Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier: vpQZbmmk+7AI3lwlR0iEKIwxa1QBI35FqyEBYyMasRM=
Subject key identifier: 89:98:65:7D:DD:F5:01:EF:92:4B:6C:BB:82:A3:70:4E:EE:BE:6E:F3
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial: 019D3752A9665AE05EEB701F623860880503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:00:57 +0000
Manifest this update: Sun 29 Mar 2026 02:00:57 +0000
Manifest next update: Mon 30 Mar 2026 02:00:57 +0000
Files and hashes: 1: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: b6pIpntqAWXJdWkpF6kgY8w8K6IlS8nGoHPH1PUBDFo=)
2: dbEVVOSGmAB9BVhX1SxdhAa54XM.roa (hash: PzFQiBYckhIajBueW8NDRUzWLgElYVTtb1/iAMzZ3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a9:66:5a:e0:5e:eb:70:1f:62:38:60:88:05:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Validity
Not Before: Mar 29 02:00:57 2026 GMT
Not After : Mar 30 02:00:57 2026 GMT
Subject: CN=8998657dddf501ef924b6cbb82a3704eeebe6ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ec:5f:68:65:df:4e:96:6d:3c:91:87:2a:98:
57:f8:59:eb:d3:23:93:2a:61:9b:2e:94:00:30:99:
b8:40:b5:0d:b7:be:06:b4:d8:37:51:67:9d:79:36:
8c:58:d2:0d:28:8a:5f:bc:7c:f1:df:4f:d5:ee:01:
61:9c:28:5b:97:ec:7f:ca:3c:67:95:98:50:c6:a0:
9b:69:61:e5:4d:2b:92:f1:79:cc:be:78:c8:5a:1d:
07:46:a3:37:31:a8:ad:ca:4e:18:f0:35:1a:19:24:
13:f7:ab:a0:94:c9:c6:67:11:ef:3a:f3:4c:43:29:
d4:b7:63:49:07:0a:7e:6d:91:6a:47:11:eb:04:1c:
a6:b2:04:7e:c2:8b:b5:32:6a:45:f4:a9:cc:09:84:
74:5b:9c:7b:37:d8:e9:d9:3e:7b:d8:90:aa:05:5c:
d9:8a:91:19:05:43:8a:cd:b2:95:7d:0a:74:1f:33:
c3:bb:02:17:ad:60:fc:71:a3:fe:cb:8d:11:52:8b:
62:0b:f5:97:20:5f:9d:85:e6:86:d7:b5:74:73:22:
52:d0:9a:cd:99:cf:fe:b0:59:76:12:1a:0f:1d:be:
80:15:08:e2:58:4d:01:42:43:6e:8b:f1:f1:49:c3:
60:58:a8:51:2e:cb:a6:18:3e:81:29:e6:5b:9d:a0:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:65:7D:DD:F5:01:EF:92:4B:6C:BB:82:A3:70:4E:EE:BE:6E:F3
X509v3 Authority Key Identifier:
keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:35:9f:0c:31:45:e3:a4:5f:12:37:5a:20:23:5b:65:4d:db:
a7:8c:6b:8b:2c:71:d9:3d:70:6b:e7:d1:dc:b8:3a:74:7c:d2:
c3:05:ef:2f:63:b1:dd:a0:86:6c:b3:e0:12:2e:4b:f1:fa:8e:
15:dd:84:b9:b7:f2:7d:64:1a:d0:74:18:19:ba:fc:6c:d3:85:
3d:c9:fb:3c:bd:c4:65:da:a9:f1:7e:89:11:96:06:e6:35:64:
19:08:01:4a:a4:5a:e8:ac:29:90:72:c9:88:f1:ca:8b:04:b2:
71:87:21:37:1b:e6:28:7a:fd:0f:c1:ae:e7:ff:f0:0b:62:29:
f4:e1:2d:f3:1e:89:2b:bd:d4:6f:78:1c:a2:f2:01:01:13:5b:
61:9d:f4:e0:ff:75:67:93:4d:9b:c0:99:83:a0:df:c7:c6:73:
af:09:1d:49:aa:82:4b:88:7c:ba:6d:f3:1c:85:21:cf:ea:3e:
20:e4:07:d9:67:1c:1c:f3:aa:e4:b3:41:51:ed:d1:d5:e0:a0:
75:b9:ea:de:4e:a6:d6:34:f4:26:98:53:38:d8:53:00:4e:ca:
e7:95:e9:70:a6:e0:fc:07:b3:cd:ee:03:3d:f8:fd:74:34:ed:
c1:09:71:5f:cd:a7:04:10:e4:b9:c8:94:ba:06:d1:c1:73:dc:
c2:6e:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:49 2026 by rpki-client