Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
File: YE6Z8sS9AZ63cxUmRSbdauHWK00.mft (raw, json)
Hash identifier: 091vBJVIj6PAKcjE4TlkU3KfJPJu/wB2TWBptBYmBO8=
Subject key identifier: 26:CA:0B:33:8D:F6:4C:C0:56:62:7D:4D:AC:A1:FC:28:8E:27:80:28
Authority key identifier: 60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D
Certificate issuer: /CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d
Certificate serial: 019D37C100CBA5898B4AF0C84D18E783E90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
Manifest number: 0344
Signing time: Sun 29 Mar 2026 04:01:28 +0000
Manifest this update: Sun 29 Mar 2026 04:01:28 +0000
Manifest next update: Mon 30 Mar 2026 04:01:28 +0000
Files and hashes: 1: 1dXa5tkWoInu3h4FaYx5vYuGYA0.roa (hash: 9b7WB/pq7Bp5CHCI2z/vInewOBDZyN3RbRsEInhEG7c=)
2: YE6Z8sS9AZ63cxUmRSbdauHWK00.crl (hash: WzbX10PYswwNT3KoErjFDkZoaFtyAJRB7aW5Otf2qO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:00:cb:a5:89:8b:4a:f0:c8:4d:18:e7:83:e9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d
Validity
Not Before: Mar 29 04:01:28 2026 GMT
Not After : Mar 30 04:01:28 2026 GMT
Subject: CN=26ca0b338df64cc056627d4daca1fc288e278028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:06:70:ae:55:fd:e5:1a:bb:76:84:ff:c2:
c0:fa:20:6a:8b:4d:22:f9:75:8b:23:a4:8a:f3:4f:
87:0e:92:d8:c5:48:a6:e5:09:4f:e7:10:17:8a:ae:
04:17:08:84:df:d8:3e:78:ab:37:95:e0:4d:ed:a5:
11:ee:3b:ee:4d:1e:14:73:e1:0f:c3:6c:63:32:a9:
14:f5:8d:27:3a:3f:36:6f:6a:8c:69:02:12:2e:92:
ca:a3:4e:8c:3c:7b:22:c0:3c:83:08:a6:31:78:20:
e8:f0:b9:ce:35:79:99:ca:3a:11:ad:f2:51:69:bf:
c7:c0:31:63:61:cf:04:61:e4:ef:a7:0c:76:be:4d:
39:fc:9f:7b:51:b2:f5:65:2b:ea:03:f7:a7:f0:aa:
de:c4:23:b1:5b:71:de:1e:c8:93:4a:ac:aa:54:25:
22:f0:40:08:12:38:58:6e:4c:b4:68:37:7e:a3:bf:
85:3a:07:9b:71:2d:ca:b0:76:97:79:7a:e2:20:88:
25:05:e2:5c:06:26:7c:0c:44:b9:5f:c2:a0:73:0f:
45:4f:e8:a7:78:5b:a9:86:65:50:17:5b:eb:1a:44:
34:91:06:a4:c2:7b:cd:4c:e0:6c:10:96:07:32:f9:
89:1a:d6:2e:a5:2d:28:d7:5d:f1:da:86:7a:7c:2c:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CA:0B:33:8D:F6:4C:C0:56:62:7D:4D:AC:A1:FC:28:8E:27:80:28
X509v3 Authority Key Identifier:
keyid:60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:37:af:80:f3:e1:4b:9a:b5:99:86:b8:d8:2c:49:00:ea:db:
9a:f1:18:24:9f:e2:b1:19:97:6c:5f:3f:e3:6a:67:c8:a3:13:
98:1e:bc:66:3d:c7:6d:d0:02:ea:a6:cf:15:d7:46:a4:fa:87:
8f:fd:9e:3b:78:e3:f3:b7:84:93:98:d2:6a:b4:8f:65:a0:b2:
e3:dc:60:4f:21:67:1c:0c:4a:e6:29:88:11:ea:da:e6:36:a3:
1c:09:a4:2e:37:28:e2:9c:cc:d9:0b:4f:04:9c:c8:e0:35:1c:
5c:53:38:ab:b5:c4:37:dc:eb:62:3c:c4:72:45:ad:18:b4:5b:
4c:0f:a8:90:45:23:20:03:18:fd:06:9b:35:fa:27:5c:dd:ca:
89:d5:b3:10:19:92:a1:7a:ed:75:db:fa:d7:dc:cc:c1:a6:69:
58:d7:0d:42:24:d3:07:91:41:88:9a:64:00:a7:08:40:b9:e0:
2f:ed:d1:8d:cc:11:cd:2f:02:72:3c:97:2e:6c:9f:af:79:2b:
4f:f9:ef:23:52:89:37:bb:4c:07:f3:d0:69:c7:ad:d6:63:d6:
63:76:38:74:99:5d:66:f0:5d:5d:cd:4b:92:68:52:4f:62:ca:
0c:f5:31:97:ce:4a:43:25:40:41:2e:97:a5:bd:31:3a:ea:a9:
b0:19:0c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:25 2026 by rpki-client