Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft
File: YVbhr9Z5oqcxH9atXfaZDlYY488.mft (raw, json)
Hash identifier: D4PmVF8hu9xn4xV98Um4d+dkZdFv0ycFzwlV4mzLdXA=
Subject key identifier: 26:8E:D4:49:8F:44:29:83:AD:98:A5:17:E5:20:AC:57:27:42:3F:2F
Authority key identifier: 61:56:E1:AF:D6:79:A2:A7:31:1F:D6:AD:5D:F6:99:0E:56:18:E3:CF
Certificate issuer: /CN=6156e1afd679a2a7311fd6ad5df6990e5618e3cf
Certificate serial: 019D322C075EBD7B061DC32D335847BB1FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft
Manifest number: 0122
Signing time: Sat 28 Mar 2026 02:00:39 +0000
Manifest this update: Sat 28 Mar 2026 02:00:39 +0000
Manifest next update: Sun 29 Mar 2026 02:00:39 +0000
Files and hashes: 1: X_U3e_j_BQQB5J7FdGp0EeARODQ.roa (hash: ttL/fkTTQSuG7aZuTgVJ2bkgv1TNShH60891lGd8qPs=)
2: YVbhr9Z5oqcxH9atXfaZDlYY488.crl (hash: hwKZKAVGucv+Cxgvv3Yq2/CzkeChr7CkWEjyMCm6RrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft
rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:07:5e:bd:7b:06:1d:c3:2d:33:58:47:bb:1f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6156e1afd679a2a7311fd6ad5df6990e5618e3cf
Validity
Not Before: Mar 28 02:00:39 2026 GMT
Not After : Mar 29 02:00:39 2026 GMT
Subject: CN=268ed4498f442983ad98a517e520ac5727423f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:1d:93:cc:0c:54:94:6d:d8:41:34:38:e2:
35:13:6a:25:7e:0c:19:cf:23:02:d1:0d:64:6a:f1:
68:6c:68:40:29:13:f9:67:70:f5:32:6c:d5:73:69:
2b:54:da:fc:ab:ad:82:81:e6:78:b8:16:4e:f2:ec:
68:4b:76:bb:52:8d:ab:fb:ba:10:5d:5b:9c:7f:02:
95:93:0a:62:ca:65:5b:c6:d7:33:12:39:55:f4:b5:
da:3b:c7:7e:04:6e:37:01:1d:e0:9c:69:0f:4e:a8:
94:16:5f:24:94:42:86:bb:48:cd:bb:11:e8:88:33:
9b:b4:8f:66:cf:07:7a:fd:ac:f8:96:ad:df:ed:02:
6d:23:ce:c4:2e:e8:53:60:0b:77:fb:4e:96:38:fe:
bb:54:95:c7:35:93:fd:99:20:f9:10:cc:df:f2:1c:
72:7f:85:70:53:8f:c1:8e:28:70:bb:78:63:e1:01:
ca:26:a8:f3:25:d4:12:f2:50:60:39:e6:d4:ea:23:
98:f8:47:ea:50:64:2d:91:4d:b2:8e:bd:8e:2e:6f:
6a:db:1a:29:ef:62:7e:cc:d4:c0:fa:6b:4e:24:44:
19:56:e3:64:c9:d2:2e:c6:97:e1:72:84:96:67:5d:
6b:c4:90:3d:d3:04:57:c1:6f:86:28:da:b1:c3:4c:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8E:D4:49:8F:44:29:83:AD:98:A5:17:E5:20:AC:57:27:42:3F:2F
X509v3 Authority Key Identifier:
keyid:61:56:E1:AF:D6:79:A2:A7:31:1F:D6:AD:5D:F6:99:0E:56:18:E3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:02:b3:3b:9a:b9:39:1f:c1:88:90:19:65:3d:02:95:a4:9c:
46:2d:d1:90:6e:22:68:e0:0f:6e:44:96:9f:f6:aa:24:54:8e:
4b:c9:c8:54:f0:b3:64:1e:60:b5:01:f6:34:37:d3:71:13:ea:
b2:b9:8d:21:25:81:06:9a:60:6b:dc:d1:70:fb:51:30:f8:6b:
97:a0:e9:b2:af:b7:08:ad:12:c9:be:be:6f:8d:de:9e:d0:59:
e2:10:13:39:34:9b:6f:af:b7:96:9c:9d:67:b2:1e:1f:ac:d8:
1a:10:c4:3e:0a:3a:77:60:bb:04:df:9e:a1:48:d1:ad:c5:90:
3b:7b:2f:2f:b1:63:48:4d:78:40:a8:da:95:dc:a8:db:e4:c0:
c4:5d:9a:dd:a7:1c:4b:66:bd:e7:55:16:fc:7d:62:8d:bb:46:
cd:d2:6c:29:ba:61:ad:b6:f0:bf:87:82:92:66:48:49:4e:67:
09:2a:c2:a5:78:03:81:97:13:22:b7:b3:c6:80:b9:ea:11:ec:
83:47:78:6c:a1:2b:ee:17:96:0f:5e:ae:0f:9b:65:26:32:68:
08:4a:37:54:23:22:46:93:95:8d:5d:25:a5:82:ba:a8:0d:ef:
7d:58:e2:b0:6b:92:24:e6:ed:4b:b9:e1:5a:1b:05:fb:8f:1a:
9d:0b:89:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:22 2026 by rpki-client