Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: gMzgIQzMJ7oRN7MBk7EPgzR+coiw4ZyfmpReGRUUuCU=
Subject key identifier: DD:06:D7:63:77:FD:C0:55:F5:52:52:9D:2D:A6:60:0A:93:DE:7F:8D
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 019D27DF4DB5FF9D1A2A1BAC1F2D78213CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 08A3
Signing time: Thu 26 Mar 2026 02:00:38 +0000
Manifest this update: Thu 26 Mar 2026 02:00:38 +0000
Manifest next update: Fri 27 Mar 2026 02:00:38 +0000
Files and hashes: 1: 1xbn_UMCw0INiad24Fz-EfLf1Gw.roa (hash: SZrNeUwfQoqqElnDWbZPqxb5PbXGACF+9AzBOt+xfa8=)
2: 6XExm7Uo-EU0Ms0tsb7xKnyJkVk.roa (hash: BWgqT1gKxehU5OIENtOQqrP4y0cmP4jYKvHGk1A4LAc=)
3: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: QnbW7RluMZqB4ntiHqprl8FRGFnVjK9//qreSBbT5FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:4d:b5:ff:9d:1a:2a:1b:ac:1f:2d:78:21:3c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Mar 26 02:00:38 2026 GMT
Not After : Mar 27 02:00:38 2026 GMT
Subject: CN=dd06d76377fdc055f552529d2da6600a93de7f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:1a:e7:60:86:2d:a8:a8:5b:a7:5d:0d:83:
42:09:e0:a5:a5:17:6d:39:70:20:0d:58:0b:68:df:
ee:76:c8:7c:2a:86:ba:e6:f6:ed:1d:f6:f3:c0:28:
f2:7a:19:14:54:7c:a8:a6:fe:71:25:32:ef:4d:a5:
f4:26:6c:e8:97:d8:bd:31:6c:43:2e:37:8e:e1:3f:
70:1c:22:42:d7:9d:07:67:95:6d:cf:21:4c:44:e0:
1b:cb:dd:e4:2e:d1:c5:61:0b:ee:d3:d0:d3:a4:8a:
b0:c9:e7:2e:03:5e:00:5e:da:4a:65:5d:8b:3a:23:
56:29:2e:b5:54:20:9d:90:47:0f:45:62:ec:4b:70:
89:f6:8c:b8:ad:85:e8:49:82:0b:c5:f9:75:94:bc:
63:17:65:9b:c3:4b:a3:f6:a6:aa:2b:dd:c3:62:8b:
4b:cf:72:31:8b:96:e8:0c:21:b0:7a:1e:16:ae:8a:
4f:bb:e2:99:c4:eb:87:cf:9d:2c:ff:3a:e9:bd:16:
ef:17:71:0f:31:ce:d4:08:18:a1:37:b8:4f:1d:4c:
96:f1:fb:4a:79:dd:41:7c:01:8a:46:66:f6:d4:a0:
11:a5:25:b1:1b:66:58:1c:f9:ba:8b:75:fb:20:42:
a3:f2:d4:bc:6c:bc:ec:fe:b1:a1:a6:d8:79:e3:9a:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:06:D7:63:77:FD:C0:55:F5:52:52:9D:2D:A6:60:0A:93:DE:7F:8D
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f0:93:20:69:bf:b8:ea:de:27:63:91:18:e0:2e:68:e7:8b:
be:86:7b:60:e6:7e:0d:2f:d7:89:73:fb:39:a6:a4:3b:c9:b6:
c2:10:ff:68:69:60:f2:6b:22:e3:e6:d7:c1:98:4e:ad:07:c1:
ed:7c:76:08:5b:67:c4:4d:d5:07:50:54:4b:c0:c7:a2:68:8e:
39:c4:68:47:df:52:9c:b9:ab:72:16:65:9a:4b:56:85:8d:6e:
69:47:91:46:cc:f6:dc:ad:b1:7b:60:7b:49:a0:50:eb:59:96:
d6:51:ca:2a:9d:91:f4:ac:ee:0e:83:21:e9:2c:b9:1a:d6:dc:
f8:2e:d3:68:84:90:23:d3:69:9b:3e:d1:5e:73:cb:43:a8:d2:
72:d8:ac:d5:39:d8:46:e5:ce:0b:66:a8:68:f1:e6:c2:8d:ce:
c9:73:7f:db:e6:65:ee:85:a0:ce:e7:71:82:e4:ca:d9:91:14:
98:8b:98:ea:1b:5e:b5:30:f8:a1:d2:e2:6d:51:b0:f4:b0:74:
92:50:5c:f1:6c:54:ab:fe:9a:81:a2:ca:7b:a7:81:b5:32:24:
31:50:d5:7a:9a:24:20:50:09:73:bd:54:5e:61:c3:c5:2d:c3:
e7:0a:24:91:0b:67:6d:b1:21:a9:2f:c3:d0:17:77:77:e5:ea:
b1:61:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:31:03 2026 by rpki-client