Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File: Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier: 23S3AAx+4l1/KBocyWKp73bTPO802cYBm43Jx/8cQK8=
Subject key identifier: AA:1F:20:EC:67:16:7B:EF:48:36:6B:5D:15:E0:E6:70:F5:45:E5:02
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial: 019D2696599C17FD71A0BD5DD4C9807DFDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:01:20 +0000
Manifest this update: Wed 25 Mar 2026 20:01:20 +0000
Manifest next update: Thu 26 Mar 2026 20:01:20 +0000
Files and hashes: 1: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: ARBDu2jtsSsYdMSqiEGp+WZQM7yVKYsQrE3f0OKlVsA=)
2: ovYaAbe26D-xe8lCheafK_LrtWY.roa (hash: 6eO0/Dtd7168WHT10a4JQBuUdq1q7SgJYtnU/qwqLfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:59:9c:17:fd:71:a0:bd:5d:d4:c9:80:7d:fd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
Validity
Not Before: Mar 25 20:01:20 2026 GMT
Not After : Mar 26 20:01:20 2026 GMT
Subject: CN=aa1f20ec67167bef48366b5d15e0e670f545e502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:0e:8a:26:07:4a:dc:46:0d:d7:fd:46:66:
05:18:49:30:7f:b8:7a:cc:ca:ef:92:10:9f:99:de:
db:18:7e:14:ca:6d:36:3d:ac:b7:e8:9c:17:4a:47:
f7:b3:01:b5:a6:88:7a:0f:5f:e4:88:78:52:02:8b:
ce:8c:c0:2d:5a:d1:bc:1c:ed:54:0f:59:dd:fc:24:
29:0a:43:94:3f:75:67:46:cd:a8:fc:3e:85:7a:fc:
99:0b:be:68:0a:25:07:c9:54:75:8e:44:fa:c3:a1:
e2:04:64:e0:a3:9a:80:84:07:5d:74:4c:e2:df:45:
be:04:d0:63:95:e1:f0:bc:6d:be:a3:20:f4:be:b1:
fa:af:cf:12:47:63:25:80:f2:49:cc:06:1e:5d:be:
ed:da:5a:b1:63:eb:5b:6a:b9:41:31:1f:86:fb:72:
9b:34:67:b4:c2:1b:8c:4b:f4:76:c8:90:e7:b0:a6:
0c:4a:eb:0f:bb:d5:4f:5f:ad:59:a6:82:b5:da:5d:
bc:64:0c:d3:e9:b1:27:20:a8:46:78:9a:22:01:fb:
9f:4f:2c:73:b5:8d:89:f1:d4:5e:90:00:95:5e:94:
01:50:75:a0:0e:97:d6:11:25:42:59:67:27:09:2a:
44:16:5a:a9:22:5b:50:6f:8c:0c:2e:de:f1:0c:82:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1F:20:EC:67:16:7B:EF:48:36:6B:5D:15:E0:E6:70:F5:45:E5:02
X509v3 Authority Key Identifier:
keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:62:ea:cc:f0:05:e8:cc:14:3f:df:73:4d:6b:4a:05:cd:34:
38:fd:64:16:f7:5d:cc:ef:98:52:cf:25:ce:58:0c:08:d0:0f:
f9:b3:ea:22:22:36:75:f3:b8:88:54:65:fc:07:1c:bf:61:67:
c4:dd:b8:da:88:62:1b:57:7b:08:e5:ea:f9:1e:9a:be:08:90:
58:be:30:8a:3a:78:08:ab:d2:cb:99:ef:1b:8c:d1:b2:85:19:
2e:d3:b5:45:8b:9b:1e:b5:0a:f3:6d:54:ff:f3:f4:11:81:65:
fa:de:f4:2b:a2:6d:e9:9c:94:fa:0a:e5:a1:45:07:99:4b:50:
d1:06:66:79:87:04:93:c8:3b:7f:c1:b3:44:38:05:45:7f:b9:
c9:20:df:e2:5a:68:60:ad:1b:86:c1:78:01:6c:1c:d8:64:b9:
cd:39:1a:54:60:91:52:7d:47:f0:3f:79:b8:20:f6:45:2b:22:
86:ca:81:9b:2e:9b:ac:a7:a2:9a:36:71:09:78:bd:17:ab:52:
0a:fb:d9:04:3d:51:35:3e:b4:5e:97:d6:0a:81:40:7c:be:fd:
22:49:91:d3:e2:a5:fa:9c:14:c4:9c:1b:b8:05:82:ab:13:58:
9b:a7:1e:c0:1b:63:48:9a:90:04:3e:61:1f:ab:e5:83:6e:34:
9c:68:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:05 2026 by rpki-client