Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: zHTdfZSRZz23bIjtXdzEjOYmZt5OCWA1A9XN0V+OGF0=
Subject key identifier: 24:68:2C:06:EA:D7:D2:6C:F8:5C:60:7E:BE:9F:4A:61:8A:CD:E7:57
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 019D389BCA17BCD1783F8CEFBEAC10A83B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 159B
Signing time: Sun 29 Mar 2026 08:00:26 +0000
Manifest this update: Sun 29 Mar 2026 08:00:26 +0000
Manifest next update: Mon 30 Mar 2026 08:00:26 +0000
Files and hashes: 1: dm05ruUJUy3EB3fTlfRp28bRVHs.roa (hash: HKoH3W2n4KC9D9ffQJl5txh8NMSU8l6yIctHVJM24eA=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: 4Ocic2/J0BJM7e1t7K9C+AUcNDlrSVYJkHptsSZYHn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ca:17:bc:d1:78:3f:8c:ef:be:ac:10:a8:3b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Mar 29 08:00:26 2026 GMT
Not After : Mar 30 08:00:26 2026 GMT
Subject: CN=24682c06ead7d26cf85c607ebe9f4a618acde757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:c5:24:e1:52:9c:21:53:78:78:b6:6c:d2:
6c:23:17:86:3e:c4:49:e1:bd:57:4b:1e:9e:cf:a6:
3e:03:39:20:bb:9d:61:53:ac:68:f3:88:8d:cf:6b:
8a:f1:33:2e:c6:1b:d6:cc:ca:92:51:97:42:c6:1d:
7e:91:80:96:61:9a:45:0a:c9:4d:87:2e:9e:7a:a3:
44:cd:55:d0:9e:52:39:9c:9e:89:ff:c1:d7:e1:09:
09:10:dc:b9:ff:a3:62:2c:d2:87:a9:60:23:9a:0a:
c0:18:29:fd:bb:7b:42:33:ba:9c:c6:32:c6:82:bd:
de:aa:98:6a:a2:6d:67:a1:0e:f0:be:24:1c:c6:22:
79:21:e3:9a:ab:ec:3a:c5:e7:23:ec:1a:c0:d8:0e:
74:bd:9f:96:62:2e:16:b7:4e:16:ce:31:59:26:57:
61:41:46:b0:c9:78:c0:a0:9f:56:b5:e4:60:4e:1a:
ba:75:f5:8f:0e:fc:71:a7:9f:2a:43:26:40:32:22:
2f:55:d0:d8:ce:df:17:61:85:1b:76:9d:a7:75:fa:
dc:14:82:a3:73:a9:43:a0:0c:85:1d:61:a8:38:fe:
0f:4d:c4:be:d4:14:61:25:44:e0:48:e8:72:e3:e9:
28:94:97:16:85:d5:b9:21:be:25:ff:6f:da:3f:43:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:68:2C:06:EA:D7:D2:6C:F8:5C:60:7E:BE:9F:4A:61:8A:CD:E7:57
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a6:12:79:a5:5e:e6:36:30:ad:43:28:c3:a5:d1:c6:79:88:
de:9a:b0:8c:77:81:9f:a5:e8:2d:88:5d:35:e9:74:19:e2:c6:
d5:e9:14:6d:ea:b4:82:52:46:38:05:a8:79:5c:d8:61:4d:27:
3e:3c:20:4b:c4:8c:4b:a6:38:53:74:0f:31:ac:20:8d:dd:2a:
f4:f3:2b:c5:2e:09:df:a6:79:d6:87:28:ff:10:4a:35:87:36:
83:fd:8b:48:cd:24:70:fc:cf:72:b1:1f:dd:a9:ca:86:d4:d7:
fc:7f:92:f5:97:34:c0:12:08:ca:e8:94:82:27:58:d1:f7:c2:
31:03:7e:31:11:7a:5e:4c:7c:a2:f8:71:48:08:05:08:d3:04:
e8:18:4e:88:bb:df:4c:6d:f1:cf:6a:7f:7f:02:12:36:39:68:
f6:80:4d:29:6b:19:b5:c7:69:39:60:8e:e5:ab:39:40:2b:99:
e8:c9:da:66:b6:3e:d7:93:5a:8e:ef:01:34:d9:a2:ae:87:b0:
98:c2:6b:ff:ee:00:38:e9:78:89:00:e6:ab:d2:a0:50:00:9c:
59:b5:dd:b0:1d:21:d8:41:c8:e7:13:54:a6:c8:65:a9:af:a8:
de:3b:5c:a9:60:eb:7e:fb:19:b5:c3:e8:24:0e:09:c1:70:5b:
22:50:31:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:11 2026 by rpki-client