Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: Awp9vu/mv9euzGXKliR4M3vK19zyuarkyCA7GohPZGY=
Subject key identifier: 2B:D7:E3:BC:91:A1:D3:DE:5A:4A:C1:4D:ED:2E:E9:1E:D3:33:32:81
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 019D25F14E83DD8EFAF551079B9A7E37CB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 02DD
Signing time: Wed 25 Mar 2026 17:01:04 +0000
Manifest this update: Wed 25 Mar 2026 17:01:04 +0000
Manifest next update: Thu 26 Mar 2026 17:01:04 +0000
Files and hashes: 1: 9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (hash: MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=)
2: BtoXyxMSDIQKMTy6jmmOzPMifBs.roa (hash: 8KwO1lQ/lrfb32wFNdnAhNa5nkjafPNwoIk1Z923QrM=)
3: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: NLdIZ8AULK+UagkpUjUwePrdISCL0PHx7oeADaSCVOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:4e:83:dd:8e:fa:f5:51:07:9b:9a:7e:37:cb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Mar 25 17:01:04 2026 GMT
Not After : Mar 26 17:01:04 2026 GMT
Subject: CN=2bd7e3bc91a1d3de5a4ac14ded2ee91ed3333281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:6d:b1:5c:1a:da:f0:e8:3b:db:1d:03:67:
0c:fd:61:0d:ed:b6:0f:84:30:d3:74:f7:14:e1:51:
67:02:5c:d6:81:5c:f8:6b:71:9a:fb:18:52:c4:00:
c0:d9:1d:a6:0c:d5:f4:e2:29:ea:64:68:01:da:a5:
1d:29:9c:d7:f3:fd:f2:ac:67:2c:51:61:51:dd:93:
b0:bb:69:c6:36:c0:3d:97:58:73:b3:5e:70:51:4b:
6f:d4:fa:ed:2f:60:bb:04:88:ff:44:47:9e:31:28:
1d:47:d9:ad:11:c7:79:24:aa:84:73:72:d7:12:27:
28:0e:e5:8e:6b:82:bc:a0:17:9e:d7:7e:17:fc:cb:
76:78:b6:17:6c:70:4d:0c:32:03:34:7e:ad:71:5a:
c3:65:1c:48:2a:30:d4:49:67:75:cc:bf:6d:49:40:
15:91:65:6f:48:de:3c:7f:19:53:32:1c:e9:38:3a:
d9:6b:f2:cf:54:76:29:38:34:59:da:66:6a:35:56:
f1:03:e8:8f:71:27:b5:f0:db:d4:3d:c8:64:3b:9e:
77:62:dd:3f:6b:8f:9c:43:6f:6b:f3:c1:b5:91:2e:
65:65:6a:1b:8b:3c:45:50:ef:d3:6c:d0:93:81:8f:
7c:4e:be:f5:1a:f9:47:4e:4f:1f:43:bb:a2:79:e6:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D7:E3:BC:91:A1:D3:DE:5A:4A:C1:4D:ED:2E:E9:1E:D3:33:32:81
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a9:21:7e:d0:12:eb:16:cf:8b:22:7f:26:ce:b7:35:67:ed:
be:56:9e:10:19:f3:a9:03:42:bb:cf:38:86:a7:64:f2:2c:7a:
1d:bc:3c:c7:87:48:94:38:b4:2f:22:ff:e1:76:a6:5c:5b:d9:
50:b4:8e:ea:b7:54:57:51:3c:c5:d7:5b:32:49:3c:83:79:fc:
a2:c3:e7:28:aa:e9:e0:a5:60:ed:77:cf:84:b0:70:46:f0:6b:
b8:f0:32:ed:da:84:cd:6e:e7:b6:75:a9:c1:7f:ea:a0:c9:54:
dc:94:63:75:26:44:82:d8:97:a5:7c:78:33:40:15:b7:f9:03:
4d:f3:21:92:de:fb:a7:7b:62:78:32:19:5e:0d:7c:71:0e:6c:
42:d1:cd:74:47:1e:bb:2f:6e:26:68:7e:3c:a8:44:ef:63:6e:
4f:22:7e:76:b3:33:84:cd:0c:d1:e8:fc:af:1e:2e:76:c6:65:
63:53:f5:18:a6:f8:00:fa:18:a7:cf:af:a4:cb:5c:ed:c7:7e:
df:85:37:3d:8c:fe:ef:64:ac:80:a8:79:ce:55:81:2f:e2:f8:
cd:66:e9:0d:64:ec:ab:10:83:26:18:a4:79:ba:5d:d9:f5:7f:
85:f2:95:95:4c:2e:fd:8b:9b:1b:0f:55:b1:12:0b:5a:b1:aa:
ac:70:c5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:26 2026 by rpki-client