:33:2d:50:f9:a3:
14:e5:84:16:f8:52:39:b7:4b:3a:55:8a:ad:18:7c:
4f:c8:4b:1a:ee:e4:c0:8e:6a:98:57:0a:60:09:d6:
fc:57:d1:90:0b:24:f5:88:09:62:dc:9f:cd:5a:8f:
cd:c5:62:31:79:2c:19:5e:e0:db:14:53:e4:aa:29:
29:22:34:12:07:dd:8c:a5:58:01:3a:e5:25:d3:a7:
0e:93:6e:c7:48:e3:63:56:9f:a6:e0:2d:69:db:9a:
22:b2:9e:73:d3:74:c9:5a:7d:76:a4:30:66:e4:34:
a7:e6:49:35:94:66:37:3c:53:ca:24:be:75:79:21:
ae:36:99:d7:10:62:5b:5d:10:92:17:64:a8:cd:af:
42:cb:bb:1a:c3:a3:10:b7:67:1e:16:24:b0:eb:7b:
8b:36:f7:a7:94:c3:61:47:a9:38:a1:2c:66:55:61:
5e:ab:bc:f3:25:4e:b6:76:bb:01:d6:66:cd:e1:84:
ce:b5:86:fa:72:22:8f:48:6c:c6:44:b6:2f:bd:1c:
99:a6:bd:1e:cd:b6:fa:c8:3e:01:5e:f5:3d:2b:77:
f3:31:23:7e:ed:84:f6:a3:be:dc:71:3d:5c:0c:65:
fa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:84:C8:06:63:8D:ED:25:F4:B9:0C:AB:7D:D9:E2:96:F3:9C:45:B6
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cd:9a:58:74:b4:88:40:75:b2:d6:4d:38:4e:c4:ff:7f:17:
55:4f:42:78:e4:b1:db:51:d8:44:e0:0e:b2:c4:ca:39:4c:1a:
a6:b1:34:aa:e0:f6:0e:c6:bc:10:3a:3d:2a:90:33:33:98:ce:
a4:e5:16:b3:05:cd:78:5f:44:2e:58:51:ba:b6:3c:be:1d:71:
c4:73:9a:04:f6:f6:93:0d:dd:87:94:bb:37:a7:82:d3:96:91:
c6:19:38:61:51:f3:be:72:d5:8d:7b:5b:a8:cc:d3:b3:ba:90:
8b:10:ec:6a:a1:9f:fd:4e:cd:81:f0:b9:34:32:00:1b:d4:23:
54:ee:8a:c6:a4:ae:f2:0a:fb:18:e2:10:dc:0d:79:9d:eb:5c:
f6:ed:c9:95:91:94:fa:c0:b9:15:f1:e0:5d:2e:12:fc:06:76:
35:4a:a9:4b:b3:46:c4:56:dd:2b:5d:12:a6:c0:a8:36:23:cc:
90:f2:70:d6:1d:42:c5:bf:b7:e9:b9:80:0e:44:e8:10:a4:a1:
2d:0a:62:67:e5:15:14:e2:e7:9f:71:20:b9:23:6f:83:8c:5a:
11:d9:5c:fe:1f:9b:20:ad:41:53:72:16:dd:d4:ab:df:09:f4:
88:87:ba:a3:7a:79:9f:07:78:9b:37:c2:40:cd:60:63:4b:89:
0f:5b:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:38 2026 by rpki-client