Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: +mW0zCKVxGFgRGYKlwVeCVxpgUfn1d8cENhh1UJLMBg=
Subject key identifier: 4D:97:DC:5E:EE:72:EE:32:26:BA:27:06:45:AE:76:09:F7:26:06:83
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 019CE55AD92207FE1F39F1674BCE22EA83D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 0910
Signing time: Fri 13 Mar 2026 04:01:02 +0000
Manifest this update: Fri 13 Mar 2026 04:01:02 +0000
Manifest next update: Sat 14 Mar 2026 04:01:02 +0000
Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=)
2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: fhOXY/Y4nzYoI0EONxU2oOAEBUJuPzxretCZMtO4t2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:d9:22:07:fe:1f:39:f1:67:4b:ce:22:ea:83:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Mar 13 04:01:02 2026 GMT
Not After : Mar 14 04:01:02 2026 GMT
Subject: CN=4d97dc5eee72ee3226ba270645ae7609f7260683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:17:6e:c4:f8:65:e8:81:5b:9c:a3:aa:9a:
13:ff:e8:23:a9:4c:97:de:1e:af:1f:67:6c:54:13:
79:f1:4d:8f:63:fa:80:25:b2:c5:dc:66:96:73:e5:
b4:fa:56:5a:1f:0a:48:e1:7f:a3:3c:24:97:30:d6:
f1:d3:17:24:df:29:c0:17:59:96:24:d5:92:32:5a:
b6:56:c3:09:6a:b3:89:4f:fd:e5:34:8c:4e:55:1d:
be:bd:38:4e:50:3f:21:59:de:fa:39:db:32:d8:3f:
81:7a:5b:31:6e:02:90:35:bc:07:5e:0b:67:b4:7d:
ff:35:75:9c:99:40:4a:40:ed:cc:3a:39:df:4c:71:
cc:c5:c2:9f:b6:85:a6:2d:dd:3a:bc:ff:4c:83:d4:
c0:a3:02:45:35:cc:79:75:2c:9e:14:56:0c:a9:ba:
4d:de:e3:ea:9b:6a:7c:33:e0:d0:db:52:3f:8c:c7:
ff:ec:c8:06:63:83:b0:4f:dc:36:81:dd:2e:13:60:
0e:3c:dc:73:55:c6:17:2f:dd:52:b2:38:8e:3f:1d:
be:c2:d1:d0:ca:03:ee:d9:e5:da:56:f2:b6:f6:73:
bc:62:f1:f7:42:73:bd:5a:af:05:06:01:e8:a6:e2:
5d:90:e6:90:89:90:48:d0:78:59:3f:a9:be:0d:a3:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:97:DC:5E:EE:72:EE:32:26:BA:27:06:45:AE:76:09:F7:26:06:83
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:71:75:6c:a2:28:ba:c7:87:90:54:90:00:3b:50:c6:ac:84:
b9:3f:49:45:07:1e:48:3a:31:eb:26:53:e4:81:88:91:1f:b1:
54:30:f9:a9:b3:41:d9:14:ad:d6:f9:c3:fb:96:eb:44:28:e5:
93:fd:13:64:21:a9:da:04:1f:9f:1a:fa:5d:4c:2c:6a:64:fd:
dd:e3:2e:67:64:dd:43:a0:94:78:df:55:72:d0:9c:1a:0a:a0:
b1:55:5d:83:40:f8:46:75:c9:14:1f:08:c6:74:3e:cd:77:55:
48:b6:b6:93:23:a4:8d:b1:65:3b:d3:7f:66:b8:18:9b:74:4f:
bb:20:21:32:b3:19:43:4e:3d:f8:2b:86:7e:39:e2:71:3c:19:
20:d5:c4:ae:97:d7:93:33:16:76:82:0c:ef:92:12:2c:9a:a5:
e4:ba:95:51:4c:b2:61:84:91:d9:9f:60:9e:a7:bc:97:6f:05:
31:90:16:2c:cd:f8:51:82:99:46:0e:a2:58:40:a9:54:49:1e:
8c:40:57:58:4b:30:7a:69:3a:8a:4b:f0:58:0b:a1:8e:cd:17:
86:9c:b8:df:aa:ee:6d:f1:cb:6b:8e:94:ec:ef:6c:b5:64:4d:
97:38:2f:74:60:1f:25:f9:1b:c6:b2:39:84:57:84:24:65:e9:
54:27:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:37:01 2026 by rpki-client