Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: /bF/9Wdr/TQzBoy6QwOHqpDnr+3RfNpmPdKSbf8ptKc=
Subject key identifier: 35:B5:63:4E:69:5E:1A:16:DB:10:2C:20:1C:BD:A5:BF:F9:E5:2E:B0
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 019D28BB2DBD1DCAE2699B7DFAF550E52854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 06:00:48 +0000
Manifest this update: Thu 26 Mar 2026 06:00:48 +0000
Manifest next update: Fri 27 Mar 2026 06:00:48 +0000
Files and hashes: 1: YNrng7LuWkCZkAtvO0FUnnpdapY.roa (hash: LVcYH4intwAxq/uJ9kNbCKuqV5DBz8cARMAEmR1qWHM=)
2: jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa (hash: 1qE+PeKCdqwLTMKhlG/DvcYz45q96dHEsGiuDU6+/bM=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: XsOTUkq4T8FL3r+7gTAQaEuf7sU8d2qi+re/pyIt4U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2d:bd:1d:ca:e2:69:9b:7d:fa:f5:50:e5:28:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Mar 26 06:00:48 2026 GMT
Not After : Mar 27 06:00:48 2026 GMT
Subject: CN=35b5634e695e1a16db102c201cbda5bff9e52eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:60:71:40:4d:95:3a:7f:ea:8c:38:4a:59:
75:22:1e:fc:0c:1d:26:06:4c:00:c9:d1:ad:5b:88:
73:70:53:7b:38:fe:23:12:72:82:c6:f2:47:cc:0b:
33:a0:19:77:34:d4:c8:a3:2f:08:ae:b3:99:5a:85:
19:45:16:7a:ef:01:0f:c3:be:68:89:7e:4d:63:f0:
06:d8:12:f8:9e:f2:78:de:4b:ff:07:6a:95:e3:64:
6e:c7:23:f7:1e:fa:95:f0:ef:af:6e:31:a5:7d:d7:
99:30:26:7b:47:cf:4e:8c:79:3f:23:f4:92:75:14:
ba:98:e5:ec:ab:32:53:33:2f:17:52:39:cb:78:cd:
e2:4c:0b:46:d5:45:0a:5b:05:80:96:48:0e:45:b9:
2a:fc:eb:01:d2:1c:d6:81:3f:01:c6:fb:9c:e5:3d:
e6:57:94:50:03:0c:25:ab:9a:63:21:7a:a0:6f:19:
be:dc:2a:2c:fb:ca:ac:18:65:ac:dc:b6:70:d6:48:
fe:c5:bd:a8:7d:2e:13:7a:c6:ca:55:d0:4d:a8:ed:
c1:87:4d:14:6a:57:f5:00:da:a0:3c:4a:d2:41:5a:
35:52:4b:0f:b1:db:41:df:f4:56:c7:5f:45:e9:d1:
e7:c2:b2:f6:6e:a2:51:6a:95:07:7c:56:22:01:cd:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B5:63:4E:69:5E:1A:16:DB:10:2C:20:1C:BD:A5:BF:F9:E5:2E:B0
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:63:f5:eb:31:12:4a:1c:73:f5:9b:91:e1:44:f6:0c:5c:a1:
fb:70:97:74:d0:e4:5e:7c:3c:36:c6:d7:e0:bd:93:b2:7e:30:
65:2f:a4:07:1f:f3:b5:44:fe:07:c0:58:5b:f2:30:a2:af:b8:
62:fb:bf:e9:3e:a1:a1:42:82:73:83:11:21:a6:7b:9f:38:39:
3f:be:55:49:dd:93:8c:54:89:02:50:15:aa:1e:82:c6:5d:2b:
b3:1f:9f:f5:cb:03:35:ba:47:90:fe:93:13:1f:02:fb:0e:54:
4f:5c:a1:20:1b:f6:45:d5:59:f5:7a:6e:e0:cc:a4:da:52:14:
12:c8:61:d6:51:10:09:2f:45:b3:0d:99:f0:b5:c9:8d:35:34:
92:26:1f:48:a9:a0:76:7d:58:ca:ec:16:db:9f:4c:3a:9e:2e:
9d:8b:8e:52:74:07:d7:1b:b6:ea:f0:38:38:67:1b:47:98:b2:
d5:5e:d8:4b:b2:68:c1:4d:08:8b:34:9b:26:e7:80:f2:a3:63:
77:6a:05:63:e8:36:2a:70:9e:33:ea:43:2d:65:d0:0c:0d:aa:
2b:0d:a8:8b:e1:aa:60:20:21:22:61:f8:75:b2:76:a2:ed:5c:
61:a8:7e:0d:9c:50:d0:b7:66:75:fc:a4:28:de:cb:77:64:fd:
95:2c:60:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:57 2026 by rpki-client