Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: h8QLdhu8QaHvncOtZiZOTlGCI9d6wnE2eUbJJt4IPPI=
Subject key identifier: 90:67:8E:B5:EC:2E:86:39:A2:F4:28:5D:4A:82:97:71:4F:57:9A:CD
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 019CE6363CCB883A4B3EB80EC1F726075462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 08:00:39 +0000
Manifest this update: Fri 13 Mar 2026 08:00:39 +0000
Manifest next update: Sat 14 Mar 2026 08:00:39 +0000
Files and hashes: 1: nr0Fz2tsmF_6TIuYhy0uEGaKhm4.roa (hash: ieUkKa8iQQkbjKfwym0V+JuKCh1x6uVEc/cFA3qAmr8=)
2: oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa (hash: CqmLwRU6UPnTaf7VoNKxG/ebsip0tAKsPGqLR+tu6fE=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: 9zpn8TdFOYBFk961vWdBerH+NgJLND8jfcxbSZQd/Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:3c:cb:88:3a:4b:3e:b8:0e:c1:f7:26:07:54:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Mar 13 08:00:39 2026 GMT
Not After : Mar 14 08:00:39 2026 GMT
Subject: CN=90678eb5ec2e8639a2f4285d4a8297714f579acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:81:61:72:3a:04:52:6d:f4:8e:ab:a5:50:
69:c0:e9:5c:92:bf:ee:47:98:de:30:33:27:18:4b:
82:19:65:e1:1a:65:ac:dd:d5:e5:a2:d4:4e:6d:4c:
4d:6e:3e:04:f0:94:d0:6e:65:76:62:90:fb:cb:86:
fb:43:85:00:8b:ef:1f:6c:35:6b:10:d1:16:93:35:
08:f0:a1:53:52:d8:bb:2b:7b:d6:c9:26:48:a9:51:
86:eb:32:40:ce:e9:98:65:c5:e5:e8:2d:3c:05:ed:
ee:62:3a:0d:0e:5d:55:47:93:c3:ae:64:fb:b3:08:
68:59:6b:80:f4:07:3e:8a:a1:66:33:4d:df:89:8a:
db:d1:28:0b:0f:28:42:db:18:c0:9c:16:22:01:90:
9f:55:be:3f:a0:2e:36:6f:f4:ab:b4:c8:1a:f2:1c:
a0:d3:72:dc:5b:96:a6:e8:be:e5:28:b9:ae:90:6a:
f4:20:e3:5b:e0:14:70:d4:b2:76:81:2a:57:ea:8c:
19:67:1f:48:32:b0:ef:a7:f0:9c:cd:9f:67:f4:98:
2d:85:68:7b:e7:fd:ec:55:69:5a:50:95:b8:db:06:
3b:34:26:cf:0a:4a:03:56:4a:0c:09:50:d8:32:5f:
4f:80:67:85:db:47:df:95:89:9e:ec:82:0b:d8:1f:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:67:8E:B5:EC:2E:86:39:A2:F4:28:5D:4A:82:97:71:4F:57:9A:CD
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:66:e2:ca:16:fd:cf:52:34:bc:8d:df:aa:58:20:d4:5c:ee:
67:42:72:93:88:a9:c7:d1:a2:51:5c:e1:07:f9:73:ae:46:67:
12:b4:f0:bb:cb:8c:ff:7f:02:e3:b4:be:72:79:83:d2:9c:04:
47:4e:2c:1b:14:44:21:c1:13:23:e4:d6:e0:73:82:1d:f0:0d:
5f:16:ae:19:4f:9b:29:ad:a0:bb:2d:62:10:d6:51:0d:b1:33:
fc:fc:c4:ac:30:c1:7e:ba:07:2a:eb:42:f5:9b:4b:d9:e1:64:
18:48:0a:d9:9c:6e:fe:3a:60:4b:ca:bc:cb:ff:87:6b:78:71:
8f:e7:4d:9b:8a:db:e6:eb:a8:9c:8a:4a:bd:bd:01:e3:bc:d1:
3e:54:d9:ef:35:ef:f5:1f:88:9c:96:79:48:61:33:b8:bb:aa:
b9:15:4e:1b:59:f6:b2:4b:d8:3a:0f:7b:ca:b1:71:ec:d7:1e:
60:2c:9a:7f:f9:c7:cf:16:1c:f3:38:01:11:a4:3d:87:7a:63:
cf:65:2b:52:63:5f:30:25:e8:f9:64:42:48:78:1e:92:f1:d0:
5b:3a:c5:c2:78:69:25:b5:59:44:e3:65:8d:dc:55:81:f1:6a:
0b:d0:f8:88:e3:e7:ab:12:01:7e:fe:02:63:eb:c1:29:46:dd:
35:0c:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:58:44 2026 by rpki-client