Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File: YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier: fxCQQduFldRL+LHHGY0CKr9Uc2NZI5noSrg0NawaR7g=
Subject key identifier: D2:E3:35:72:53:20:D2:E2:36:63:64:46:FA:C5:08:AF:B0:9E:B4:13
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 019D39E5E8660E590B4C3BA9D891A306F787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number: 15D1
Signing time: Sun 29 Mar 2026 14:01:01 +0000
Manifest this update: Sun 29 Mar 2026 14:01:01 +0000
Manifest next update: Mon 30 Mar 2026 14:01:01 +0000
Files and hashes: 1: 2dNlCcYTwuLwzsnBQLcW5azrUC0.roa (hash: LdCokJaoTg0Ayv8WOg6znK8za4O+cYZSIl7zsI7HgqI=)
2: MMwhBGW76MVn4Dg5EbZwOtE-V9k.roa (hash: hEekmWExVpRk8yl5uIiicxfMKJpS9Azptnbba7Lmq4g=)
3: PJSHdZS95adkLNWcV4sGR1iLw40.roa (hash: 6w7h78uytxCAdBP54QlwzbmDu/qnNv60V+P+VcQ00lk=)
4: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: NXtkpep2H+NEQqEkietxxSAMkNLiyDlomPiixctxzh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e8:66:0e:59:0b:4c:3b:a9:d8:91:a3:06:f7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: Mar 29 14:01:01 2026 GMT
Not After : Mar 30 14:01:01 2026 GMT
Subject: CN=d2e335725320d2e236636446fac508afb09eb413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:c8:4f:da:c7:ef:a3:f2:1e:d5:70:e2:6c:
db:b7:5c:d2:87:d0:dd:55:b6:9b:9d:85:7e:7f:c0:
72:c4:e4:e4:99:94:19:83:8b:ec:96:a1:f3:80:f2:
fe:5d:c5:46:0e:c9:3c:ff:2a:21:4d:15:28:dc:98:
41:ef:1a:2b:da:11:bc:69:ac:b9:77:f1:92:b5:d0:
10:10:8a:89:e0:08:8c:18:66:55:ae:a4:b9:68:0f:
14:fc:56:2a:9d:bf:48:b8:bd:ac:b7:23:19:7e:0d:
cd:5a:66:09:5c:06:2b:c2:a5:cc:3e:19:b2:f4:fc:
95:be:98:9e:6f:73:7e:23:28:5e:ad:27:52:46:55:
ec:a1:25:8d:f5:ae:ea:76:98:75:d3:b6:fa:83:59:
d5:b9:25:c1:90:b4:aa:c6:5e:dd:d6:d2:1b:a8:29:
6c:3a:a8:dd:86:2d:58:64:03:a0:27:dd:fa:7d:ba:
eb:ff:3b:31:62:68:45:b9:26:43:89:59:9c:d7:c5:
d3:c8:44:36:fc:89:97:e1:bb:a4:61:39:43:f6:d3:
77:a6:e6:17:4f:82:9e:65:cc:a6:35:57:de:8d:63:
19:d2:09:28:c4:10:a9:6a:96:42:ee:81:6a:c5:82:
20:16:58:c7:0a:8c:e6:23:0b:6a:41:bc:dc:9f:80:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E3:35:72:53:20:D2:E2:36:63:64:46:FA:C5:08:AF:B0:9E:B4:13
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bb:c5:b1:04:a0:92:8c:f4:eb:6c:25:b6:09:a2:54:06:dc:
bc:5e:38:b3:be:8d:88:37:4a:cf:ab:70:47:e1:b8:cd:d5:6a:
3f:db:dd:ad:d4:65:7d:29:35:7e:57:2d:fd:23:17:12:22:0e:
6c:38:2b:4e:06:54:6b:35:ee:32:97:54:67:0a:53:5b:88:d9:
ac:4a:2a:0e:33:c5:0a:0b:d7:78:41:14:a5:51:cc:95:44:74:
49:db:af:04:fa:e2:ef:65:b7:34:da:59:b0:9d:e4:77:9d:11:
53:11:ac:d9:ff:e5:86:b1:a8:97:9d:cd:b5:13:7e:67:35:90:
37:65:21:a5:fc:a9:26:c2:43:30:d6:15:5a:6b:e0:cc:8e:85:
d7:b9:ad:e6:0d:1e:ad:0a:6e:9b:37:9e:57:7b:44:4d:00:45:
48:c8:b6:fb:70:04:df:7c:1a:ad:6e:94:29:81:68:ae:c7:b6:
7a:d9:39:6e:44:55:e6:3c:55:a0:71:93:d1:77:63:c1:2f:92:
7d:43:58:7c:f5:af:bd:58:ea:26:ea:e2:aa:9d:b0:18:37:44:
cc:9f:fb:64:1b:ad:19:bc:df:7a:b4:f9:75:39:5c:db:19:bf:
1c:e7:5c:b4:25:13:bb:9d:fd:d6:bb:16:d4:2c:33:fd:a5:a1:
29:af:cb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:53 2026 by rpki-client