Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: 338PXuHVkSPDnbEZ7+yiDXiSyXAWnYb3S5TkHztSHVk=
Subject key identifier: 4F:3B:22:3C:85:F2:F3:E9:CA:1B:50:3F:25:1D:EA:7C:A9:5B:93:6B
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 019D2771DABB80F999D20DC5B4D519ED7459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 1246
Signing time: Thu 26 Mar 2026 00:01:06 +0000
Manifest this update: Thu 26 Mar 2026 00:01:06 +0000
Manifest next update: Fri 27 Mar 2026 00:01:06 +0000
Files and hashes: 1: hhB0IeJBwNyXofg4mPvSau-d9JU.roa (hash: rSR4VGaBwGTXWCnhcTMFNg3NGbcBK7CKNCSrlO5fp2g=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: tJOHUYeBZseVJSR5t/Ndp4xyeC5YX87GpmOnvwvO6y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:da:bb:80:f9:99:d2:0d:c5:b4:d5:19:ed:74:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Mar 26 00:01:06 2026 GMT
Not After : Mar 27 00:01:06 2026 GMT
Subject: CN=4f3b223c85f2f3e9ca1b503f251dea7ca95b936b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:ad:2b:49:17:a3:92:b3:3e:4a:80:ea:36:
95:0e:1d:06:e0:a7:ed:25:8e:ac:67:b7:6d:6a:20:
a1:f9:c9:16:52:21:b6:82:43:63:58:df:2c:f8:38:
08:d6:85:cc:6b:4d:c8:d6:06:c3:f5:57:15:4e:f7:
ae:9b:5e:63:85:ad:a8:d3:72:c9:30:63:07:e6:ee:
e8:b2:4b:e0:c1:ad:93:cb:9f:7c:a3:7a:85:83:13:
02:6f:16:54:62:7e:91:0a:46:55:b3:71:8a:8e:15:
fa:da:bd:e1:14:ab:f4:a0:74:b8:56:2b:8e:78:1f:
91:1c:6c:95:24:6f:85:01:61:72:2e:ad:6c:52:20:
32:34:62:df:f6:cc:e7:37:46:6b:9b:c3:10:92:c8:
91:28:8d:0c:ea:0b:0d:23:c8:39:03:91:66:46:e4:
39:6e:2b:b6:c1:2d:04:11:07:54:2d:fb:73:c0:98:
79:81:0b:75:c4:bc:4a:ba:f7:35:0c:87:00:59:d1:
2c:4a:0d:48:d4:6b:9b:a5:08:77:30:ce:6f:92:a4:
1f:44:67:93:b5:e9:c5:1e:10:83:05:93:0d:97:a8:
7f:a3:65:02:06:30:d2:e8:f8:c8:c7:ee:9b:bd:b8:
a3:e0:ad:df:31:15:a9:a4:50:30:8f:5e:3b:0f:f2:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3B:22:3C:85:F2:F3:E9:CA:1B:50:3F:25:1D:EA:7C:A9:5B:93:6B
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e5:e2:f7:d8:27:ab:ea:62:cf:3b:23:48:22:9b:e2:48:ff:
08:87:be:7d:4b:2d:52:66:fb:f1:c3:d2:09:92:bd:f2:54:bb:
10:be:b2:c1:e5:e1:52:ba:da:95:3f:8a:71:3e:e6:c7:77:14:
25:da:00:46:38:c5:e5:47:5c:f8:d3:bf:6f:c2:ef:5c:e5:3f:
83:77:cd:97:d1:dc:45:3f:50:b2:26:17:59:2c:cb:07:c6:46:
c6:bb:5e:fd:d2:97:f8:9d:39:86:0f:7d:8d:30:70:fa:53:79:
bc:8b:e6:85:9c:b3:24:27:b0:2b:41:9b:a6:e2:f2:e3:00:b8:
ce:72:2f:9f:74:3d:af:db:ba:f6:49:77:82:60:ac:b6:5a:cf:
e6:6d:3f:c2:75:1a:9f:35:24:b7:34:ea:e8:08:f5:ae:87:e1:
af:37:0f:14:06:62:50:86:6c:34:bc:de:98:7c:51:6b:2c:ee:
23:46:95:1c:cc:d2:86:16:d4:52:69:20:19:c3:41:ab:ab:cf:
fd:21:58:5d:28:22:72:1c:9b:8b:cb:80:a8:18:a2:9a:d7:a4:
ae:a5:80:95:fb:d5:71:12:71:dc:29:6c:c4:f2:80:ba:ae:a2:
69:99:21:2f:88:9b:69:45:e0:9f:98:78:ea:74:47:4e:d1:13:
a3:8c:bb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:45 2026 by rpki-client