Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier: 5jTyac0m5rjw7dL8DdHodoP3xqttidrOQ93S3hbFBy8=
Subject key identifier: D9:69:DD:4C:5D:5F:73:70:E7:A4:AC:CE:FF:74:29:93:5D:F0:C1:0D
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial: 019D39099590E32739644B9C3F4173F1DFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number: 0CD0
Signing time: Sun 29 Mar 2026 10:00:22 +0000
Manifest this update: Sun 29 Mar 2026 10:00:22 +0000
Manifest next update: Mon 30 Mar 2026 10:00:22 +0000
Files and hashes: 1: 8y6CSuTPq3UxhTyIPDkLzey39TU.roa (hash: d0MlsOE7YxSPTJhFI0bSHyZQVZmMtG9CLdrDZmVT9Fg=)
2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: 87vBe2byZT4IdDIasYqZt+jU/Lez0/3MrOVm/6PQomI=)
3: gEzEJ6XiEvkU7WE0W5L45VqOyXU.roa (hash: M/qvtMRQ3XJJlTOVAUv0L9u5CgWgEkXMKqMCgmgXNVM=)
4: uiEPOruYyynMnv0DkemAao-QO_M.roa (hash: zwZ/t6zJRBJasigAc2EM1YRTTVM6B1E25xzsECcPnU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:95:90:e3:27:39:64:4b:9c:3f:41:73:f1:df:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Validity
Not Before: Mar 29 10:00:22 2026 GMT
Not After : Mar 30 10:00:22 2026 GMT
Subject: CN=d969dd4c5d5f7370e7a4acceff7429935df0c10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:0b:87:8b:9e:7f:3a:15:23:2d:43:f6:6b:
c3:ee:32:e7:17:6d:8d:6d:ac:1d:22:c0:23:01:58:
37:4c:93:e5:a3:b2:ff:1e:a8:b5:e1:eb:d4:b4:9b:
47:89:3e:f5:b6:1c:60:f3:bb:45:ae:79:bf:16:fa:
ea:a2:c7:4f:f1:54:94:e3:bf:fd:1d:82:67:b7:6a:
1b:7b:ab:d0:a2:a2:49:63:9a:90:6f:4e:d9:b1:e3:
be:d4:3c:10:8d:32:b5:71:7f:71:44:8d:3a:30:f6:
8b:7a:4f:ee:d1:ce:5d:78:8b:8b:c5:53:13:33:37:
9b:bb:69:0f:0e:51:07:c7:09:fa:af:1c:d0:cd:c2:
3b:25:04:81:bc:82:71:53:f6:c0:7e:30:3f:6f:fb:
86:85:db:ea:1b:d3:e0:e8:49:fd:c3:99:cb:14:b9:
73:e5:6b:f9:ed:89:95:12:13:6c:83:97:87:39:80:
e0:6d:69:f9:dd:de:92:e8:b1:18:7f:a2:ec:ba:c9:
5b:28:12:ae:94:35:4d:18:56:f7:82:32:4c:93:5d:
b4:3d:7b:35:94:0e:01:46:11:75:b5:29:95:b1:bd:
a9:5d:86:3a:00:9d:03:b4:f3:93:17:50:4e:6e:f7:
69:99:e2:48:3d:57:2c:5e:90:a4:c9:a5:05:15:a3:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:69:DD:4C:5D:5F:73:70:E7:A4:AC:CE:FF:74:29:93:5D:F0:C1:0D
X509v3 Authority Key Identifier:
keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:99:35:8c:79:ca:02:32:ba:7c:ca:b7:ed:f7:44:69:a0:df:
62:98:97:a9:cb:0b:a0:7e:59:91:14:3f:45:79:2e:34:d4:36:
9a:1e:96:b2:64:38:63:c2:97:f6:69:77:9f:dd:84:cd:f0:92:
1a:1b:26:f7:ff:92:d5:a0:b9:6b:e2:ab:a6:28:74:c8:0c:6e:
d2:c9:a8:78:46:04:a3:80:94:7f:26:08:63:e7:21:b7:30:f8:
4b:74:3c:db:e9:a2:5b:ee:4e:04:21:5e:89:4a:b8:b9:a9:39:
2c:e1:42:db:1a:3d:88:dc:cc:55:93:b3:d1:00:19:ab:bf:d8:
9b:4a:dc:b9:46:cd:85:5c:70:76:40:68:c4:59:c5:9f:b1:d9:
55:b0:82:76:f9:ad:68:74:4c:18:2e:b1:66:cc:d5:c0:35:02:
07:57:58:9f:f1:57:64:f4:f8:f9:ab:87:df:74:1c:58:0f:00:
7e:9c:0d:6a:5e:dc:ca:c9:00:af:84:67:32:49:c2:1b:7f:5a:
d3:e5:77:a9:7e:d3:18:f3:1b:2c:b5:04:5a:3c:f9:fd:31:bb:
db:7f:75:2d:b4:6d:14:d8:73:62:5b:ac:f2:2b:33:8d:da:8a:
af:a0:a0:c1:f8:aa:ed:5c:66:9e:d7:7d:92:6b:5d:92:70:74:
84:d4:b6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:03 2026 by rpki-client