Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
File: yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json)
Hash identifier: xSjxQjtbZ9EUmTU2KfDYZjC5cBCntEfFvw4SzSxNhPY=
Subject key identifier: 11:A2:CC:4E:8F:CD:D3:54:09:59:21:8E:9F:22:1D:D5:46:C5:29:01
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 019D3AC186A29B6905E5D7CAEB7CCDA5F8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
Manifest number: 1879
Signing time: Sun 29 Mar 2026 18:00:54 +0000
Manifest this update: Sun 29 Mar 2026 18:00:54 +0000
Manifest next update: Mon 30 Mar 2026 18:00:54 +0000
Files and hashes: 1: Bv3dTcxKi6DR1Gu5OdJV37yth8s.roa (hash: DKEmCC9kN5nknxLmAp5xgLUSVdPR+QR7ELMugI9SFVs=)
2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: mRKle1pJDr1jasdqxv7tiZyk2+CfKc4LZCXvb5QuEBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:86:a2:9b:69:05:e5:d7:ca:eb:7c:cd:a5:f8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Mar 29 18:00:54 2026 GMT
Not After : Mar 30 18:00:54 2026 GMT
Subject: CN=11a2cc4e8fcdd3540959218e9f221dd546c52901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:8e:3a:f9:2d:32:d1:8f:f3:81:e3:be:7a:
e4:81:80:c1:e8:09:25:4a:ac:8e:7f:6f:6b:5b:db:
a3:3e:2b:b2:7a:71:18:b7:77:b4:82:02:a5:11:a2:
20:bc:ca:19:86:72:6c:92:44:67:04:dc:02:b6:56:
a6:12:4d:6c:8b:ff:36:a5:6f:4e:ed:23:9b:d7:e4:
90:75:7c:18:5e:18:7d:22:a4:b9:06:77:f5:b0:e7:
16:6c:12:98:37:45:fa:8a:14:31:9e:1c:72:73:42:
2c:c1:30:68:b8:aa:70:6e:8e:bf:87:6b:60:b2:23:
b4:a7:94:fb:77:fa:f4:87:ce:96:11:9e:c7:bf:7e:
03:0e:23:58:ad:ef:ad:15:8a:7d:fb:f1:e8:ee:e4:
da:dd:76:dc:e7:d0:71:44:04:47:b2:d0:b1:74:a1:
2a:c8:d9:e9:fb:7e:90:2f:d4:e9:29:d1:a7:7a:63:
f2:2a:13:ec:13:1b:91:d0:a2:e1:ce:d9:85:34:9b:
b7:fe:3f:e7:d8:a9:c3:cf:50:c4:20:b6:cd:94:6e:
d0:93:32:1b:2c:b4:c8:46:82:07:0c:bf:f7:0f:9f:
6b:83:4c:51:c3:74:e6:76:14:6b:2c:55:25:28:47:
06:54:52:86:27:9c:2e:ff:d1:98:20:f8:74:10:58:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A2:CC:4E:8F:CD:D3:54:09:59:21:8E:9F:22:1D:D5:46:C5:29:01
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:fd:9d:7a:d1:b0:52:ea:22:5b:13:61:19:ad:97:02:12:4e:
a7:39:f9:ed:64:0b:63:e0:b1:30:90:ef:59:57:f8:66:3d:ea:
5b:ab:b1:77:7e:bc:89:2e:9b:13:1b:73:b7:6d:fe:23:89:0a:
46:3e:01:ba:ce:a2:a9:be:6c:cd:18:27:92:ea:8a:4b:a2:82:
70:4c:47:5d:a5:fd:d3:b9:9e:d3:68:ec:e0:cd:26:8e:c1:7f:
ae:d1:13:a5:cf:5d:91:0c:c4:eb:96:5b:d2:da:81:d8:27:21:
ad:f3:56:18:68:08:87:c2:c1:ab:44:bf:7b:40:3c:60:b2:11:
52:2e:6c:53:e0:77:a2:ba:82:20:0e:24:34:a9:9c:2e:8c:b0:
63:0b:87:8a:cc:ae:05:47:f0:cd:f1:88:89:76:76:f7:2e:80:
c3:ff:a7:dc:3f:d3:77:24:7f:b9:c1:f9:f2:c2:5f:36:20:82:
48:76:48:36:f3:c9:10:eb:7a:92:66:9a:1c:f2:89:68:1d:62:
2c:09:06:38:d2:5b:df:c4:2a:28:c3:6c:05:09:06:30:f2:50:
6c:99:26:1c:13:97:15:0a:24:62:0d:eb:f9:63:dd:20:70:ff:
22:cb:81:5e:8e:51:db:49:75:9e:63:8a:68:87:e7:29:7d:bd:
f3:77:f2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:16 2026 by rpki-client