Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
File: yBEbEYJKUeh1t-BnsErHj97koRw.mft (raw, json)
Hash identifier: /wgh3UhSwCXu3BL11O0aJPDLVHwTuYnMbcesv1+OPoI=
Subject key identifier: 03:5B:7D:80:61:3B:CB:B3:D5:0B:2B:A1:E1:0C:E7:55:3A:6B:11:DF
Authority key identifier: C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
Certificate issuer: /CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Certificate serial: 019D25F1575CFAAF20536C5FE7FCA6F45D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
Manifest number: 11
Signing time: Wed 25 Mar 2026 17:01:06 +0000
Manifest this update: Wed 25 Mar 2026 17:01:06 +0000
Manifest next update: Thu 26 Mar 2026 17:01:06 +0000
Files and hashes: 1: a6qm2G8bP-6TfcIWHf4qN9k0lXk.roa (hash: AAGltJSHEt26RftxskOpRrCiKKvAykf8bEWROHtz0kQ=)
2: qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa (hash: TvC61ITQGltf4rYIHmX8krv+oGoHgURt5QCIo015ems=)
3: yBEbEYJKUeh1t-BnsErHj97koRw.crl (hash: /M58OO4Jp+4jaT7HaiYkshs0xTrLQyvGSdleEKbPxCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:57:5c:fa:af:20:53:6c:5f:e7:fc:a6:f4:5d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Validity
Not Before: Mar 25 17:01:06 2026 GMT
Not After : Mar 26 17:01:06 2026 GMT
Subject: CN=035b7d80613bcbb3d50b2ba1e10ce7553a6b11df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:5a:dc:7e:74:6b:f7:bf:96:7e:c2:63:9c:
54:74:77:a1:95:d0:c9:82:f8:18:17:ff:c5:80:46:
ed:01:e7:e7:e8:c0:70:51:a3:b1:a3:9a:62:0a:b3:
9e:0e:cf:dc:9b:e8:13:ac:9a:07:61:bd:89:ab:b7:
e6:59:d1:e0:0a:4c:89:be:b4:08:c1:99:19:51:4b:
06:52:8f:d0:a2:eb:14:91:98:0c:e5:5e:de:87:5c:
6d:81:ac:07:6d:01:a5:0e:8c:84:e7:0c:4b:8e:3c:
c7:eb:6a:9f:b4:c7:fe:85:76:27:31:8f:75:7c:65:
0c:e8:54:6a:f3:3a:fe:65:62:b6:7e:2d:cb:f9:34:
4d:b4:cf:9d:26:3e:3b:d0:bc:7a:9e:f6:06:30:62:
32:ce:08:5c:5d:9e:ca:4a:54:fa:4d:52:1b:db:e8:
c4:8e:f9:ed:d2:09:51:a0:b6:29:de:82:bc:cd:70:
27:f3:c4:36:f3:8e:49:6b:e1:53:f2:95:67:df:02:
81:e0:db:d2:9b:7b:6e:4b:56:d3:7d:31:ff:29:f2:
01:d4:6d:e0:9f:94:47:3e:d6:2b:73:4e:a1:d6:1b:
61:44:a4:96:82:90:d7:64:4e:e6:42:73:93:62:67:
7c:32:bc:7c:93:3c:4e:a2:8c:cf:4a:1b:a8:37:45:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5B:7D:80:61:3B:CB:B3:D5:0B:2B:A1:E1:0C:E7:55:3A:6B:11:DF
X509v3 Authority Key Identifier:
keyid:C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:44:f3:27:2a:3c:e6:f4:8d:c5:bf:21:7e:b7:10:f5:84:5a:
1c:81:e5:e9:cf:bf:d5:c7:a5:31:82:17:2f:4b:78:fe:61:13:
86:b3:4a:7d:58:40:de:21:cb:2e:d9:a2:69:7e:35:0b:77:ec:
ea:29:1a:96:db:c3:0a:2d:44:49:8a:8b:41:f0:79:70:4c:61:
3e:3f:f5:0a:50:42:21:85:4a:42:94:f8:2e:ae:2a:5b:24:c1:
2a:67:16:29:a0:d5:e7:7b:cb:ec:ce:ef:dc:6d:bf:9b:b5:59:
e3:a9:71:56:88:8c:96:89:77:e5:97:f7:f0:80:c7:3d:4e:71:
ad:94:33:9f:2a:cc:22:b7:3a:00:bf:1e:9b:9b:e5:4c:62:c6:
fb:7b:68:06:ad:88:49:ac:8d:1e:ff:37:e5:e1:91:21:16:7f:
e2:24:fa:5e:56:c8:dd:6e:5a:30:16:1d:f0:40:e8:9f:75:60:
1e:d9:5d:51:22:88:cb:09:81:22:bd:4c:27:a8:66:e2:07:f9:
61:08:45:6c:fa:1a:8b:e8:a5:80:b0:72:6a:f2:f0:9b:39:d4:
74:12:f7:99:e2:3d:9d:d3:54:2f:8f:0b:82:0f:39:e6:85:a8:
01:3b:50:0b:ed:5c:98:47:fa:d8:a2:cc:9f:db:64:12:c5:ba:
92:84:c1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:55 2026 by rpki-client