Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
File: YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json)
Hash identifier: QnNJlV8zJ/TYdv9TyjKxTQrA58TuvpV7gWRkNeNOreE=
Subject key identifier: BC:C8:A2:BA:01:E0:00:D8:0E:34:55:52:81:02:F8:9A:8E:71:D1:43
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Certificate issuer: /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial: 019D39AEBDB698AECBE455830E6B9B00436A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
Manifest number: 1592
Signing time: Sun 29 Mar 2026 13:00:45 +0000
Manifest this update: Sun 29 Mar 2026 13:00:45 +0000
Manifest next update: Mon 30 Mar 2026 13:00:45 +0000
Files and hashes: 1: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: r2GNwp9L9NGhvMgUVbVFBa6mg5oyvmB59y0Dz01QIFg=)
2: m6N7HELrjq0BLATRDwGOIFqCEFI.roa (hash: SA6cDg1QSEbx4rFtnIc0Ww73sJQYtLI/mD1gBHeOlCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:bd:b6:98:ae:cb:e4:55:83:0e:6b:9b:00:43:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Validity
Not Before: Mar 29 13:00:45 2026 GMT
Not After : Mar 30 13:00:45 2026 GMT
Subject: CN=bcc8a2ba01e000d80e3455528102f89a8e71d143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:f1:b0:ef:35:6a:f9:cc:5c:aa:8d:1c:bf:
1a:aa:c9:5e:1a:db:bf:75:e6:e4:bc:9e:1e:92:75:
29:83:29:72:52:d3:1d:be:bb:8d:db:2f:30:9d:1c:
52:67:7b:79:5e:92:c5:76:23:17:b1:c8:7e:ac:2d:
9f:13:5b:18:5a:2d:76:74:72:7a:56:f5:47:55:61:
8f:f9:92:6b:21:79:91:a3:23:ca:db:e3:a6:b3:d7:
41:b0:ad:b3:6a:4d:c8:d9:b8:a9:f8:c5:c8:da:cc:
ea:bc:be:16:25:b9:86:42:7e:84:af:25:2d:25:3d:
a4:03:c3:ea:ca:b7:33:9f:bb:dd:50:70:74:55:49:
35:ee:41:8d:b9:99:7d:80:7d:b6:d4:d3:e2:8d:02:
14:f1:7a:d8:ea:51:92:3f:87:f9:0b:70:3f:ad:f7:
17:f8:25:ca:14:db:3e:6c:d6:57:68:5d:fc:ce:85:
58:94:2a:a0:d4:e5:c2:51:72:60:96:e1:aa:09:64:
d4:90:67:b5:c6:da:36:50:a6:43:0e:9f:3c:e9:01:
84:17:7f:f0:fe:fc:5c:e6:1f:e7:b0:e8:5f:1f:5e:
8d:21:c0:29:de:5d:77:48:5e:d0:4f:89:01:a6:55:
81:3f:f3:6d:9b:1d:19:f7:4f:c9:9b:45:5d:bd:83:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:A2:BA:01:E0:00:D8:0E:34:55:52:81:02:F8:9A:8E:71:D1:43
X509v3 Authority Key Identifier:
keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cb:50:85:44:a2:8d:dd:df:5a:77:28:8c:db:8a:b6:fe:71:
ea:06:e0:2c:7c:84:0d:3a:6e:e7:89:e9:6d:54:cb:e2:f7:c8:
c1:fc:fa:9e:73:6d:14:0a:d2:e8:d1:d6:2f:a0:ee:61:03:cb:
27:92:07:fa:a6:af:a6:a4:85:c8:9e:c7:9b:37:9c:79:69:db:
e7:83:e0:00:84:e2:f0:35:5e:73:70:54:61:f0:a6:29:d8:0c:
e7:6a:ff:0e:25:bf:59:02:55:f4:14:50:6a:c8:fe:1c:cb:5c:
75:6f:cd:c8:6c:bd:73:83:bc:45:6e:ce:0a:49:3a:4e:fd:42:
01:a7:12:91:8d:0b:91:06:8a:c6:be:08:11:00:8f:3f:41:7c:
e1:37:10:71:a7:91:77:fb:a5:91:5a:61:49:a1:28:b0:93:03:
b2:bb:f6:09:7a:70:31:54:ae:b7:b1:4f:ad:0b:9a:4b:a0:85:
78:89:89:4d:d6:cd:f5:d1:8c:5c:82:dc:25:6e:84:db:c5:03:
5f:67:f3:b4:cb:49:b5:e1:27:d6:5f:5b:f7:96:30:b5:73:cd:
d7:64:68:ed:af:7c:87:de:19:ef:cf:d0:7d:d6:c6:eb:5c:69:
b5:f3:73:96:9f:4f:f8:77:cb:19:37:d8:8a:46:6c:58:c7:18:
15:73:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:49 2026 by rpki-client