Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier: cWtKLbA4MCwVb+0owfMSWjF5oNeJyngEwSPsI9lCqyg=
Subject key identifier: 6A:3F:6D:75:53:C1:FB:94:1F:BC:22:76:11:37:FD:B6:14:09:80:3F
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial: 019D251607EBD71BE04A51A600450FF59839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number: 0CDF
Signing time: Wed 25 Mar 2026 13:01:33 +0000
Manifest this update: Wed 25 Mar 2026 13:01:33 +0000
Manifest next update: Thu 26 Mar 2026 13:01:33 +0000
Files and hashes: 1: E2zzXQ54xG7WLQ4EAWvDS5mcEy4.roa (hash: 1CmVUeU/gi0IzJZ7FqgYWAYmrsykqbvWe2Uux9ESnfc=)
2: M16a-01DtEnUChbTQJhjr1Iefi0.roa (hash: MvFHVj8+o4PtyZlfLnoWLUlGFyHMzdje5B5jzpVV+ao=)
3: fYFb1Y-NrescEZS13kBhzxAZwCo.asa (hash: PK8fg+eevsgYRUzK5CVwRm3AD9wujkCIUbycGA1SZNY=)
4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: 1T2T37AUXfjViKXLWhUKyxoqutWZuK1I1HhP7buom7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:16:07:eb:d7:1b:e0:4a:51:a6:00:45:0f:f5:98:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Validity
Not Before: Mar 25 13:01:33 2026 GMT
Not After : Mar 26 13:01:33 2026 GMT
Subject: CN=6a3f6d7553c1fb941fbc22761137fdb61409803f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:9b:aa:36:df:29:f0:6b:02:81:a1:16:b4:
d1:be:99:1f:60:9c:17:f7:08:ab:b2:6c:40:4b:e1:
47:f2:dd:86:c8:68:7b:1b:b0:5f:38:7e:ef:e6:ce:
c6:4b:55:08:66:32:bf:b7:c3:0e:dd:e0:4b:54:21:
2d:c5:68:68:47:2d:ae:d7:e0:49:b3:36:c8:08:3f:
1a:75:50:0a:14:e3:8d:21:83:94:03:f9:94:e3:05:
74:1b:a6:c2:ee:34:bb:11:65:fd:a7:a6:8f:f2:f3:
ea:9d:8f:0c:db:82:63:00:98:fe:d7:14:9a:a5:d7:
08:28:bc:eb:82:c3:70:49:58:e2:cf:33:11:ce:10:
41:d8:88:0c:4e:44:8d:f4:76:b7:2e:22:19:9c:69:
5c:8a:8c:85:b9:a8:72:e2:f8:a3:5a:b7:f1:ec:5e:
57:08:77:d8:87:b0:a7:91:04:ce:f8:22:59:bf:b1:
6b:8b:99:c8:fc:b0:05:04:1a:89:40:86:72:ef:23:
82:06:3a:f5:08:65:4f:4f:57:1f:66:9c:dc:26:8e:
60:0a:bf:cf:10:4d:93:55:e4:fb:66:aa:66:2d:2e:
82:99:36:69:f2:5d:e6:9c:73:6d:37:d2:8b:97:fc:
bc:27:82:69:b9:20:07:bf:20:a8:de:16:68:c5:af:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3F:6D:75:53:C1:FB:94:1F:BC:22:76:11:37:FD:B6:14:09:80:3F
X509v3 Authority Key Identifier:
keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:95:af:85:9e:f8:43:96:a7:39:10:64:34:64:79:24:4b:ec:
7a:33:c3:dd:6d:c9:44:17:53:7e:3d:8a:de:a7:7f:d6:cf:f5:
de:47:44:3e:d1:da:18:45:38:dd:15:f8:0b:e1:80:d5:42:29:
c2:9c:fa:a5:fb:c5:31:af:81:58:8b:75:b8:1d:c0:d9:f7:8c:
58:b2:10:02:ce:27:7b:d2:ab:02:34:00:ee:09:f2:37:6a:b8:
12:9a:03:7d:88:70:10:4e:a0:f4:60:0a:dc:4d:28:f9:5c:56:
bd:48:b3:72:03:18:84:4d:b4:c1:5b:8f:5e:c8:88:fa:4b:08:
ea:d5:a9:de:d1:44:f7:2a:29:37:6c:f0:04:05:2e:42:e2:a9:
5c:30:28:75:8e:e0:6b:fb:ab:91:be:1a:54:9c:54:5d:a9:df:
a2:22:3d:82:94:be:12:1c:55:ea:6e:2a:4c:80:dd:2f:d1:28:
8e:a7:a2:cf:9a:0f:62:ef:ff:eb:27:08:90:a3:bf:23:67:a8:
88:c1:55:f0:ce:a2:55:9a:8c:06:11:bc:21:f8:a2:f2:59:bd:
6e:b8:3e:b8:1d:11:37:c8:88:76:1c:a9:d0:fb:3c:96:9c:f4:
70:5c:9f:b0:b9:fd:fb:4d:88:ed:fd:c9:86:4f:f0:75:08:67:
44:48:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:44 2026 by rpki-client