Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: fGKLM4zFxZMH96txthEbYGBE2FRrGZ0OEO9HRXSJFM8=
Subject key identifier: CA:93:4F:92:FD:A1:A7:A6:76:AD:51:3C:C9:59:A0:F0:C2:7C:67:45
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 019D27A8E9B8FFE7A76C3BB3458B05424BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 08DD
Signing time: Thu 26 Mar 2026 01:01:14 +0000
Manifest this update: Thu 26 Mar 2026 01:01:14 +0000
Manifest next update: Fri 27 Mar 2026 01:01:14 +0000
Files and hashes: 1: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: kfoJgRdCc1Izhww6Ib07G78055Ay8bJ70gHzjNrsW88=)
2: ykn6ra4wP0urmcyUyxV1FWZ2Kp0.roa (hash: IJ1D7ZuY9/uNKyGnyBgDEp0dSpIFh5mPiRSScoZkO+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e9:b8:ff:e7:a7:6c:3b:b3:45:8b:05:42:4b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Mar 26 01:01:14 2026 GMT
Not After : Mar 27 01:01:14 2026 GMT
Subject: CN=ca934f92fda1a7a676ad513cc959a0f0c27c6745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:7f:74:61:db:1a:61:84:1d:12:52:fa:09:
96:5b:a7:ea:9e:35:e5:b8:1a:8a:f8:8b:ad:4b:03:
da:d0:33:2b:7c:fe:86:0c:12:51:1e:c0:68:95:43:
cf:b1:a7:9f:97:fc:23:df:07:5c:7d:5d:16:54:c5:
4d:3e:65:a8:d8:1f:3c:ed:91:cb:4e:ad:5b:01:9b:
62:fa:ac:ba:9e:d2:e7:c5:c3:79:ce:b5:a6:9d:c0:
50:3b:96:83:19:c6:19:c3:db:40:13:bf:fc:93:96:
eb:77:57:0f:72:f3:9d:04:ab:17:4d:c0:5d:f1:bd:
4b:e1:23:94:9c:ef:8a:53:81:67:ff:08:aa:29:58:
ed:fc:fc:d9:93:c7:68:b0:ea:38:63:43:d5:0d:90:
bc:84:64:02:ac:e3:38:a9:d8:e3:cf:0b:2d:7c:a9:
c7:a4:70:cb:ac:71:ac:da:5a:f2:4d:02:04:21:40:
10:b7:f3:ae:f7:e0:61:83:95:9b:ab:93:c5:53:a2:
8e:82:da:a9:b6:e5:11:5f:dc:00:10:be:05:46:76:
36:03:b8:48:ad:58:d0:06:60:94:15:19:79:a0:69:
a3:97:f5:2b:66:58:6b:14:7f:a5:39:96:72:12:0b:
06:03:11:e1:ed:6f:f4:05:b0:cd:47:60:fb:fb:06:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:93:4F:92:FD:A1:A7:A6:76:AD:51:3C:C9:59:A0:F0:C2:7C:67:45
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5e:96:ab:8e:41:e9:35:54:6c:a9:d1:69:05:1c:4d:76:48:
7a:78:bc:6a:aa:c1:8f:4f:93:cd:81:05:ce:8d:28:77:ee:f9:
5d:cc:ca:27:03:02:69:dc:b5:26:11:9f:29:d2:3e:ae:05:49:
3e:f4:2c:29:c8:56:9e:b4:c1:a5:0f:14:8c:04:4b:ac:4a:9b:
00:e7:3b:ee:e3:99:ae:49:66:80:a8:e0:bf:46:e1:70:93:10:
1f:61:1b:40:64:22:d4:2f:7b:ac:af:e4:12:8b:ff:d9:b4:8c:
64:36:31:c3:78:3b:ba:a4:b8:83:0d:5c:72:81:f4:39:75:b0:
4f:cd:20:95:8f:98:e0:ef:9e:e6:a6:32:f9:0f:a5:a5:aa:47:
58:c0:64:aa:0a:74:03:8c:28:b9:5d:de:e4:4d:4e:a8:bf:6f:
62:8e:a1:ed:72:25:df:c4:20:a2:82:20:3f:da:b1:fa:30:d7:
00:c1:3c:b0:cb:ef:19:78:d5:20:cb:fd:ba:24:51:f8:79:9a:
01:a1:2c:2f:b8:2f:56:f4:0c:ec:a6:4e:bf:e1:44:50:3c:9e:
f9:29:9a:8c:69:07:b1:0e:7a:0f:d5:a0:4b:1a:76:99:0d:4b:
27:48:e4:a0:2b:b4:73:00:47:1a:59:47:16:36:5d:c9:f3:0b:
d0:bf:69:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:38 2026 by rpki-client