Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
File: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json)
Hash identifier: xd2vaPpm6ckvpXcD9Y2PXDnYHXsOrvbRt47T+juRfd8=
Subject key identifier: 8C:B9:92:69:33:F2:02:1E:71:E9:3F:BB:FB:0A:50:39:10:9B:4F:B9
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial: 019D382E1420968EE7D4614BFA9807466AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
Manifest number: 0954
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: PR91ry3J0euYdorH5rO0N-Bkpvk.roa (hash: DbSkzL37Cl5yQPPXgAD1SKpuqfRlWV4g2sxvgZ9ZsC8=)
2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: pyHTmqYh6yeSLAMaHbvYxGMdphoR9pY9NjZbxDTAYW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:14:20:96:8e:e7:d4:61:4b:fa:98:07:46:6a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=8cb9926933f2021e71e93fbbfb0a5039109b4fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:dc:3e:6f:48:08:61:ae:1d:2b:08:7a:77:
b9:40:cd:b6:60:6f:56:73:71:d5:76:79:a2:8a:b5:
e0:51:94:d5:4f:b5:e5:a0:2d:26:e3:ee:79:03:22:
41:4a:88:33:1f:ed:f1:e5:cd:e0:fe:88:da:23:e1:
e5:b4:56:17:6a:e2:b9:12:f0:42:08:4e:c3:cc:ff:
9b:c2:cd:82:66:9a:a2:45:50:e5:10:7f:2f:d4:df:
d8:86:70:ca:09:59:57:eb:f4:c6:fe:6a:c9:b6:02:
e2:1a:86:53:b4:f3:d8:ce:4b:08:5d:2a:09:11:1b:
7f:78:65:d3:a5:22:aa:8f:6c:23:1e:b0:46:38:a0:
fa:92:2d:06:68:71:11:69:63:0e:75:eb:64:71:a9:
d3:af:7b:43:04:75:51:9f:d8:8e:55:72:0d:4b:04:
6f:9e:86:27:15:c5:3a:c6:22:0d:27:a5:d4:a6:01:
50:b6:e8:b9:5e:e3:46:a0:a2:de:be:c7:bf:9f:99:
8d:0b:47:d6:d9:da:bf:88:37:b9:a7:29:bc:22:47:
9a:31:42:f5:9e:14:20:64:e1:2e:b3:67:31:a0:82:
91:6e:e1:ac:99:90:b5:3e:43:39:72:73:58:ea:ad:
2b:1c:08:2e:9e:26:a5:62:82:9f:fb:75:ed:b8:34:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B9:92:69:33:F2:02:1E:71:E9:3F:BB:FB:0A:50:39:10:9B:4F:B9
X509v3 Authority Key Identifier:
keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:74:13:5c:68:c9:9a:99:aa:5f:be:5e:88:86:13:3a:97:05:
f7:6d:92:45:47:2e:00:3a:a2:b8:1c:ab:0a:15:e8:54:d9:3e:
f1:7d:cf:10:78:c8:45:cd:86:d8:b0:aa:e5:ae:98:1e:72:f5:
cf:d7:18:2d:99:37:f6:36:01:65:15:6a:fc:2d:6e:55:ff:72:
3e:2b:34:ba:eb:a1:48:55:16:7f:af:a4:50:a2:3f:6f:bd:b1:
ad:f9:f0:6a:6d:54:e4:46:7c:fc:05:8b:71:1a:ba:f0:a1:e0:
fc:39:6b:93:79:d1:df:77:48:97:52:7c:8a:e3:59:b8:61:83:
de:2d:32:7c:58:7f:f3:52:7d:64:92:8e:32:ce:59:58:bd:cc:
a1:5b:0b:51:ff:9e:e5:9e:04:25:5f:8b:29:11:3c:af:be:f6:
4c:d8:17:a1:96:c1:50:1e:00:3a:a4:b3:e9:66:4f:bf:f8:ca:
87:d5:69:23:48:fd:74:ff:45:83:28:cd:22:79:a7:07:c9:03:
83:e7:e1:23:db:1e:7d:49:82:63:79:b3:9a:7f:6a:a5:cb:60:
2a:58:38:b2:30:4d:24:3c:60:88:96:ae:36:f0:97:d8:3f:7f:
19:06:a8:20:08:2f:13:cf:7f:7b:44:e3:00:52:76:ea:13:c4:
c2:9d:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:52 2026 by rpki-client