Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
File: yq46VN0DiVaD7tvDedHg27Brm9s.mft (raw, json)
Hash identifier: oE9gdqQu0W5I4Ypx5srvnqc12iUb5Yv3vJJoiQ7SZ8I=
Subject key identifier: 5A:01:6D:F1:C7:31:3D:AA:AD:D7:E0:37:99:99:36:0C:90:8B:10:36
Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
Certificate issuer: /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Certificate serial: 019D3A53CB350DB7276EE2F669D69F2E297B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
Manifest number: 031D
Signing time: Sun 29 Mar 2026 16:01:03 +0000
Manifest this update: Sun 29 Mar 2026 16:01:03 +0000
Manifest next update: Mon 30 Mar 2026 16:01:03 +0000
Files and hashes: 1: DOL6_bM0cayFn6lDHZcPsYXxrCI.roa (hash: SL51iqqDzym7zDZje/TntRQN14HmuoWDKSbYF6rNrYk=)
2: yq46VN0DiVaD7tvDedHg27Brm9s.crl (hash: Qhtib24uCSQMzEOTKS0LFvhNRk9z041CLXEt8VybYYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:cb:35:0d:b7:27:6e:e2:f6:69:d6:9f:2e:29:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Validity
Not Before: Mar 29 16:01:03 2026 GMT
Not After : Mar 30 16:01:03 2026 GMT
Subject: CN=5a016df1c7313daaadd7e0379999360c908b1036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:51:61:bc:2b:b6:28:f0:24:e9:e6:ad:1d:
eb:fa:af:f6:0e:38:7a:d0:98:bb:ed:b1:cb:a8:c1:
21:a8:de:55:85:e9:bc:27:2b:b2:83:82:36:ae:3c:
cf:d2:83:04:17:02:51:9a:00:2d:2f:73:a3:2b:54:
6f:cd:39:72:51:2b:83:b8:b5:35:fc:f2:1f:8e:91:
43:a0:fb:7b:c7:15:93:cb:e1:55:f5:22:bb:80:50:
75:f5:39:c5:26:51:1e:10:24:fb:96:86:d0:81:99:
27:88:81:98:17:4b:ac:98:e3:30:33:c0:61:41:41:
ad:a5:92:6c:00:9a:61:dc:37:50:c9:c6:66:9c:db:
80:33:e5:9e:ac:28:49:64:9f:cb:10:58:b5:13:23:
5c:a3:54:99:e1:be:55:bc:6c:ce:1d:ce:25:66:88:
d4:0d:5e:e1:d4:31:f5:fc:06:f9:a8:ab:fc:27:2b:
74:4a:6b:f0:85:c5:49:de:99:3d:44:4e:88:f8:90:
15:82:a0:4e:f6:16:57:b0:90:e4:23:c1:dd:e9:ee:
1d:56:f7:a5:34:bf:4c:9e:34:75:69:ff:ad:51:22:
ff:c5:95:bc:cc:97:48:1a:a5:20:96:c3:eb:13:c1:
35:f2:79:cb:82:f2:d8:68:f1:10:bf:ff:35:31:20:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:01:6D:F1:C7:31:3D:AA:AD:D7:E0:37:99:99:36:0C:90:8B:10:36
X509v3 Authority Key Identifier:
keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c3:1d:98:01:2f:85:c3:d8:02:ab:ab:86:f4:01:72:fc:9e:
e3:a4:dd:7c:d5:c0:05:45:59:5c:7f:49:85:77:b3:10:a4:6e:
ad:aa:95:4c:43:38:58:91:59:37:33:da:d4:ee:51:7e:32:3e:
01:44:e9:e2:9b:3c:a9:cf:bf:d8:ae:b0:02:92:b4:e8:f8:0e:
0d:e1:5f:3d:b6:68:27:f3:a7:7c:4f:80:9d:98:21:54:50:15:
90:97:b7:1d:52:fe:5f:ef:4a:1e:ee:6e:c5:9f:2a:3a:b2:00:
58:f9:19:b7:6b:4b:9f:48:b6:8e:08:a3:3d:c6:e2:c0:57:e7:
41:34:c8:67:2f:e2:56:a1:b9:92:29:04:2e:6a:60:0b:53:1f:
39:19:85:de:f4:10:26:00:bf:be:81:69:49:cd:b4:d6:65:c3:
5a:05:a6:3f:c7:39:94:39:ba:1d:14:92:22:00:d1:a2:de:73:
95:94:03:c7:e5:04:21:51:da:02:1b:1e:3f:11:c4:2e:a3:f9:
54:9e:13:25:39:a9:12:64:35:34:2b:0f:83:11:81:a9:97:16:
7f:50:c3:75:20:ea:c8:19:7c:f1:36:16:81:f9:83:8e:04:8b:
a0:d8:77:35:b4:bf:43:87:84:b7:03:cc:9b:d1:be:6d:03:0d:
91:0b:c4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:12:56 2026 by rpki-client