Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json)
Hash identifier: +a4uwGFSlw17+3gUFdntvFNuc1l6Fe5TmZUm2vAxv/w=
Subject key identifier: A4:2B:D8:53:99:78:42:EA:9D:08:5D:5F:47:AD:06:6F:7F:25:EF:14
Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858
Certificate serial: 019D3752B98D9F18FBCDBC6F869E7D807C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
Manifest number: 047A
Signing time: Sun 29 Mar 2026 02:01:01 +0000
Manifest this update: Sun 29 Mar 2026 02:01:01 +0000
Manifest next update: Mon 30 Mar 2026 02:01:01 +0000
Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: WKyNItfjL1WWM96SGG3Ep7nLUwdKfGQx8bTGvG+/MXI=)
2: z2OIhNN84i4dGWK3beXp8BZpG1o.roa (hash: z387A8a/HVWQyo8KVhUtKf/mlVGmnDZ8KotNU7wN1AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b9:8d:9f:18:fb:cd:bc:6f:86:9e:7d:80:7c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858
Validity
Not Before: Mar 29 02:01:01 2026 GMT
Not After : Mar 30 02:01:01 2026 GMT
Subject: CN=a42bd853997842ea9d085d5f47ad066f7f25ef14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:04:c9:96:41:ec:4a:27:be:7c:93:c4:b7:
db:f6:4f:19:a8:0b:cc:6e:32:da:d8:2d:ad:0d:91:
05:d6:32:6b:d1:a2:a8:31:da:61:db:02:df:f5:c8:
0b:ce:04:c0:c6:7b:04:0c:ec:58:3f:c9:d6:f1:69:
cd:77:a8:29:b6:6c:f5:bd:ee:cb:6b:4e:97:5d:f0:
17:f5:a8:c8:11:cb:3e:fa:90:e9:4c:21:68:32:ab:
7e:d6:15:c7:45:f6:71:c3:f5:94:bd:d9:d8:12:28:
0a:e2:9b:a9:06:12:33:11:40:a6:7d:83:9d:0b:7f:
52:aa:ca:7f:f6:c7:1f:a7:4c:42:59:39:c6:08:3c:
fb:b5:55:30:f3:5e:38:f4:8e:fa:83:2f:8d:62:36:
e3:05:f1:b8:6c:2f:14:4d:c1:e9:65:26:57:e5:a0:
54:8d:9a:2e:60:21:f5:70:b6:9d:2f:28:ff:ee:b6:
ab:96:48:4b:5e:1e:ad:74:bb:17:56:49:62:f0:8c:
9e:ca:c3:e6:7e:37:ba:49:94:fc:08:c1:91:96:0d:
d7:90:4c:b4:e1:e6:bf:c3:e0:53:4a:f4:b5:97:58:
3e:53:2d:fb:04:af:27:d1:18:33:95:ed:db:27:6a:
3d:8c:3b:bb:8f:77:24:3e:c8:3d:93:c5:e0:9b:5a:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2B:D8:53:99:78:42:EA:9D:08:5D:5F:47:AD:06:6F:7F:25:EF:14
X509v3 Authority Key Identifier:
keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f2:51:70:b3:8f:bc:e6:9b:b1:89:6a:4a:68:28:97:57:95:
f5:93:3f:3b:d5:48:74:91:f7:a1:ef:55:76:3b:08:fb:da:74:
0c:10:59:99:6b:f9:24:9b:92:86:7b:2c:c7:f5:35:9b:65:d7:
c8:0a:41:e8:68:59:f2:17:31:13:90:c8:70:b4:4f:c7:a7:96:
68:bb:be:6a:31:38:25:99:65:07:f6:88:17:53:d6:78:91:16:
5b:27:33:e9:67:e9:ad:8d:4e:5a:5e:b4:f2:9a:e0:d4:95:e6:
62:67:02:77:09:6c:b8:9d:b9:14:4e:32:47:2c:2b:3a:95:7a:
d8:8e:86:88:bf:db:d2:4c:a3:6c:12:7b:f2:6f:ce:68:4c:77:
9c:2a:57:64:fe:40:78:e3:f2:2c:61:8b:5f:67:8d:ef:b3:eb:
9b:94:4b:fc:23:e1:fe:4a:50:d4:b9:14:dd:66:ce:a2:85:a2:
bd:41:36:c1:72:ed:4b:b8:90:78:5f:70:5b:57:f6:83:ef:71:
67:a5:fe:96:42:5d:5f:75:07:f7:38:1b:33:dd:a6:5b:fe:89:
1b:8d:6d:0c:4e:20:37:58:bf:5a:9d:8e:75:2c:6d:80:ee:40:
b4:6b:83:b3:f9:2a:a1:f7:16:94:b8:d2:b2:40:40:bb:cc:54:
6a:82:b4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:41 2026 by rpki-client