Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: vNHObYDYtP0VMN/mKHJHazssAwhFyuEHrikU7EiNzNc=
Subject key identifier: 8C:6F:D2:7A:55:CF:81:B4:10:FA:BB:61:67:3A:7A:5D:4F:C1:66:D9
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019D371BED0FF56A305F2F94E0490F0AB714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 07E2
Signing time: Sun 29 Mar 2026 01:01:09 +0000
Manifest this update: Sun 29 Mar 2026 01:01:09 +0000
Manifest next update: Mon 30 Mar 2026 01:01:09 +0000
Files and hashes: 1: Ewfu9z930MhyPX8313muaLXe2oM.roa (hash: xaNiT68XuLXKua+vW1yOiyZ2EeD/WOwvk5iab3yyEqE=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: hOL5O5ieQtHP5/nNgfr5uihm6DctjFEcIZvvd5Yi6gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ed:0f:f5:6a:30:5f:2f:94:e0:49:0f:0a:b7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Mar 29 01:01:09 2026 GMT
Not After : Mar 30 01:01:09 2026 GMT
Subject: CN=8c6fd27a55cf81b410fabb61673a7a5d4fc166d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:66:11:42:46:15:61:d7:cb:81:f4:b6:cc:
eb:78:e5:f9:4a:af:46:16:45:07:1b:e2:f2:99:2a:
2a:71:69:0f:32:05:1f:4f:90:34:e0:18:1b:88:46:
b0:15:13:65:53:2e:ae:75:31:cb:44:a7:ca:40:12:
52:a6:67:48:7e:9a:3b:42:80:83:8a:c5:7d:16:0c:
bd:66:61:b3:1c:b0:e4:03:89:62:d8:13:c1:e0:3c:
8a:8e:a6:26:57:0e:2e:cd:3f:b5:30:6e:4c:23:b4:
ef:e1:cb:6c:8e:38:4d:47:a4:77:19:53:74:25:70:
3a:8d:af:f3:a1:e2:9b:50:0f:7f:69:64:e3:9c:88:
22:72:e6:55:02:41:42:4f:8c:53:44:7e:b3:bd:1b:
1f:74:4b:5a:45:c3:19:29:da:f6:b5:86:43:f8:da:
86:fd:29:6e:24:b7:41:6d:fb:5b:42:88:c3:c9:7e:
59:a5:9e:3b:6a:b1:39:13:aa:d6:a5:18:31:9c:66:
2f:cf:02:66:3d:d3:d8:bf:8a:c5:30:d4:13:8a:06:
31:e6:49:72:b7:64:08:88:7f:6a:8e:11:d2:f3:5a:
0a:44:f6:b3:e5:0e:23:8a:5d:57:bb:08:d2:3c:54:
25:fc:7b:fb:f5:fa:9a:6d:86:69:a2:30:e5:5c:40:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6F:D2:7A:55:CF:81:B4:10:FA:BB:61:67:3A:7A:5D:4F:C1:66:D9
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:a8:be:04:58:c4:7a:9c:88:48:5d:f3:e2:bb:aa:08:7d:95:
62:bd:46:ed:af:54:57:d2:84:ad:b4:ff:6b:39:7b:9f:c7:fb:
c1:59:49:d3:2a:04:26:2d:33:88:22:ab:b0:16:e1:44:56:ed:
8c:1a:d4:fb:2f:11:43:38:c4:dd:24:d1:f8:2f:e6:dc:1c:c9:
1e:0c:95:8c:7a:84:7f:eb:6a:ed:b9:e3:7c:f2:2d:82:ab:5a:
55:b7:63:3e:3b:37:20:55:22:aa:04:b0:53:e9:89:1c:e1:b8:
b0:a0:e4:e2:62:2a:9e:87:9d:46:44:41:43:d6:98:09:b3:6c:
8e:0c:2a:72:7d:c8:2f:23:ed:21:d1:f1:84:57:65:78:ff:3e:
cf:8c:63:cc:91:56:dc:d5:fd:e5:4b:73:86:c2:9e:dc:84:b7:
f2:dd:09:51:58:93:c2:ed:cb:a5:ca:b1:ea:80:72:fa:dd:a3:
58:8b:6d:cb:30:77:d8:04:f2:bd:e0:81:a0:8b:7d:ec:24:53:
19:d4:b2:94:55:50:29:a8:01:a6:a8:50:f3:2a:76:81:37:32:
57:99:39:50:49:b1:62:0d:7b:b0:64:4d:8f:71:39:04:dd:8b:
ec:ea:4c:fc:15:89:73:e8:7f:7e:31:d9:a1:13:0b:13:e1:57:
7c:54:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:06 2026 by rpki-client