Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File: ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier: BJuZ2dX0vmloMa9ugUCsPz92APWnw69gFmIhD6kQNXU=
Subject key identifier: 4E:C7:89:58:30:49:C4:BF:C7:9D:BE:D1:C0:A6:FA:D2:69:B9:0E:C4
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 019D284D9C628ADC340D15D5833C72CAEC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:08 +0000
Manifest this update: Thu 26 Mar 2026 04:01:08 +0000
Manifest next update: Fri 27 Mar 2026 04:01:08 +0000
Files and hashes: 1: RbXFao0zNfSbtJ3sUZUKCiS9_Sc.roa (hash: H36onPAZgGkM8Gj/4vPHfKYw673MWHLo+rCT27hgkEo=)
2: hDlDQXPia_LVcBGYXeJfZh4MgHc.roa (hash: MtZoYfBZrAxoqrM2ef+MiwlnVce8K6//q+/J8AqG4MA=)
3: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: /iRSolCOgkoXT+1fg+nnSQWiuDEh5GKdNa8Ms0XGMyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:9c:62:8a:dc:34:0d:15:d5:83:3c:72:ca:ec:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Mar 26 04:01:08 2026 GMT
Not After : Mar 27 04:01:08 2026 GMT
Subject: CN=4ec789583049c4bfc79dbed1c0a6fad269b90ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:d4:5e:0a:2b:80:0d:09:e2:d4:dc:35:10:
e4:9a:b0:3b:a1:d0:7b:44:f4:10:4f:38:8a:45:28:
06:be:9a:cd:f5:41:a2:5c:23:0f:b7:40:a4:a7:02:
25:80:80:fc:87:ea:39:68:7b:80:57:25:48:8a:a0:
c6:14:12:27:0e:ff:7f:9f:70:8f:77:8b:18:cd:60:
26:19:4a:80:2f:c4:d7:16:03:d6:b7:97:69:e0:4d:
c3:9e:b5:f5:84:62:3a:f5:c8:4c:3c:93:54:1b:7c:
79:e2:d6:8a:8f:07:27:ed:b0:62:36:40:d0:e2:74:
46:50:da:01:fc:37:d7:c8:07:41:33:d7:fa:80:b5:
99:8c:fa:2d:4b:a0:8d:a6:79:54:94:65:db:f7:53:
92:cc:72:74:b8:68:0d:e0:bd:1c:30:f1:76:78:af:
44:d0:79:34:19:e1:f1:97:9b:52:20:77:98:f8:e8:
b8:90:e7:5b:fb:f1:cd:5c:3e:41:2a:2d:a8:63:80:
e3:19:1d:71:2c:c9:fd:d6:9e:7c:59:95:1c:07:dc:
8e:90:33:c3:7b:f1:58:ee:e7:cc:76:6b:c7:25:5a:
28:b4:b1:06:a0:d8:de:84:4b:6c:8e:6a:a6:4a:3d:
21:3e:bb:ae:30:fc:59:b2:d0:d1:07:0e:3f:15:c1:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C7:89:58:30:49:C4:BF:C7:9D:BE:D1:C0:A6:FA:D2:69:B9:0E:C4
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fb:1a:58:3f:0e:29:36:2a:3a:c6:ad:53:14:a6:a9:ab:a1:
cf:20:38:f4:be:4c:ac:dc:69:b2:80:e6:55:4d:3f:73:06:20:
79:b5:dc:91:90:cf:49:61:f3:a5:88:d7:b9:d5:d5:9b:f1:d1:
04:ff:8a:05:ee:23:21:26:f8:ca:a0:0c:23:f6:09:e0:28:a4:
20:19:26:8f:e5:97:e2:f9:09:ef:dd:02:c5:2c:d0:fd:c0:1e:
d2:08:e9:c4:be:55:39:da:f9:e6:08:02:55:fe:c7:c0:8f:fb:
ef:57:de:9f:83:9a:a1:03:2a:ce:36:d3:d0:6a:f6:5f:26:a2:
0d:60:d9:36:33:45:d9:58:cb:54:aa:df:b7:39:5d:cf:f4:12:
99:f5:80:14:87:ed:cb:1e:9d:13:8e:fa:7b:58:d5:d2:53:2d:
5f:d9:b1:7d:76:97:c7:95:e1:c2:18:0f:e8:d4:38:9c:c5:41:
71:89:ac:8f:31:81:9f:9c:69:4f:e2:1a:f8:1c:a2:42:7a:b0:
03:e3:b1:c5:c5:b6:f2:7e:ad:99:df:58:5c:0f:13:c9:c6:04:
26:69:57:22:9e:af:fd:c3:76:f4:c9:93:1f:f9:b1:43:0b:a6:
4a:dc:71:a0:c7:62:42:71:f8:7e:4c:c1:83:78:3b:1b:7d:8b:
da:dc:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:17 2026 by rpki-client