Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: 0we7aX/7+rjCOpxi1RfKUUw55qzCqYhCcqJJK5vCQ7k=
Subject key identifier: 1D:27:CA:0B:3A:91:76:ED:9D:4D:6C:54:B3:D3:58:72:6B:B4:8E:F8
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 019D26CD58F8FF018131EA037D560A20F4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 10A7
Signing time: Wed 25 Mar 2026 21:01:24 +0000
Manifest this update: Wed 25 Mar 2026 21:01:24 +0000
Manifest next update: Thu 26 Mar 2026 21:01:24 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: xZHM62HQqtS6xi4iTIqde/swBoBGvUH+cLtkwTj8tLU=)
2: buEP_tZTxcCY5cv35wHnd5QJtA4.roa (hash: kDd7vjY1Gmajtb+yM1iA4kXpv1+b295rNuhM3eEotP4=)
3: cu3LpBG8kS_4KP69qmFhIuC6yn0.roa (hash: +A0QFPa6rFKeurJR0BtJfs29ZpJr1qidekf5t2vt70c=)
4: iwCms-jh7sNOnDjyiQ87SCaskPM.roa (hash: F9m0OaxudVEa/uHDWRuOEKekT6jQQYP93RpjR2bYjX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:58:f8:ff:01:81:31:ea:03:7d:56:0a:20:f4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Mar 25 21:01:24 2026 GMT
Not After : Mar 26 21:01:24 2026 GMT
Subject: CN=1d27ca0b3a9176ed9d4d6c54b3d358726bb48ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:8e:2d:59:a0:7e:7e:20:12:52:9c:2f:dc:
6d:bd:d8:25:50:77:76:21:40:90:4d:c7:d7:b2:d1:
92:ab:c6:03:c6:f0:ed:c5:b7:34:1d:b0:d1:a8:9f:
df:b1:39:be:00:8e:c3:41:87:2e:0c:ed:20:dd:26:
c4:80:df:53:b5:c1:16:9f:23:80:a9:5d:0f:d0:28:
04:67:34:35:3f:58:ee:d1:9a:a8:3b:b8:77:f4:85:
44:76:8d:d4:28:da:48:24:15:17:41:9e:20:bf:a8:
07:5c:bf:6c:13:08:59:db:63:b9:c8:29:80:4c:ee:
d1:2c:fb:fb:8f:17:20:8a:58:f6:11:60:b9:57:a6:
81:da:bf:a8:fc:6f:80:83:4e:6c:91:fd:78:91:29:
9d:b4:1b:03:77:13:e5:95:ce:93:49:f5:86:dc:3b:
30:2b:d3:5d:f3:35:4b:36:27:ea:99:66:04:ca:85:
36:15:03:12:dd:09:c3:b6:08:e7:0c:8a:c7:75:ba:
c2:d5:58:82:8c:7c:ee:5f:b0:6c:1b:65:0b:a4:c7:
fe:e9:6e:5e:c6:95:f2:a2:b3:b9:02:17:a3:cc:5c:
b4:ed:e2:ec:db:56:52:81:d6:11:7a:60:ec:e0:18:
45:49:98:a4:a8:05:0e:88:85:91:54:8d:b3:7c:a4:
91:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:27:CA:0B:3A:91:76:ED:9D:4D:6C:54:B3:D3:58:72:6B:B4:8E:F8
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8a:81:39:78:d5:b3:a9:1a:12:42:29:f4:bd:2c:87:72:66:
de:40:1d:25:86:18:ab:85:51:fb:67:af:3f:ab:b5:32:83:59:
a6:b1:a4:1f:2a:d4:e7:3f:26:d1:5e:97:28:1e:57:df:a2:94:
4e:30:ee:66:a3:e3:91:2b:3f:49:b9:a7:3d:55:b1:a7:c0:11:
4d:0f:47:0b:5b:c7:d7:29:c5:f6:03:4c:2d:5e:c2:53:77:c8:
96:5c:ac:4c:0a:2d:46:f4:fd:eb:44:3e:e3:56:b3:e3:1c:84:
43:bd:8a:3c:d4:df:fc:58:56:32:6f:29:ec:81:cb:55:6c:65:
a1:2a:f8:6e:7a:16:8c:06:d1:fb:67:9b:44:8b:84:d7:67:bb:
ff:b4:32:09:dd:8d:8a:d1:7d:ed:7d:64:be:28:12:b9:bf:31:
cd:d4:8a:17:8c:57:85:f3:db:19:69:9c:19:30:c1:a7:ec:77:
0d:30:89:63:4d:f9:e3:35:50:f9:f5:75:43:72:f9:1a:f8:c2:
7f:45:4e:2b:cb:95:61:14:ec:c3:17:10:8e:02:32:0c:94:12:
a5:48:1e:e2:11:44:c4:03:fa:93:51:24:11:16:26:7c:d4:dd:
9e:64:55:66:54:79:58:9b:98:cf:08:a1:48:2c:43:eb:84:39:
e2:08:72:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:52 2026 by rpki-client