Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File: yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier: l6PXiQhfpvpWAQDvB9UdbPaUMBVAzBWKTUWwi3OQAy4=
Subject key identifier: A2:89:4E:9D:BF:3D:43:04:4C:71:85:C2:80:6D:81:F9:E7:B0:98:D7
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 019D0CD6AB2C888A3FE8C5BC8FE4D86972BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number: 1878
Signing time: Fri 20 Mar 2026 20:01:28 +0000
Manifest this update: Fri 20 Mar 2026 20:01:28 +0000
Manifest next update: Sat 21 Mar 2026 20:01:28 +0000
Files and hashes: 1: _ogFXsnc26cwnEEfI1RwCOLLjKE.roa (hash: T8WBXJPVj3V1XgVoalRoALm/8/55OH4oJDKe47m+Cgk=)
2: cisGlTDG6YbGvbXjq8ObLwOftto.roa (hash: B+cjo1pRI6fh+IOCsdjVyvdJ7iW7PB7/BMnta8fuFho=)
3: uWQ_yyWTJKlwMIna4dHe1PfEbz8.roa (hash: tvPaUHk8Xmgw+avX8XEILYU/M4IbkxRiILy7UdTCanQ=)
4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: ExDScCMYaxjBi2uDrLGBkmuUnD3NkteQCEbM29JHoec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:d6:ab:2c:88:8a:3f:e8:c5:bc:8f:e4:d8:69:72:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Mar 20 20:01:28 2026 GMT
Not After : Mar 21 20:01:28 2026 GMT
Subject: CN=a2894e9dbf3d43044c7185c2806d81f9e7b098d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:78:30:6a:4e:dd:f5:89:a8:4d:86:eb:57:d1:
1a:aa:de:39:2d:06:7f:e5:df:b6:7c:a4:3e:55:9b:
44:4b:c5:be:93:2e:12:0a:9a:f5:8f:b4:a8:20:8a:
39:ca:51:da:fc:fe:2f:0c:17:52:d9:c7:a5:b6:81:
6b:28:93:b8:02:71:3f:00:27:72:f3:89:ec:b1:c9:
8f:b4:a1:d7:75:7c:ab:c4:6e:41:af:66:c4:0f:b2:
66:8d:78:e3:70:73:49:bc:87:94:f9:d5:ab:b8:75:
80:8c:b0:71:98:d6:a4:20:c9:4b:02:4d:b2:1e:cb:
3d:64:87:74:1a:8d:2e:86:80:ba:52:76:ec:1c:ae:
fd:51:a8:4b:07:81:78:99:3a:06:2b:85:de:b2:4d:
56:dd:51:2d:6b:4f:ac:27:b9:8b:e9:3f:3d:32:c0:
14:67:0d:fc:12:54:7a:50:a3:08:3a:ac:d6:2e:85:
a0:27:8f:5a:90:5e:6c:d0:fc:c0:1d:93:58:5c:8d:
ad:12:f2:10:01:31:44:89:b2:87:2f:f5:62:8f:91:
09:82:b6:fe:58:08:47:96:7b:6b:3d:4e:5a:1f:89:
66:ba:a7:14:aa:2e:f9:ce:37:3a:44:e8:bc:21:08:
1f:5d:97:29:92:01:9c:53:17:b1:bc:c1:9f:f2:90:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:89:4E:9D:BF:3D:43:04:4C:71:85:C2:80:6D:81:F9:E7:B0:98:D7
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0d:38:71:84:93:73:59:79:24:30:c6:e8:e8:8e:46:51:d7:
3b:b8:72:c2:0c:f1:d0:53:e7:22:5a:46:60:a2:50:3f:2b:08:
c6:b0:a5:95:d0:e8:90:5b:08:3c:e9:73:81:99:50:74:7a:0d:
f0:9f:54:ca:f3:d8:4a:e1:97:63:64:94:df:87:92:d9:42:16:
97:92:f8:ee:96:21:dd:1f:37:ed:ad:31:bc:cf:3e:5d:c4:8d:
81:96:0e:ad:fb:4f:00:cc:7f:48:ea:8d:cd:1c:59:55:89:5e:
eb:0f:fa:db:cf:a6:d7:46:e0:95:98:c0:00:c8:b3:a8:a1:01:
70:43:28:df:a7:69:95:75:99:1c:ad:9c:db:4a:4c:df:77:e1:
f2:98:f7:52:27:9b:46:84:70:4f:9e:8e:18:21:6f:fe:c7:bb:
22:d9:c3:28:1b:77:8b:8f:d1:fd:11:45:9d:dd:01:26:75:4d:
d9:2f:e0:b8:38:c2:5b:c9:cb:66:ab:e7:c4:0d:7b:50:7e:42:
44:e5:f0:3c:95:a6:86:8c:0d:03:3b:f0:05:a6:2e:58:fa:0b:
35:46:47:91:22:3a:14:3a:7f:57:6d:ea:cd:27:45:80:91:49:
99:27:fc:e2:dc:e7:04:18:20:79:19:85:4e:67:19:28:e3:d6:
c7:8e:2e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 23:42:43 2026 by rpki-client