Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier: horAiDYa0LWhvSTYTdAqjM9dH66M1Kx7frSv7iavoNE=
Subject key identifier: 7A:DE:01:C3:76:00:35:94:7B:41:40:C2:FB:29:34:2F:DE:F3:41:5E
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial: 019D28F30C187F31C6633FFA39EC2AF8D1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number: 104C
Signing time: Thu 26 Mar 2026 07:01:50 +0000
Manifest this update: Thu 26 Mar 2026 07:01:50 +0000
Manifest next update: Fri 27 Mar 2026 07:01:50 +0000
Files and hashes: 1: 7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa (hash: Ku59KYA/bpOTiSrNCRzEUdSrtiwxD1BQ8G4rzI5+xwk=)
2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: AvFGhPjAZMwFi8KKw+c6eynlt+7WAs3jXL+WRpHNVcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0c:18:7f:31:c6:63:3f:fa:39:ec:2a:f8:d1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Validity
Not Before: Mar 26 07:01:50 2026 GMT
Not After : Mar 27 07:01:50 2026 GMT
Subject: CN=7ade01c3760035947b4140c2fb29342fdef3415e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:f3:7a:c2:57:47:0c:7d:30:bc:fe:f8:a0:
e5:7c:96:78:1b:86:9a:ab:03:fb:43:b6:ca:91:20:
7c:5c:93:78:7a:5e:f4:8f:6d:31:d0:1b:91:32:bd:
bd:c8:29:cd:5e:13:89:98:f0:21:39:e4:4f:c6:89:
e7:7a:1a:af:ee:97:55:7e:a6:06:f0:1e:8d:7e:08:
e2:0e:98:00:27:02:5b:f5:9c:0d:27:fc:1e:45:ee:
2e:88:fd:42:90:2f:f3:9c:1f:7c:4b:5b:ca:74:9a:
e8:9a:64:4a:9e:6a:3e:16:ac:7b:44:f6:ee:dc:66:
b5:e3:df:31:4f:4b:7c:b2:6d:ca:d0:d4:9b:39:e6:
de:3d:0e:11:5c:d6:8a:3a:27:dc:a6:1d:15:f5:38:
ee:29:a3:9c:48:44:57:fa:06:f5:ff:43:cc:3a:d1:
dd:d4:e1:af:f0:fe:10:73:c2:77:63:70:47:db:24:
37:70:49:dc:3b:bc:c8:01:5d:54:51:68:61:7f:5c:
af:50:4a:b2:fc:88:04:34:e6:25:a9:f0:65:d9:f0:
af:d8:8f:b9:70:40:02:dc:26:f7:22:1f:8a:7a:37:
15:f3:44:7d:0d:9b:db:8b:79:09:56:26:16:47:3a:
57:9f:ff:42:81:6d:34:d5:64:03:22:f4:6a:28:8a:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DE:01:C3:76:00:35:94:7B:41:40:C2:FB:29:34:2F:DE:F3:41:5E
X509v3 Authority Key Identifier:
keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b1:b2:3d:b1:7d:d6:c9:a6:ec:c4:e9:20:c2:79:c5:12:21:
5e:6f:c6:9c:3a:e2:db:23:24:1a:d3:8f:60:51:df:21:77:a8:
23:81:fd:82:a3:04:0b:f9:e7:19:e0:db:b9:a6:c2:5e:63:b9:
1c:ca:3c:c3:3d:6c:12:28:83:ff:c3:ae:c1:04:1b:96:df:2f:
52:a7:85:15:5c:9d:a6:a9:f9:15:a5:c3:59:59:83:f3:05:e6:
71:7c:d2:fd:0b:50:eb:c3:1b:55:77:4c:26:92:06:2f:8b:2f:
4a:2b:db:7b:a0:4d:85:ed:b0:3d:1a:2a:51:30:21:15:5d:13:
40:36:fd:0b:0d:0f:9f:eb:2c:93:13:29:eb:e8:5e:17:de:b6:
d5:4c:0c:92:e3:d6:d6:0f:21:b0:97:1b:8f:dc:71:ce:cb:cd:
2e:d2:5e:cd:3d:53:5d:d3:4f:f4:92:cb:05:db:5e:79:6a:19:
f7:fa:56:56:45:1d:71:fb:e6:8c:a0:3d:9c:4b:19:21:f3:51:
92:ee:c3:65:c9:bf:11:25:1d:73:ca:1e:bf:3a:0d:de:cc:e5:
42:ff:37:0b:0a:6e:6b:f1:97:14:7b:75:5d:df:fe:f4:bc:64:
69:fc:05:0d:20:c9:0d:34:eb:59:fa:e1:ca:e7:8a:28:f8:86:
10:95:2e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:33 2026 by rpki-client