Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier: DP5ffzO1PX2teZKHq1pwrmDKEOo1ms15ANK1yFZoFMQ=
Subject key identifier: 74:EB:7D:0C:2A:53:47:6F:58:FD:32:D6:4C:2E:C6:74:48:FA:1B:D8
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial: 019D390A60C1B6158A6B3EAE8DDDFB7F6EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number: 0636
Signing time: Sun 29 Mar 2026 10:01:14 +0000
Manifest this update: Sun 29 Mar 2026 10:01:14 +0000
Manifest next update: Mon 30 Mar 2026 10:01:14 +0000
Files and hashes: 1: ApB3AApTkd-CTxpkFDEIw_6nXz4.roa (hash: BHpUQQ7BEi0kv1fti7vIaRRcfrlm8kSIsZNfVucwYew=)
2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: zHWdNrRxpSWo5FzzI8N70A+fqSFtBH/hE6AiumIoauw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:60:c1:b6:15:8a:6b:3e:ae:8d:dd:fb:7f:6e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Validity
Not Before: Mar 29 10:01:14 2026 GMT
Not After : Mar 30 10:01:14 2026 GMT
Subject: CN=74eb7d0c2a53476f58fd32d64c2ec67448fa1bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:65:ed:36:30:d2:93:46:e1:e6:d5:eb:9f:
3a:42:d5:25:c4:12:e5:b2:1d:a8:f4:17:30:1c:f7:
8e:66:0a:77:f8:25:2c:7c:db:78:8f:d0:f0:2b:2e:
e0:f1:c1:57:8b:de:82:c7:8e:24:d3:72:3b:28:bb:
d0:d6:55:c5:02:48:6f:af:2d:8b:fb:f0:c4:17:6f:
14:a3:81:2b:09:74:48:4f:0a:ea:5d:92:2e:3b:f6:
46:f9:b0:3e:b3:b3:2b:3f:67:51:85:5e:48:8c:56:
d3:d3:cb:63:6a:ea:1d:1c:6b:a5:34:7e:04:42:36:
62:de:65:c6:01:b9:74:7d:45:71:67:35:03:af:2e:
e9:0d:c7:39:a9:03:78:19:41:0d:f5:e7:78:a9:ca:
f4:0e:21:2f:3e:d5:86:6c:7d:83:fc:f3:90:0e:e9:
13:50:65:f9:30:9e:95:3c:ba:45:3d:2b:ec:ea:8b:
85:01:7b:64:04:42:3b:bd:fd:10:b5:53:bf:4b:da:
77:5c:7f:c2:b2:a8:bd:7b:48:a8:fd:1e:ac:bd:1c:
43:bc:ea:09:dd:8e:a8:9b:b5:b0:2a:f5:a7:4c:4d:
93:d6:99:a5:8c:16:ec:92:f1:10:e0:b1:0f:92:eb:
7a:79:c0:91:46:1d:7e:3d:8e:22:62:90:5a:43:83:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EB:7D:0C:2A:53:47:6F:58:FD:32:D6:4C:2E:C6:74:48:FA:1B:D8
X509v3 Authority Key Identifier:
keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e3:eb:2d:fc:e6:de:5a:99:6a:02:b6:56:aa:06:28:b1:6b:
7c:3e:b1:92:8c:04:71:be:51:21:e9:80:58:8f:24:43:e1:79:
57:0e:4e:93:e2:ad:60:cb:2a:e4:9e:d3:da:4d:c3:11:41:17:
a6:a7:36:c3:7d:f7:08:a6:5f:cc:7d:a3:22:08:96:3e:34:2c:
65:0c:f5:fa:2f:3a:00:17:d5:08:ec:8c:83:c1:0a:b4:79:0d:
f6:b7:81:02:3f:e5:a2:06:fa:75:38:bc:20:b0:e3:45:37:24:
9d:03:ab:00:19:4b:95:63:70:52:32:e6:25:3f:66:a1:7b:cb:
1e:18:d3:fd:3a:db:f7:0d:80:e4:6a:98:7d:51:25:3d:28:7c:
3a:73:cc:53:df:02:62:63:e7:4e:78:01:38:be:1c:e2:21:86:
01:6d:bb:18:1f:d4:2d:f1:62:98:14:ea:44:ef:90:66:5d:01:
67:b9:4e:f6:cd:8b:42:cd:75:27:e0:4b:aa:5b:7d:f0:98:60:
55:67:c0:48:3a:4a:e2:df:51:0b:f9:97:be:c4:df:fb:90:dd:
27:df:56:1d:b7:8a:f4:6d:32:c6:79:a3:86:27:93:83:32:07:
f8:67:e4:88:a9:e7:c7:8c:78:95:8a:1b:3d:e8:4f:40:2c:ff:
70:2b:cf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:19 2026 by rpki-client