Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
File: YUyVhYifmODHf5ts2ANhqgK91o4.mft (raw, json)
Hash identifier: VrDhtdpFdilKSAXeJzKu1dIYn9WexlPZox7yqVUjB7E=
Subject key identifier: 86:8A:0D:BC:48:3D:AD:2B:8B:1A:A6:2D:4E:93:C6:B7:86:B5:FD:D8
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial: 019D37F7452A684C5B227E365CCC78CEE7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 05:00:44 +0000
Manifest this update: Sun 29 Mar 2026 05:00:44 +0000
Manifest next update: Mon 30 Mar 2026 05:00:44 +0000
Files and hashes: 1: 9GhuMXLHbzdiDAMfsJHbqzR-MEw.roa (hash: g5IZRl4BDdytGAyq101061DrAkIRTjvTwY1EdCTIxCM=)
2: Rp8M3_sBtWj-4HdES1f560Y8DPs.roa (hash: rFSCCyJpt9So4+e0Mp2UXJjY5UcE4mhKhZ9xQZADyiI=)
3: YUyVhYifmODHf5ts2ANhqgK91o4.crl (hash: SGSF3Yp0rxIKbZrN/B2I4MOwozUrkIyyL3eSGaEMWUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:45:2a:68:4c:5b:22:7e:36:5c:cc:78:ce:e7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Validity
Not Before: Mar 29 05:00:44 2026 GMT
Not After : Mar 30 05:00:44 2026 GMT
Subject: CN=868a0dbc483dad2b8b1aa62d4e93c6b786b5fdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:32:0e:98:35:49:2d:31:d8:9f:1d:48:bf:
d5:e9:de:5d:53:ae:c7:e0:b9:9b:95:37:ac:58:47:
7a:eb:37:1e:74:86:23:c7:72:74:bf:a1:5f:d4:9b:
25:4c:a5:af:79:34:28:61:0a:4c:65:85:1c:bc:88:
4d:22:4c:d4:8d:32:27:9b:44:dd:96:16:b9:0d:51:
8c:de:10:95:e1:40:7c:a0:e8:1e:1d:dd:9a:2a:f0:
a0:98:8a:30:fd:c9:57:21:f7:11:54:4c:75:ed:7c:
28:5c:5c:23:fc:d5:a0:c8:42:52:6d:5c:d5:ac:fb:
5f:6f:73:51:71:7c:ec:8e:56:91:65:dd:9a:67:62:
08:2d:7d:99:2e:e6:91:b9:5b:be:13:68:f5:dd:fd:
7f:7f:64:5e:3f:87:11:1a:b3:c5:cf:42:9e:72:c8:
be:ba:19:f7:70:c2:94:fc:1c:13:e9:ee:24:74:a7:
98:57:1c:ca:db:ad:2b:42:36:e9:8c:49:07:bd:13:
67:ce:23:fa:d3:ac:8a:4f:11:08:be:c2:ba:da:50:
8c:46:ae:01:0c:75:88:a3:6b:ff:7d:41:87:88:82:
f2:d9:66:fc:fe:86:64:86:e5:59:5a:fe:a1:99:85:
cf:09:79:2c:2c:05:13:87:1d:41:ce:28:98:f1:5f:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8A:0D:BC:48:3D:AD:2B:8B:1A:A6:2D:4E:93:C6:B7:86:B5:FD:D8
X509v3 Authority Key Identifier:
keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f4:13:cf:ec:ba:2f:f0:58:ba:59:11:ed:5c:c3:eb:7c:62:
73:ed:20:fe:51:36:ef:8d:5e:96:ba:24:f2:e7:cc:13:8e:75:
93:c2:a7:c8:1c:dd:aa:f7:5d:13:9d:9d:28:48:cd:0c:2c:dc:
8b:7d:ea:c3:9c:84:6c:4e:62:b3:a5:80:f1:3c:64:47:56:7c:
45:c6:24:aa:04:c1:5c:2f:dc:c7:e3:81:55:14:59:c1:a1:d2:
09:0e:4e:b4:45:73:77:69:a5:76:29:06:cf:7a:67:e3:8b:48:
73:24:73:7a:b3:00:78:fa:48:24:0c:94:d4:9b:bc:30:40:f7:
f5:49:c4:19:e0:60:d9:39:d0:0c:98:b6:90:d3:aa:7c:cb:63:
68:64:77:a5:47:ac:ff:06:06:10:a2:be:d2:3c:db:f3:2c:9e:
f3:37:01:86:de:a8:dc:7d:c7:87:ab:a7:ca:5b:bb:67:24:63:
6f:4a:f4:0b:c5:21:cb:ad:c7:96:67:d2:a8:4b:3f:47:34:9b:
e9:13:ee:0d:e9:b6:f3:ec:8d:3f:ce:7c:eb:d6:f3:38:8f:e4:
3b:88:07:a6:af:f6:b2:cf:52:21:57:c5:cf:9f:c3:74:35:e6:
27:5b:47:47:fc:50:50:9c:4f:5d:2a:ec:ba:76:b9:33:7b:27:
19:d5:02:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:04 2026 by rpki-client