Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
File: YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json)
Hash identifier: p3g5SlPlSVdZ1UjuKHFp+EphcF6YboSNwj3MWAfeIZ4=
Subject key identifier: C4:F9:04:2A:64:ED:D9:2A:EB:30:E5:F1:CC:68:F6:8B:E1:E4:F3:9B
Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
Certificate issuer: /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Certificate serial: 019D38D3A6FFA91AD46DF1733075F9E4908E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
Manifest number: 01F0
Signing time: Sun 29 Mar 2026 09:01:28 +0000
Manifest this update: Sun 29 Mar 2026 09:01:28 +0000
Manifest next update: Mon 30 Mar 2026 09:01:28 +0000
Files and hashes: 1: 30S6gV2oh78DXtrqvndtvSPPKd4.roa (hash: OcTAJVeDjRXR19iBC0Wj5Tjt34V2Iwuh2sKP2/1+Fgg=)
2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: PXpxTahZkbYYqAmYZxVUC9NigC8Rdd8+/c+8LlXhR3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a6:ff:a9:1a:d4:6d:f1:73:30:75:f9:e4:90:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Validity
Not Before: Mar 29 09:01:28 2026 GMT
Not After : Mar 30 09:01:28 2026 GMT
Subject: CN=c4f9042a64edd92aeb30e5f1cc68f68be1e4f39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:17:86:df:77:9c:6f:3f:53:9e:7d:68:b4:
c4:2d:e8:41:4b:36:82:22:f6:c0:ca:b8:f6:84:31:
c4:fe:24:78:4a:53:dd:31:f2:32:dc:d6:e0:f1:a0:
a6:47:34:98:e7:30:c8:25:82:19:81:d6:54:e1:82:
9b:a0:e1:ce:a0:b0:69:f6:55:92:c0:1e:9f:5b:58:
17:2c:df:a8:c5:ce:69:2e:7d:4b:29:33:25:27:23:
82:3f:bd:c7:e2:ea:d4:c4:01:8e:79:de:c1:fc:3b:
22:9e:bd:6d:f9:e2:ea:7f:de:7d:41:8d:94:2c:7c:
b8:a5:a4:58:66:e3:06:04:be:17:d6:09:47:8e:2c:
d9:73:75:a5:51:f5:29:d8:88:80:db:dc:aa:ce:91:
45:f0:d9:00:1c:d3:4e:f4:47:24:7b:49:42:34:3f:
87:c4:a3:45:b0:c6:fe:9a:66:97:3f:76:07:26:64:
ec:b1:aa:ac:dc:1e:a1:b9:36:cb:61:23:9d:f5:ac:
83:bf:1d:62:13:45:34:47:06:39:63:07:4c:73:88:
8e:df:43:a5:68:26:9c:5b:b4:a2:34:05:a3:88:cc:
98:52:e9:be:89:4d:d1:f6:0b:b2:f9:60:ff:40:7e:
9f:93:6c:a5:3f:7d:19:88:90:78:5e:ae:e3:11:18:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:04:2A:64:ED:D9:2A:EB:30:E5:F1:CC:68:F6:8B:E1:E4:F3:9B
X509v3 Authority Key Identifier:
keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:01:4d:b4:07:2f:76:4f:d7:3a:36:74:d8:28:7a:d8:25:48:
5a:f5:e3:94:5c:bf:f5:78:cc:0d:7b:c0:84:f3:95:8d:d7:c2:
3b:dd:e2:c0:8f:3e:ed:b4:c8:da:4b:b6:e4:64:90:a5:70:d8:
4f:a4:d2:c2:b8:59:23:c9:b1:8f:cb:f7:d3:9c:91:36:c3:74:
5d:f4:2e:47:3f:86:ad:13:7d:fa:91:e7:97:44:c7:0e:ea:36:
62:07:d8:fb:12:45:88:ab:19:3d:9d:bb:25:03:bb:33:09:24:
ce:cf:a5:d5:5a:32:1e:12:d8:82:0c:d1:03:ff:a6:61:92:68:
8a:24:a3:38:e7:ae:ad:c4:3a:78:ea:6f:89:4a:7d:a1:d8:b1:
c0:c9:dd:e8:f5:2e:76:d9:2a:eb:2e:ff:5a:c5:1e:1d:cf:74:
e1:f6:91:01:06:e7:58:13:9e:0c:7b:29:59:5e:a5:53:3c:c1:
a5:f3:97:76:dd:a6:19:f7:ce:90:7b:56:a2:40:ae:c5:58:76:
91:61:a2:cd:86:a6:d3:a3:99:a5:aa:34:03:0c:07:db:8e:29:
77:ba:c5:b2:04:8d:dd:16:95:02:db:42:39:ff:0b:d6:6e:a4:
80:b0:e5:73:31:cb:79:a6:8f:35:86:80:82:50:a9:9b:a2:69:
0d:ce:0e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:35 2026 by rpki-client