Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: 2LEtdFM3/b0AGxkLWVC2azLOkn7Uco7Odp2ApDeUYoY=
Subject key identifier: 69:C9:4A:B7:25:3C:A8:FC:49:5E:BB:8C:74:34:D0:2C:90:4A:D8:5C
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 019D2C29B307602CE5181AF68478EF158C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0FBE
Signing time: Thu 26 Mar 2026 22:00:23 +0000
Manifest this update: Thu 26 Mar 2026 22:00:23 +0000
Manifest next update: Fri 27 Mar 2026 22:00:23 +0000
Files and hashes: 1: WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa (hash: F58q4gWz10PJi3pePWbZTjvTAbHmgaZfqkLlGVghmM0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: ekB1jRKH26fDy6EzSAkeNlDy49Ua4IfX8Q27igWgwuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:29:b3:07:60:2c:e5:18:1a:f6:84:78:ef:15:8c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Mar 26 22:00:23 2026 GMT
Not After : Mar 27 22:00:23 2026 GMT
Subject: CN=69c94ab7253ca8fc495ebb8c7434d02c904ad85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:7e:9b:28:67:68:05:6b:f2:86:9f:9c:ec:
32:c5:a6:01:ab:ec:71:d0:b9:f3:9a:ca:bb:08:b9:
31:d3:35:2e:0b:1c:86:98:bc:31:1a:79:2c:15:2f:
d6:e7:1e:07:2e:61:99:25:46:4b:8c:de:4c:7c:5a:
bd:f4:0b:a1:51:4c:12:f8:f7:6d:13:ae:03:02:83:
d3:c4:16:e3:b2:e5:07:95:54:14:11:d0:e8:41:9c:
35:39:26:7f:d9:b6:96:ae:ef:db:aa:9d:0b:fb:4d:
0f:69:3c:bc:0a:c7:b7:c3:35:7d:36:9f:ec:b7:3c:
2b:13:ae:dd:a4:b2:16:45:f7:af:e2:1b:29:47:2b:
48:a2:6e:5f:28:ae:22:99:8a:87:86:7a:23:8b:13:
35:84:e7:f8:4e:e0:38:3d:41:c1:00:0d:d9:10:3d:
8b:34:5d:86:57:d8:95:cb:ff:d5:7e:b1:78:7d:33:
e7:23:2d:b5:da:09:8e:c7:f6:74:ec:04:8e:2f:0b:
93:aa:8a:9f:e4:4b:63:64:30:66:d1:b2:1d:b5:8f:
04:05:6d:43:af:8e:d5:06:94:74:5a:d9:68:41:d0:
f7:18:82:e9:84:04:df:74:0b:d4:42:70:bd:20:b8:
9f:ee:e8:aa:17:87:83:42:8c:d6:15:75:3a:62:0e:
ad:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C9:4A:B7:25:3C:A8:FC:49:5E:BB:8C:74:34:D0:2C:90:4A:D8:5C
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8a:85:98:c2:2c:d8:bf:48:9a:03:23:34:2e:0e:2e:76:dc:
6f:c2:a6:51:93:03:66:ba:33:65:e8:8a:7a:17:68:64:45:27:
8f:2c:74:2f:aa:20:21:10:13:74:58:bc:b7:9b:7e:de:c2:70:
64:16:2e:f8:3c:2b:85:8c:ba:55:74:d4:7c:09:31:1f:4d:4f:
52:57:7f:b4:c2:c6:f6:4f:e0:90:0b:e7:26:34:87:6a:92:24:
41:89:36:e4:05:2f:cf:29:d9:29:cb:f2:e9:ed:d9:59:91:1b:
39:32:ce:91:a7:d9:49:fd:10:7e:d0:29:93:5f:6f:93:b4:69:
ae:df:64:fb:9c:a7:17:40:65:37:66:d9:1c:71:7f:92:87:e5:
89:69:87:47:21:89:9f:35:93:ab:6b:35:77:02:a0:47:7a:b2:
b2:59:04:fc:7e:23:a0:cd:0f:15:2b:6c:b4:4b:d9:59:9e:ba:
fa:7b:a7:cc:03:ba:d0:77:ed:94:5f:1b:82:f4:77:0a:a7:b5:
17:5c:26:32:47:9c:fc:ff:29:3b:c9:33:b5:d8:f9:e1:6c:40:
71:dd:e6:cb:63:33:3d:54:c8:c5:00:84:d6:27:d0:1b:34:99:
de:f0:ea:87:c9:1b:9c:12:57:37:1d:e2:3b:00:e3:5c:39:c4:
4c:a8:2d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:45:44 2026 by rpki-client