Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier: HsnY98DLn64pt/PRmb1mlt2GHuZcBPgnfa/tKJzS8WU=
Subject key identifier: 69:45:A7:72:06:38:B3:67:92:9C:03:54:14:90:51:3B:5E:9F:F5:F8
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial: 019D39781BFB15BA4C7BC0061DC53FA5245A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 12:01:05 +0000
Manifest this update: Sun 29 Mar 2026 12:01:05 +0000
Manifest next update: Mon 30 Mar 2026 12:01:05 +0000
Files and hashes: 1: 1w-DEGovWlGeUvxZrEhAkhZFri0.roa (hash: erRkVrb3pyj6Yu2qx5hIETEqq580z4OTzTDEWJgauCE=)
2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: Kxqj0WRV5v1CK7x4EUo7iyLgb8AKoIPWDccl6z7g1PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:1b:fb:15:ba:4c:7b:c0:06:1d:c5:3f:a5:24:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Validity
Not Before: Mar 29 12:01:05 2026 GMT
Not After : Mar 30 12:01:05 2026 GMT
Subject: CN=6945a7720638b367929c03541490513b5e9ff5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:66:4f:75:be:ba:a6:b8:b0:38:86:4f:bd:
1d:da:2b:7c:36:ab:2c:28:2e:26:7d:08:9a:11:bb:
26:26:de:5e:5f:42:53:e0:54:24:d6:f4:0d:7e:2f:
b2:2b:99:0c:52:66:6e:bf:93:a9:72:90:c9:12:c2:
b7:e4:7d:ca:8f:66:12:88:eb:c0:f1:33:ab:59:d3:
34:75:24:4f:ee:69:23:dc:f0:14:29:e7:a9:8e:29:
04:bb:e0:57:ef:d5:2b:b2:29:c7:46:d2:7a:d6:e1:
f3:0a:1d:9f:79:65:b3:87:da:3a:e0:ef:45:b4:b3:
17:57:f2:d1:f8:2c:36:79:0f:45:1d:d1:5e:47:89:
6c:20:23:85:5c:73:ef:d0:45:69:e2:4c:32:ca:bd:
3c:76:19:a6:31:88:dd:78:b6:52:a0:c0:ba:82:65:
e4:24:17:21:dd:21:dc:38:c5:da:ce:73:d5:86:ab:
2d:f3:09:26:09:c0:5a:30:21:5f:67:87:ea:b8:b6:
b2:07:57:af:28:75:23:58:d8:7a:04:c9:01:b9:8d:
2b:88:51:8d:b2:c0:fe:de:d1:ab:64:3d:38:3f:6f:
7c:fb:80:27:19:fc:5e:44:8a:7f:16:00:98:70:d9:
0b:35:71:a1:a4:62:60:92:72:14:9e:28:ec:df:20:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:45:A7:72:06:38:B3:67:92:9C:03:54:14:90:51:3B:5E:9F:F5:F8
X509v3 Authority Key Identifier:
keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e1:84:db:84:7e:fc:e9:6c:43:6a:8b:d7:7b:87:5a:68:7c:
c1:56:a3:fa:b2:ad:45:0d:47:61:41:ce:8b:ec:65:3b:b1:5a:
34:48:9b:63:b9:b7:e5:16:55:38:8c:48:a4:ce:fc:ca:32:b9:
52:46:43:12:46:a3:e5:17:e0:52:e6:28:92:62:f9:0b:08:a2:
0a:f0:eb:bd:d0:b1:1c:84:61:f5:76:0d:ec:77:a2:9d:e2:c4:
22:f9:fc:b1:6e:ea:93:d7:1e:59:89:f3:de:71:31:0a:f9:fe:
b8:ea:cd:2b:19:1c:c7:bc:4f:1c:88:f4:8e:1b:b5:40:9a:8a:
54:65:c4:53:99:61:69:82:65:68:ed:ec:ea:5b:71:5a:b6:29:
42:94:95:57:b5:98:f8:0c:38:46:b9:08:cc:3c:37:71:81:d1:
90:37:7e:f3:c3:bc:41:7c:47:41:0d:43:fc:b6:27:7c:22:ea:
89:e7:37:c5:d7:9f:29:d6:b3:0b:a3:08:de:37:b0:1b:24:ad:
5a:bc:7d:2c:23:3d:1c:2b:ae:1a:07:42:d0:49:73:b8:97:fd:
87:24:11:f3:3a:88:f6:08:95:d8:74:88:1d:ba:22:13:81:85:
50:56:d5:a7:60:86:bf:2c:61:06:23:86:c9:3b:65:27:82:ac:
8a:0a:ae:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:25 2026 by rpki-client