Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: rAw/scaiwLlB66/sNz00DVQNygc+ie6wKDcA4verTnA=
Subject key identifier: 0D:19:C6:AD:C8:97:1A:5D:D9:0A:1A:32:3D:48:E1:9E:C2:03:08:9F
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 019D3A541960AE084FA8FDD72D20BA5A17CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 12F7
Signing time: Sun 29 Mar 2026 16:01:23 +0000
Manifest this update: Sun 29 Mar 2026 16:01:23 +0000
Manifest next update: Mon 30 Mar 2026 16:01:23 +0000
Files and hashes: 1: OmKYv-eBNTYluusfNr4dZe7zC_c.roa (hash: w1Hd7iJpZYHQEo80iQwx2qNAI2ou5wncgHu/GLia0Tg=)
2: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: 7l0duzugmhnqjACghhbpOwlrd0imJea0mynH4V8fcds=)
3: l-QyBKePUGvgwvLYQ39xVIrG-Xc.roa (hash: BEyQW94VrHgV1DUmSXCji9F0XD6RgtTzxouMSqJBF3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:19:60:ae:08:4f:a8:fd:d7:2d:20:ba:5a:17:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Mar 29 16:01:23 2026 GMT
Not After : Mar 30 16:01:23 2026 GMT
Subject: CN=0d19c6adc8971a5dd90a1a323d48e19ec203089f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:4c:18:69:af:1e:75:15:ba:ed:77:af:33:
bf:91:2e:97:b2:d5:63:70:09:45:62:65:78:2c:1f:
11:5a:ce:f4:47:aa:dd:a8:93:32:3f:9f:8a:fb:f5:
8d:60:b2:5a:11:cc:5b:5e:ac:d7:a9:62:06:7f:40:
f1:07:b5:30:43:0a:b1:2e:7a:f8:33:87:38:e3:45:
b2:32:c4:6f:fe:f8:42:eb:a8:d9:f0:45:82:81:26:
ea:fc:ae:cb:5d:67:a1:29:f8:d5:bb:89:ab:89:4a:
2c:d7:b3:e2:b9:ce:18:08:fb:00:5d:e7:8d:a0:8b:
16:46:44:7c:74:fa:23:70:2d:23:97:b2:1d:40:55:
29:c3:be:66:47:43:03:ce:1e:c8:46:25:2b:8b:f5:
b9:92:9a:de:fc:e3:c2:08:66:75:77:d5:62:33:9a:
0e:e0:c3:ee:36:97:a3:35:11:49:94:28:c4:9d:7a:
5f:94:71:ac:18:57:ff:61:a2:ba:de:20:cf:77:e3:
a5:05:34:6e:fb:c8:ef:ce:b8:fb:d9:09:74:20:ff:
e0:f8:98:76:b9:c9:c2:fe:00:10:7b:14:68:74:c9:
3c:8b:36:03:b7:2b:6e:54:80:18:5b:2b:44:54:e3:
bc:ca:22:a8:1e:b0:d4:e2:ae:27:8b:5c:40:72:6e:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:C6:AD:C8:97:1A:5D:D9:0A:1A:32:3D:48:E1:9E:C2:03:08:9F
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:45:b1:be:42:8a:0c:73:61:9c:22:fc:42:07:1d:2d:eb:54:
ce:71:2b:61:9f:aa:b5:78:c5:78:a6:c8:50:9c:dc:7a:68:7e:
96:96:c0:1a:ee:ed:d4:b5:e0:ec:4b:f3:74:e8:a1:1e:af:67:
3e:55:31:4f:cd:12:2f:b9:a4:75:c8:74:ae:cf:fe:5a:d5:cf:
3f:01:a1:2a:65:af:6d:8d:c3:2d:fa:2e:98:25:1e:f6:9f:de:
dd:5b:30:00:d2:49:83:34:cc:37:59:16:43:78:bc:d1:34:0b:
1d:67:16:72:8c:5e:41:05:98:99:39:36:7d:42:01:0c:d3:53:
24:12:77:52:4e:43:de:7f:a6:ef:3e:fd:7d:6c:9c:03:00:9d:
f8:51:e8:4f:8c:45:e0:31:3b:0f:60:8b:56:6d:65:49:6f:87:
1b:aa:66:f7:0d:10:ee:ca:0e:54:6a:35:62:e2:42:cc:e3:26:
1f:15:de:40:91:e3:03:f0:76:e3:16:99:46:ef:6f:59:67:74:
4a:73:b1:a0:a7:91:48:57:a7:59:cf:02:9e:20:43:29:96:d8:
f1:aa:72:2b:8d:8c:d0:20:3a:cd:4d:66:1b:cc:91:50:b9:78:
e3:b2:b4:77:9f:ec:74:1f:2d:7e:73:6c:63:62:6e:27:50:17:
e5:20:d5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:57 2026 by rpki-client