Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: c3m/0m/ida84BMW5kOpvUpPisDMxGpaOdhIBjMEV7Wk=
Subject key identifier: 0F:6C:1F:1F:EB:F5:0A:94:97:92:08:4B:12:63:9A:26:62:5F:33:F4
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 019D33E3801990137321410E9CE68F0CD0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 1754
Signing time: Sat 28 Mar 2026 10:00:40 +0000
Manifest this update: Sat 28 Mar 2026 10:00:40 +0000
Manifest next update: Sun 29 Mar 2026 10:00:40 +0000
Files and hashes: 1: JsdL78tRGAWeb9S9iMdRfRQLDXk.roa (hash: lV6DbCoLT2AIp73UdWBqM+s8hS1sGFViY9AJ+gxGCI8=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: 6Pg/5yOQ64bgueVD0G+L6k0WDn4ex75dCvXRqz+ehsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:80:19:90:13:73:21:41:0e:9c:e6:8f:0c:d0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Mar 28 10:00:40 2026 GMT
Not After : Mar 29 10:00:40 2026 GMT
Subject: CN=0f6c1f1febf50a949792084b12639a26625f33f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:e4:cd:63:71:1a:db:ef:f0:a9:df:88:bb:
66:9b:fe:42:9e:1d:ab:65:e2:fa:40:b4:55:72:22:
b5:89:3a:f4:9a:c1:af:7f:5b:a9:b0:74:db:76:2f:
48:81:73:ab:2d:c5:42:ef:b9:a4:9b:62:1e:e1:5a:
19:12:d8:92:25:f9:ae:05:f5:9d:71:52:08:44:8f:
b1:74:36:67:84:4a:c9:de:fe:ad:b4:ec:89:22:17:
f0:b2:98:21:92:27:bc:59:3e:f0:4c:a4:8f:85:ad:
20:dc:0f:b2:5e:f6:80:a2:29:4b:55:ee:f7:ee:e1:
e2:9a:c2:10:db:ba:6c:32:d8:40:70:53:7d:f6:76:
fd:00:5d:62:a3:16:87:b4:f1:e6:19:42:f3:2a:d3:
b1:d2:ea:01:1a:6b:d0:78:32:c9:29:4b:54:cf:9a:
1e:da:f8:71:0c:91:7e:93:4d:f5:35:b3:a2:f0:65:
fa:2e:8f:72:fa:b4:94:1b:24:99:c1:2d:c5:6c:0e:
86:de:0a:33:52:91:2a:3c:b5:40:cd:5e:ee:27:59:
41:8a:03:2c:45:65:79:9f:eb:1b:f9:b1:e9:f5:53:
b4:00:f5:1b:66:48:d9:dd:15:e7:a6:a1:d0:cf:87:
4b:4e:e1:b9:03:93:00:59:6f:20:92:3e:77:4e:31:
68:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6C:1F:1F:EB:F5:0A:94:97:92:08:4B:12:63:9A:26:62:5F:33:F4
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:27:d2:c0:4f:78:73:11:24:24:d6:0e:e0:db:f0:7d:d9:9b:
7c:44:27:31:f0:29:c5:6b:24:a6:f7:a7:e0:9c:e2:20:91:e0:
f3:d8:85:fc:38:c9:f3:11:0b:07:3f:db:82:8a:97:b8:11:d2:
59:81:4c:d7:7c:96:cb:68:5e:c1:e2:a3:02:0c:58:4c:f5:e6:
3d:f9:d8:e6:9d:18:64:07:f5:b7:bd:5c:0b:a6:38:70:7e:79:
9a:fd:13:90:f0:f4:30:34:09:4f:a3:f6:40:e6:6a:5e:80:68:
89:b6:41:be:f1:2f:c5:45:3c:42:2a:53:32:17:e4:18:d8:05:
9d:d4:07:77:dc:aa:d9:b5:ae:ba:6d:17:b2:6d:ad:da:cf:11:
8c:7d:f7:40:03:44:be:db:4c:3a:bc:37:f0:c3:a5:b5:8c:9d:
e5:d5:52:d8:94:04:1f:f2:2e:d6:3e:6a:78:9b:51:33:b2:d1:
f0:4b:9e:71:1f:a8:8e:f6:68:bc:3b:55:fa:9d:98:c5:e8:02:
22:a4:2f:a8:c6:6a:4b:ff:3d:f9:35:b8:20:46:4c:04:7c:8f:
80:dd:1d:25:cf:df:25:4a:67:8c:ea:69:30:b6:8b:b5:4f:d0:
ec:24:35:d6:c7:c8:72:00:2e:8a:25:9a:3f:a2:cb:2f:6e:9b:
d2:6c:59:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:07 2026 by rpki-client