Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: FhCC4Rqoc2geWv45mquwayF8MqwsQqfYZbG6qxw90rs=
Subject key identifier: 81:20:67:00:C9:54:CC:9B:7E:89:22:5B:EC:5E:F8:A1:8A:1D:E8:07
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 019D382E7663786F7883D43429B30E7F092D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 07F3
Signing time: Sun 29 Mar 2026 06:01:02 +0000
Manifest this update: Sun 29 Mar 2026 06:01:02 +0000
Manifest next update: Mon 30 Mar 2026 06:01:02 +0000
Files and hashes: 1: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (hash: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: SVXP6ltjMaAFs/KJ01UZZBE90t21dzpq6s0dgOcJ4uk=)
3: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (hash: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:76:63:78:6f:78:83:d4:34:29:b3:0e:7f:09:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Mar 29 06:01:02 2026 GMT
Not After : Mar 30 06:01:02 2026 GMT
Subject: CN=81206700c954cc9b7e89225bec5ef8a18a1de807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:a8:80:38:2f:43:f6:99:5e:ba:19:29:0a:
0e:c9:21:df:cb:b4:bd:ee:9b:a1:4a:6f:41:a4:64:
b2:ec:86:7a:4f:9d:20:27:b2:82:bb:7e:c4:46:78:
86:99:f7:a1:c1:45:69:c7:a2:20:ff:12:70:08:97:
7a:17:06:9d:22:60:00:8b:18:d6:be:b5:c4:a9:e7:
5d:bd:d3:84:7a:10:89:5c:5d:5a:bf:eb:df:a8:12:
51:ca:12:90:31:73:94:3a:8f:41:26:b5:e0:cf:12:
db:93:94:9c:fe:7f:9e:2a:ce:79:81:bd:7c:7d:fe:
34:14:6b:45:39:aa:b6:b9:ad:05:97:fd:af:2c:b6:
c8:fa:03:80:54:db:aa:cf:01:1d:42:b7:87:f1:63:
b0:e3:b7:3c:c6:b5:97:76:81:d9:0d:93:fe:a8:77:
98:82:12:21:69:99:34:51:0a:12:4e:9d:11:77:fb:
b7:77:7e:0d:64:80:09:bb:c6:a4:7d:de:b1:f0:85:
c7:4b:8b:a7:a0:1d:04:1f:43:b5:85:f5:b4:c3:03:
b3:2f:9d:07:3f:ba:51:2a:fa:8a:14:2c:4a:06:d3:
b1:bb:47:23:d2:d8:bf:fd:3e:04:5e:45:88:e2:f1:
38:77:4d:d4:0f:a1:12:d5:9e:4f:64:03:a8:24:0e:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:20:67:00:C9:54:CC:9B:7E:89:22:5B:EC:5E:F8:A1:8A:1D:E8:07
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:82:eb:ea:05:f9:ac:5a:10:ae:85:72:01:48:9d:43:33:32:
4d:c4:8b:18:91:89:46:5f:64:55:fe:58:8e:f4:09:fd:de:71:
9a:74:f0:d8:0e:22:c9:c6:bc:8f:ee:54:67:8e:90:0d:93:52:
bc:71:08:0e:e0:38:c0:9c:00:ef:11:1e:b2:af:0c:8c:4e:df:
bf:48:1b:1d:d8:6c:db:9c:a6:ae:bb:ba:77:97:bb:bc:15:51:
5e:06:67:0b:ab:15:0f:a1:a8:4c:eb:1e:dc:85:83:75:74:da:
e9:7a:d2:63:f4:07:bc:df:89:6e:1c:b9:bd:46:04:09:b2:a6:
6f:e7:00:03:42:a9:64:5f:d9:a5:5a:22:5e:15:b8:95:dd:bb:
70:9e:ac:0b:fb:e1:01:f4:4b:62:82:41:23:fb:4c:89:b5:8d:
07:29:cf:4c:bc:27:5a:59:e4:8f:7b:42:3b:81:c5:a8:54:a8:
4e:19:57:8b:f4:cc:e1:a6:aa:89:ec:13:78:d2:d9:0f:89:ce:
6f:10:45:d9:34:78:22:f2:d9:6a:5a:0b:56:de:83:1d:a0:b4:
03:09:18:08:43:d1:c8:66:54:c6:0a:37:26:69:d6:06:77:30:
4e:7d:1b:9e:fc:c4:78:a1:47:0c:38:47:ca:9b:0e:b8:b8:5f:
91:c9:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:37 2026 by rpki-client