Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
File: YxkpXTrafm6zKYRJYcqhACyqTYY.mft (raw, json)
Hash identifier: 42J+P7KF1E1yVZC9ppeatZPN6byXDZMVs9ycG010htk=
Subject key identifier: 31:02:47:7E:1A:6D:A6:46:06:40:E9:17:81:A0:92:59:60:E6:91:BF
Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
Certificate issuer: /CN=6319295d3ada7e6eb329844961caa1002caa4d86
Certificate serial: 019D273A8882D843021C6234A11A0C3CF303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
Manifest number: 0831
Signing time: Wed 25 Mar 2026 23:00:40 +0000
Manifest this update: Wed 25 Mar 2026 23:00:40 +0000
Manifest next update: Thu 26 Mar 2026 23:00:40 +0000
Files and hashes: 1: YxkpXTrafm6zKYRJYcqhACyqTYY.crl (hash: aiRrNkc+PMIqaxgb5COmsjOm/a0HaYxSSAvhkzb0KuY=)
2: q-dlc0RnKGXQQKCzBekmdoQdLBc.roa (hash: BVWF+eiynzBU7NWIb18jSV9kqUVVHyUBCS+BjOc+ZKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:88:82:d8:43:02:1c:62:34:a1:1a:0c:3c:f3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86
Validity
Not Before: Mar 25 23:00:40 2026 GMT
Not After : Mar 26 23:00:40 2026 GMT
Subject: CN=3102477e1a6da6460640e91781a0925960e691bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:d3:7f:49:bb:cc:8d:0a:6e:36:7f:82:79:
9a:e6:c4:a9:50:87:65:bb:0f:b7:e8:56:58:b7:ed:
10:79:3f:30:d9:16:a4:28:fd:7f:3a:90:d7:ab:16:
05:0d:c3:f7:ad:72:4c:3c:45:54:18:f5:60:fe:84:
31:88:5b:47:58:ac:98:2f:68:af:a6:de:c8:b9:e5:
a4:96:6b:fd:d8:5e:dd:bd:44:18:a9:c8:89:0b:5d:
2d:fc:22:67:cf:83:ad:20:3b:d8:dd:62:05:b9:a8:
56:dd:6a:f6:6c:0c:77:9f:77:d8:30:ef:11:4d:1b:
92:62:60:02:78:cc:98:d4:fe:98:c5:21:00:31:f3:
8b:e5:00:4a:38:db:02:ee:31:03:a6:ba:33:22:be:
77:c5:7e:cc:08:3b:ce:c4:ba:3a:36:69:61:1b:45:
99:cc:26:72:d7:96:53:9c:a5:ee:87:64:2c:cf:dc:
ea:6b:26:99:2d:5c:a9:c6:e8:ce:9c:88:29:bf:be:
05:b6:fb:48:fe:5e:a0:71:c7:2c:4d:85:fe:4b:87:
a3:01:94:a0:5a:2e:66:29:83:00:a9:97:00:67:01:
f2:af:4c:67:39:8f:af:68:26:89:20:aa:19:2b:ab:
bf:ce:96:09:65:6a:d8:64:4a:68:76:31:0f:f7:da:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:02:47:7E:1A:6D:A6:46:06:40:E9:17:81:A0:92:59:60:E6:91:BF
X509v3 Authority Key Identifier:
keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9d:e5:e1:51:bf:6b:12:98:04:3b:c6:04:3b:8c:2a:c6:0b:
59:a2:9b:1c:fa:9d:07:c8:e7:17:5c:43:0d:c0:a7:0d:9d:21:
f9:0e:5d:93:b6:84:90:3e:cf:49:7f:08:7a:94:6c:e1:3e:6a:
c5:48:98:00:c4:d7:33:c2:5d:7e:0d:dc:47:4a:f1:10:ef:05:
f5:99:b0:d6:78:80:97:6a:b7:6f:30:9d:ba:d5:59:0e:e9:8e:
85:47:21:c5:95:5e:be:f7:9e:58:f1:ce:5c:05:b7:39:a7:55:
0d:34:61:d0:da:76:97:0c:da:0a:8e:5e:95:b6:0c:c1:c9:1f:
4f:a4:e0:9d:39:e5:ff:ec:ad:42:21:20:a1:90:cc:d2:76:30:
25:dc:b3:3b:fd:18:aa:6e:e6:e7:67:5b:81:2d:38:1f:0f:80:
21:1e:44:c6:e4:87:e2:af:8e:73:b7:1a:8e:e0:f5:8b:81:be:
b5:e1:58:bc:ff:00:33:29:35:f9:ca:73:41:d4:77:f9:b1:93:
c1:de:8f:27:0d:93:ba:89:26:17:d3:0f:43:b9:3f:61:b7:59:
17:5f:c3:2b:20:7a:c3:16:9c:ed:f7:33:f8:07:7f:be:58:3f:
97:ea:f4:53:f3:d8:db:63:f7:2a:e6:c1:01:1b:3b:8c:b6:a7:
56:6a:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:56 2026 by rpki-client