Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: q1o6uodtWq6+8+HhliZVqT5sYbabWR/iOQG3SML/Rl8=
Subject key identifier: 79:86:15:3E:2E:E5:82:6D:F9:9F:7F:90:12:1F:BC:36:1C:35:6D:5D
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019D2A051817A656E5A68606DFF29E2723C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 1172
Signing time: Thu 26 Mar 2026 12:01:09 +0000
Manifest this update: Thu 26 Mar 2026 12:01:09 +0000
Manifest next update: Fri 27 Mar 2026 12:01:09 +0000
Files and hashes: 1: BWIxZ78uKyw4vY-xhhwszjKA1Gg.roa (hash: DJhZH5ULKuTFx2qZjif4i5VCgjFcTYiLUvWNXLkT1QQ=)
2: GILkzrnW-WLXBiCMka03WJecbH4.roa (hash: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: K5Z+ooDAKaypUGhgnah+ZwctNFM5i8fVmdbF5TiOGYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:18:17:a6:56:e5:a6:86:06:df:f2:9e:27:23:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Mar 26 12:01:09 2026 GMT
Not After : Mar 27 12:01:09 2026 GMT
Subject: CN=7986153e2ee5826df99f7f90121fbc361c356d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:b7:b4:26:e3:06:5d:d0:ad:27:44:48:3c:
13:bd:fa:6e:62:2c:75:f4:9c:db:69:91:8f:53:9e:
4e:6b:9e:6e:93:a7:ea:1d:c5:02:2d:62:f4:6d:f1:
42:3c:3a:93:59:cb:fe:70:2f:58:cb:c6:9e:95:18:
b1:06:70:df:fe:8d:3a:ed:d0:6f:b5:e7:8b:eb:89:
05:e7:3d:e1:56:6c:ec:ba:81:6a:0e:e8:22:85:31:
da:4a:4a:94:fd:35:fa:41:0a:fa:3c:3f:7b:c1:c1:
a2:b8:11:07:24:52:b4:e4:23:aa:f6:c2:97:11:5f:
3b:4e:b5:0b:2a:b5:23:05:e5:d2:ff:a4:d5:72:d0:
28:9c:63:01:c5:06:1d:c9:7a:d9:2c:bd:7b:21:e7:
e2:88:4d:59:d6:20:f5:4b:29:4c:25:a7:3e:f5:df:
1a:71:b7:4f:1b:49:66:de:5e:4b:cb:98:bc:b9:08:
34:4f:ea:1a:dc:24:22:28:0f:ee:4e:5a:a3:cb:d7:
b8:ed:bf:ab:3d:e9:94:af:bb:94:1a:1b:fa:f8:51:
52:93:25:46:ae:76:88:34:a3:f1:dc:8c:d2:cb:59:
74:f2:a7:f0:00:d9:ac:72:9f:3f:29:23:98:0b:90:
95:9f:8c:83:a4:20:b2:0b:77:0f:24:c2:4a:ea:66:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:86:15:3E:2E:E5:82:6D:F9:9F:7F:90:12:1F:BC:36:1C:35:6D:5D
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c4:56:5f:a8:f0:1c:86:64:1a:49:86:87:b6:15:90:d2:f9:
c6:61:8e:83:c7:07:6a:fc:fb:40:3e:fd:63:f3:cc:23:40:57:
22:f5:92:e1:09:43:74:c2:37:ad:28:98:15:3b:96:90:92:ea:
b7:d5:46:07:c5:15:ce:ea:2b:08:22:fb:ca:3e:0c:38:ab:2a:
a9:2e:d9:5e:46:49:b2:82:2a:b3:8a:05:c4:ad:71:7c:60:3f:
b8:dc:f9:64:59:39:54:aa:01:a2:72:37:1d:2c:a1:e9:01:ab:
e1:dd:87:9b:f0:0f:b3:be:86:25:54:ed:c1:2f:02:96:34:da:
a8:27:98:4b:24:f4:93:25:a3:ae:6a:f1:06:05:0c:ff:fb:f9:
34:b7:c0:e2:ac:8b:38:8e:8f:1b:42:97:2a:4b:d6:93:09:9c:
11:cc:4a:b9:a7:ca:f6:86:a0:fc:75:f3:d6:1e:a9:9f:3b:0a:
2d:c4:96:8a:9c:49:42:18:2b:5f:a6:5c:a4:12:fd:d4:d5:92:
73:f4:ab:d6:b4:e2:25:7c:a4:f1:22:51:e1:ed:f4:08:b0:0b:
96:a9:16:8f:18:fa:02:b0:2a:b5:1d:b0:b8:45:97:82:87:d2:
43:60:66:75:fd:b5:b4:04:f9:aa:8f:61:7f:4f:a9:f3:f0:32:
7d:78:cd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:10 2026 by rpki-client