Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: rigLT1vdvRq+/giUl0qMrjRru2lYBqAMFC8IPo29iVQ=
Subject key identifier: A7:1A:E9:9F:1B:EA:C0:F0:E3:AD:70:F0:4D:E4:14:E7:CC:1D:B7:8C
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019D25F181D5BE1372FB9B7ED8A3F62F597F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 17:01:17 +0000
Manifest this update: Wed 25 Mar 2026 17:01:17 +0000
Manifest next update: Thu 26 Mar 2026 17:01:17 +0000
Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=)
2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=)
3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=)
4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=)
5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=)
6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=)
7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=)
8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: mST/jQ4braCTn3Q1TEUP4aGnPBIBW+gQ4HsiMAyGneU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:81:d5:be:13:72:fb:9b:7e:d8:a3:f6:2f:59:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Mar 25 17:01:17 2026 GMT
Not After : Mar 26 17:01:17 2026 GMT
Subject: CN=a71ae99f1beac0f0e3ad70f04de414e7cc1db78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:dc:9a:21:64:2f:d3:37:9b:e7:26:59:82:
fc:cc:51:ec:62:ec:96:7e:f2:7e:5a:ab:fa:57:20:
72:a8:c3:53:a4:6f:b8:c2:17:c6:5d:1f:83:94:f0:
f5:8f:ea:4a:18:ea:06:cd:b1:55:35:c6:4c:14:a9:
92:89:a2:7e:6d:3d:6e:f0:fa:1c:c8:4b:89:f6:c9:
ff:6c:39:72:fc:2e:8f:39:00:12:e7:6d:32:f5:f1:
8c:00:6b:a9:92:82:54:7e:50:ce:d3:c1:9a:01:69:
ae:31:20:3e:7f:62:fc:10:42:51:e6:b2:9b:2c:d1:
1a:75:bd:07:f7:3c:54:0c:b7:31:8c:95:3f:f8:3a:
56:4f:51:ed:49:9f:fe:97:fe:91:31:94:67:da:3e:
ad:93:5b:70:9d:8e:95:9a:fa:76:f8:e0:a0:ba:1f:
40:3e:9b:91:98:2f:9f:b0:14:aa:2d:e2:81:23:51:
f5:11:0f:16:1e:0e:ce:63:7f:3c:b3:19:75:24:df:
80:23:85:df:3b:36:5b:ba:1b:d6:ff:4e:db:3d:88:
16:52:2a:ed:b9:9d:a6:13:3f:82:a3:c2:cb:94:b9:
cb:fd:54:2e:9c:27:c2:66:f2:1d:49:82:e7:da:99:
14:c6:1f:b7:8c:88:bf:e3:e1:9f:16:f1:1f:2a:c8:
95:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1A:E9:9F:1B:EA:C0:F0:E3:AD:70:F0:4D:E4:14:E7:CC:1D:B7:8C
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b5:b6:a9:df:db:2c:8f:77:b4:0d:4e:04:fa:69:8c:44:19:
0d:cd:b3:75:14:ce:40:46:6b:fb:85:f1:1a:95:76:9a:53:23:
49:f1:e7:e9:d7:bd:bf:6b:62:4f:f1:6c:c2:b4:bd:04:a7:eb:
5c:aa:d6:02:bd:e4:76:c0:e7:45:bb:ee:e9:3a:57:6a:fe:10:
91:be:26:db:46:ca:52:1f:2f:4d:cc:41:28:86:32:d1:b2:82:
ed:dc:77:1e:4f:cc:fe:4f:1c:45:4c:38:61:e9:b5:2b:3d:0e:
0c:ea:9b:c9:a4:c3:60:b5:44:a3:92:06:4b:76:32:0d:57:ce:
6a:b1:97:a0:6d:f5:2c:f7:74:c6:f8:89:4d:0f:8e:8c:63:37:
a1:8f:c8:a1:00:87:ac:11:20:64:5f:d3:40:a2:ac:1b:ff:e9:
42:9f:81:6f:d0:ed:c0:86:3b:b9:b6:19:d8:be:47:e2:60:7d:
be:6f:2d:37:da:08:45:39:5a:7e:75:77:a2:1a:b9:d7:cc:2f:
04:ec:3a:a7:4b:3e:9b:c7:1b:07:45:2e:21:dd:42:3f:fd:a7:
4a:ba:ef:ce:92:6a:5e:44:f0:14:ce:91:73:fd:6f:ae:7f:63:
10:78:0f:c8:26:91:e2:43:2e:8f:5c:3a:3d:3d:e0:9f:7e:40:
2b:56:17:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:42 2026 by rpki-client