Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: 6jm+z87rsIJ5lfkTxIEqmQKuWExEPn20T8ToouXHM1o=
Subject key identifier: F0:A5:CC:07:A8:B3:7F:4B:4A:C9:0F:AF:E2:90:FF:D9:A4:51:91:F6
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 019D38663C66C72539AD92FC9694DA5E91C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: duVPwRuDqX3QDkaKIyT4P6ztbz4.roa (hash: kMA3LqVtrh17srYO2maurS2CA2PcrI4sa4rbcd9ehyQ=)
2: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: UxZJQi442bUFcGkRKFtJboxSPNGsebkuMwMQ+nnDo74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3c:66:c7:25:39:ad:92:fc:96:94:da:5e:91:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=f0a5cc07a8b37f4b4ac90fafe290ffd9a45191f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:f5:b9:b4:31:78:b8:a1:f0:fd:ee:f4:a2:
3b:d3:30:ec:d5:d8:b0:8d:da:68:44:31:46:da:85:
42:b7:eb:3e:ab:fe:e3:6f:2e:83:fc:ec:c8:19:ef:
f4:35:4e:6c:38:9d:22:d3:48:3c:46:42:14:9b:55:
f3:40:ef:0e:02:57:51:1f:9b:8d:82:34:7d:d4:74:
75:15:de:12:62:08:c0:a2:68:bc:be:83:b1:38:1e:
4e:c4:7c:74:af:e4:32:2f:d7:45:7a:d5:d6:ac:79:
99:b9:ed:50:05:cb:42:c6:10:b5:fa:d0:ab:34:0b:
2b:2a:c3:3d:9b:cf:ff:b1:5f:26:38:78:3b:da:e2:
be:e8:2b:4a:78:1f:9c:80:4d:09:11:71:95:57:6c:
e0:60:df:cb:81:b0:cf:2a:a6:70:f2:e9:22:98:aa:
79:e1:9a:3a:25:f4:12:02:58:b2:75:7f:3b:0e:06:
4a:de:b9:cf:2d:5b:59:60:7e:1c:8a:e1:31:39:4c:
06:35:ff:16:6d:b5:4f:da:b5:74:38:d9:3c:90:32:
56:7f:c4:af:99:7e:41:d0:f1:71:51:28:aa:30:d1:
4e:2e:36:a4:6f:ea:f8:a3:89:16:fa:b4:b0:2d:0b:
af:39:11:d8:ac:23:fd:cc:fb:b3:4a:08:9e:96:e9:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A5:CC:07:A8:B3:7F:4B:4A:C9:0F:AF:E2:90:FF:D9:A4:51:91:F6
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:10:6b:ab:43:de:13:35:b3:a4:2c:73:b6:4a:d3:c9:cc:d8:
07:0f:ca:63:4e:ae:19:be:5e:4e:e1:d8:cd:95:aa:7c:00:6e:
08:b3:4e:0d:ba:1e:36:97:a9:b3:c2:94:be:54:5e:a8:9a:db:
18:a9:ac:02:00:f4:08:21:ed:60:90:51:6b:e8:a3:85:cc:36:
af:d4:58:8f:10:7c:3b:62:9e:19:4b:89:11:7b:76:c3:8f:a4:
7f:d2:50:89:96:ea:a0:e8:be:6b:b0:18:c6:18:16:65:a6:9d:
c6:0c:92:ab:7d:85:fb:a0:4a:23:38:43:e1:97:6e:a1:07:93:
cf:36:36:44:e1:ee:8b:ea:7d:f3:60:b3:0c:ba:a3:b8:3b:ac:
b9:4a:47:5e:6b:4a:a9:d9:ff:bb:e7:9d:f6:7a:66:9e:ba:12:
73:63:b9:83:cd:e9:19:db:fb:63:47:82:06:51:3b:3c:2a:f5:
b7:85:2d:9d:45:b7:f2:5a:33:c9:1e:04:ec:3c:25:80:49:80:
f1:ef:76:28:6c:1f:6f:b2:39:eb:b8:79:68:30:3d:52:fe:cd:
5b:2a:86:df:6e:08:07:b9:d7:c6:9c:2b:7d:23:c8:24:fa:10:
66:1c:04:40:7c:a9:2d:05:e0:3a:ca:0a:fa:5f:6b:8d:ba:34:
3f:4a:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:03 2026 by rpki-client