Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: fGoeRBtkgnfac2t11u24k+AjoYQGXF5bAv7qVr1FFKA=
Subject key identifier: 89:ED:BF:AB:41:DA:29:4A:45:41:BA:C5:26:8A:32:E6:F6:B6:EF:1C
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 019D38D316E703366B88526E9F17901991E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: Ne15Wf9N9ZLdKkW+5ZB3LfsL0kGgF/PdFFPNh7XCas0=)
2: yat_VFBsRL2vXjBQHXCl5CuZLXk.roa (hash: AeN/Vtg1z//ZrqzG5NqKqgHUFWw8uKLPlQFadvjnPx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:16:e7:03:36:6b:88:52:6e:9f:17:90:19:91:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=89edbfab41da294a4541bac5268a32e6f6b6ef1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:7d:db:ef:82:3e:33:52:a5:ce:aa:ba:26:
1b:c3:8e:16:cb:29:9e:bf:e8:d8:b2:6d:22:d4:07:
c5:65:12:f1:41:1a:23:b5:d9:0f:af:b2:88:ab:2d:
fa:99:39:10:37:d8:3b:37:af:ae:4b:3d:19:18:79:
4e:54:98:df:3d:92:33:27:c5:63:8b:a8:5f:ed:cc:
4a:69:ce:86:84:f0:da:dc:38:a7:58:79:10:de:7c:
09:d5:c4:66:78:6f:2e:32:82:16:87:dc:9d:25:b6:
a8:c3:4e:07:a3:b9:ef:96:33:a3:b9:6b:44:44:9d:
c7:b8:da:11:86:35:5d:c7:53:62:49:c2:0b:b7:43:
03:d6:27:d8:76:49:38:5d:2e:e5:fe:22:ac:40:76:
8d:2a:c2:3d:8a:4a:00:03:12:72:c3:7d:4e:28:b9:
08:c4:94:83:c4:33:11:e5:c4:19:a9:03:04:79:12:
4d:fd:65:93:14:10:a2:75:51:b7:66:58:4b:34:18:
63:da:e3:52:04:26:45:19:58:8c:73:e5:d2:5c:08:
b0:2c:fe:03:a1:cc:af:c4:4e:14:be:f2:7e:b9:ae:
46:5f:cb:db:34:76:b1:18:52:63:0c:8b:79:20:0d:
18:b2:12:19:22:90:4a:a8:5d:61:0b:8d:ee:0c:6e:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:ED:BF:AB:41:DA:29:4A:45:41:BA:C5:26:8A:32:E6:F6:B6:EF:1C
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ab:66:bb:d4:04:aa:b3:1f:8b:80:8e:41:c1:2a:7d:75:03:
94:d9:ad:90:b6:43:93:36:12:0d:ca:79:21:5f:21:70:91:f8:
e0:ab:e2:76:4c:48:25:14:1a:f1:31:f5:bd:ec:2a:fd:48:5d:
4f:e6:c8:41:e6:8f:2d:94:25:f9:78:fc:7e:a1:a0:60:0b:0b:
13:b4:17:c3:9d:bd:b3:ab:64:99:6b:d8:b7:25:0e:2f:cb:45:
b7:13:e2:0d:69:4c:a6:e9:99:28:3a:76:b0:35:d0:17:96:27:
bb:b5:a8:0f:31:ff:d8:5a:de:ef:9c:53:15:1c:6f:9f:3b:ce:
13:f4:6b:e9:8d:37:19:8e:0c:b9:64:29:62:27:b7:b7:1a:7e:
75:94:66:88:77:40:0a:7f:d8:cf:36:42:78:ee:c4:b7:8f:82:
65:3a:30:b4:2a:54:50:88:c8:96:03:53:4d:d6:a0:0a:db:2d:
7a:1b:af:5d:72:ed:16:33:2b:94:1b:22:e2:26:d7:7e:4e:72:
5b:25:9b:4c:ca:16:60:d7:22:ff:b3:1f:ed:89:ee:12:2e:1f:
4d:eb:1d:56:b0:34:e8:a8:5b:c2:35:54:83:f3:f4:7e:45:b1:
12:a7:29:6d:40:6e:49:dd:c7:ea:43:69:07:64:ae:f7:81:78:
bf:30:4b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:22 2026 by rpki-client