Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: cyH45DZPjXW0alLpBTfI6Hpiaah2tZgdg0WZx4XZEJI=
Subject key identifier: 02:64:AC:51:A7:B8:A9:E7:89:26:D3:6E:19:53:31:D8:4C:64:8A:98
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019CE222D375A62E35E2ECC234CD3A130265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 158D
Signing time: Thu 12 Mar 2026 13:00:59 +0000
Manifest this update: Thu 12 Mar 2026 13:00:59 +0000
Manifest next update: Fri 13 Mar 2026 13:00:59 +0000
Files and hashes: 1: 4F0OaJWrFY1VR8hbnoWiUu3gQNw.roa (hash: 0plAJbu0NHlUYP4bdzDQfrORA51pS6TOr8F/YNOFV9M=)
2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: vxUo/t0lFY1FKyfmwp3hE2pkfNYvUuhPHRfVVIWdpDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:d3:75:a6:2e:35:e2:ec:c2:34:cd:3a:13:02:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Mar 12 13:00:59 2026 GMT
Not After : Mar 13 13:00:59 2026 GMT
Subject: CN=0264ac51a7b8a9e78926d36e195331d84c648a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:a3:59:91:5a:51:d4:23:fa:f6:36:3e:4b:
67:8d:e8:a5:65:e6:0d:7f:4d:bf:40:8c:80:80:99:
ec:6a:f0:98:7a:ec:52:91:a8:68:d3:98:08:ae:1f:
75:1a:6f:04:14:82:c9:f3:48:78:cd:af:bd:94:fc:
54:3e:67:39:ff:50:77:f6:07:15:31:45:b0:0a:dc:
1d:45:26:e1:4d:69:64:70:0c:e5:40:0a:30:79:7f:
eb:1b:4b:31:91:13:17:76:97:46:c6:5a:96:ed:c0:
68:68:cd:83:cb:f9:6c:aa:a0:a8:f3:50:a6:6d:19:
af:c4:40:cb:8b:29:28:61:37:89:7d:8e:2f:8a:8c:
1e:f3:3e:a9:b9:e1:2d:e6:2c:e9:13:c3:cc:7d:3b:
bb:9a:3a:51:ad:b7:af:a1:a1:42:db:74:f7:f1:e1:
5b:57:4d:a3:14:47:54:cc:21:00:b3:31:9d:b2:1f:
6f:7f:6f:d0:d3:55:19:aa:0f:d1:70:a2:c5:b7:86:
b2:f6:f5:98:2b:6f:50:4e:53:a7:08:b1:f4:c9:11:
f4:08:8e:37:08:77:37:a6:57:c4:33:04:aa:a2:c1:
42:16:6a:11:31:00:a6:a0:1d:3b:ed:2c:45:f3:1d:
e0:63:6d:3d:e2:c8:b3:23:82:1c:4b:cb:58:1f:48:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:64:AC:51:A7:B8:A9:E7:89:26:D3:6E:19:53:31:D8:4C:64:8A:98
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:82:18:a8:32:43:92:a8:6b:2e:0e:7a:84:18:cf:9e:d8:16:
af:2e:ab:67:54:d0:e5:af:9a:c2:71:94:f4:b2:5e:0e:44:43:
ec:b1:42:f7:75:24:21:09:c2:3d:82:17:5b:2f:c3:94:a6:42:
8c:b4:17:40:18:02:7d:2f:07:84:3b:8b:19:9f:6c:e3:f3:9e:
b6:16:33:58:31:1a:2b:75:b9:38:e5:c8:03:c8:43:fc:ce:85:
f9:36:0a:fc:19:ed:46:fc:3c:50:24:44:f9:99:3c:a7:35:ef:
1b:7b:88:64:b3:14:9e:d8:a6:f1:64:12:f4:a5:02:1f:6a:c6:
b2:70:29:ba:60:37:a7:bf:6e:cc:ef:a1:42:cc:29:ae:e1:06:
dc:2f:58:1f:00:13:4e:14:07:98:18:45:74:12:76:03:b8:d0:
be:2a:08:09:cb:2b:3e:d3:e0:9f:9c:f7:f1:0c:3e:f6:92:ce:
44:a1:04:51:e2:a5:c0:63:d1:d6:9a:bb:3c:ee:c6:3e:c4:2b:
8c:76:f5:21:e9:2e:f9:0f:9d:9b:13:7d:9a:cf:5e:60:44:a4:
96:b7:89:06:1a:7c:81:27:68:e7:80:43:51:85:7a:4c:f8:30:
9a:c7:ed:42:35:b2:9d:a2:99:9c:7b:b4:46:4a:0c:49:f3:d1:
73:b9:df:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:33:00 2026 by rpki-client