Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: wVjNULJentG8VQd3h05jCU4LC3cI8QnNELE8TcG9ZYM=
Subject key identifier: A5:32:F4:AF:92:3F:2E:8B:9F:AE:4D:D4:94:FD:E3:78:2E:1D:84:47
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 019CC184E74A9B65586BC72B2FC2E90F9758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 04BF
Signing time: Fri 06 Mar 2026 05:00:38 +0000
Manifest this update: Fri 06 Mar 2026 05:00:38 +0000
Manifest next update: Sat 07 Mar 2026 05:00:38 +0000
Files and hashes: 1: amLES0luVq3iLHPQKyufyNQwgaI.roa (hash: UsdGqDJsnylUEzlDTC7n05/NMnzeFnVJjS3/bK29FXs=)
2: jIwaLjqt-xdZuLLeeQ6b9JM9ktU.roa (hash: NBpvqEDHRttth2lk+QrdtGdQaHXJVWBfDcwb8ITbXwo=)
3: u_iWvzN4ZsIj-85aLk82H6-rRe4.roa (hash: LwmASP5C8j7zpf+fcC+xGqEebuer0tW8AmUmigdVvI8=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: iI1VZesD1unsMcxgidxJlUi7lESnZ1zxZ0Zr7zPwreY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c1:84:e7:4a:9b:65:58:6b:c7:2b:2f:c2:e9:0f:97:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: Mar 6 05:00:38 2026 GMT
Not After : Mar 7 05:00:38 2026 GMT
Subject: CN=a532f4af923f2e8b9fae4dd494fde3782e1d8447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:08:77:5d:81:59:7a:43:9f:00:f3:4f:b8:
dc:07:bf:ed:0b:4b:14:fc:82:20:40:44:8d:0d:9e:
ad:d1:05:28:5e:4b:24:91:0e:b0:f0:a4:de:ec:0e:
42:e8:ce:29:f7:d2:09:d7:6a:b9:a8:1d:eb:39:f4:
44:d1:23:74:18:54:e1:71:08:3f:8c:58:09:11:88:
f8:7e:4b:6f:2c:c7:b6:eb:fd:b4:61:e3:30:e2:11:
81:8c:95:3c:f5:78:6a:b8:98:25:3f:dc:7c:c3:b2:
e8:fd:51:29:bf:55:ad:72:75:bb:85:06:c7:c1:e3:
20:98:38:2a:32:6d:5a:0e:21:c4:1d:21:f5:17:a4:
2c:11:76:75:87:fb:ab:c7:ec:0e:5e:38:75:50:29:
9e:3a:11:a8:df:06:7a:99:a5:5b:50:1e:5c:9d:a2:
74:2b:1e:df:41:0d:29:78:0d:dc:c6:7c:5e:26:ad:
e1:00:2b:e5:69:ac:2b:cb:ee:d7:49:d9:fa:8e:69:
ec:d1:c5:31:f7:33:7d:43:ac:55:a1:50:48:3c:c6:
61:9f:93:80:fb:85:14:f2:21:d4:23:06:28:18:a3:
f3:12:c7:7f:f1:58:18:50:5f:7d:fd:54:1d:04:41:
35:bf:15:54:97:96:09:c3:f6:33:fc:ef:44:bd:d4:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:32:F4:AF:92:3F:2E:8B:9F:AE:4D:D4:94:FD:E3:78:2E:1D:84:47
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:df:d2:3b:b6:b9:af:62:ac:f3:58:b8:e6:d3:8d:1b:d6:48:
9b:95:a8:f8:fc:44:f3:eb:c9:3e:12:62:cc:eb:35:0b:b6:ee:
17:46:32:a4:b5:8f:5b:9a:1b:83:9e:ba:a3:a8:7d:c5:10:1d:
5d:8c:9a:82:a9:07:33:16:b6:12:1e:ef:26:cf:1d:38:68:cc:
83:ae:7c:cd:c1:9b:d3:b9:f3:48:83:da:4d:9d:6b:25:13:f3:
f4:b7:90:b3:da:ed:00:87:d7:ec:ac:6a:ef:c2:88:c6:cc:30:
9c:ad:45:b5:6b:02:88:04:e7:57:60:07:a0:89:b5:6f:c4:d8:
a6:f8:2e:13:74:de:3e:e6:58:96:7c:2a:a2:11:1a:af:7b:46:
8c:3b:af:c6:cb:dc:88:b8:bd:d1:12:dd:fd:d5:81:c8:6b:c1:
7e:13:94:ae:8a:ee:b0:64:a2:a9:45:6e:6b:b3:81:ae:01:93:
3b:19:14:40:af:a6:13:6e:c3:91:c9:0f:40:e3:56:95:64:37:
ed:a1:16:47:9c:37:f6:58:5a:9a:03:f4:ca:cf:d4:5b:bd:07:
a7:63:df:8a:99:7e:10:cc:94:fc:0c:ca:0d:f6:c5:da:27:28:
e9:df:ca:08:e1:e1:9b:e6:71:04:b7:0f:a9:03:15:09:3e:69:
c0:ab:3f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 16:21:16 2026 by rpki-client