Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
File: yjNIq_Fz0ndMiUIAjK321gEqPVI.mft (raw, json)
Hash identifier: tS3NAZpHzFFtrRSktsUqkS5nrrC+39+KYrp52RGOGJc=
Subject key identifier: 7D:E7:6C:C3:00:AA:E9:3F:81:C4:6B:FA:03:0B:4D:FB:A2:55:33:C7
Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
Certificate issuer: /CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Certificate serial: 019D2960DA6E32A07448E99525BA4413475E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
Manifest number: 087D
Signing time: Thu 26 Mar 2026 09:01:46 +0000
Manifest this update: Thu 26 Mar 2026 09:01:46 +0000
Manifest next update: Fri 27 Mar 2026 09:01:46 +0000
Files and hashes: 1: bYnmxW1SSsOpZ_UdEnwHgLbPMLE.roa (hash: xTGg5NX2D1kbyIr1y0FxLhbgTth/OEV0XdRYTihXaZU=)
2: yjNIq_Fz0ndMiUIAjK321gEqPVI.crl (hash: qic1Llsh3vWLR2NiS0Pjiejog0vVMuQ07tmG4JT6Eec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:da:6e:32:a0:74:48:e9:95:25:ba:44:13:47:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Validity
Not Before: Mar 26 09:01:46 2026 GMT
Not After : Mar 27 09:01:46 2026 GMT
Subject: CN=7de76cc300aae93f81c46bfa030b4dfba25533c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:31:76:37:83:e6:71:24:ad:00:86:cd:71:
89:73:05:8d:c2:29:e6:9c:5b:16:28:88:74:06:eb:
45:ea:49:82:42:32:5e:22:fc:c0:7b:8a:3f:2d:b4:
ef:a1:dd:4e:66:25:39:10:ea:30:70:f0:8a:9b:5d:
32:32:b1:ff:82:61:ea:f2:f5:2e:55:57:56:a3:9e:
e6:ff:58:7e:b9:75:9d:05:d3:7c:5b:d5:bf:58:43:
56:b3:5e:02:d8:23:86:c6:74:30:52:2c:07:35:fb:
45:26:3c:95:5e:ed:f9:c1:72:e1:7b:ec:78:df:aa:
d5:81:27:09:e1:ca:5c:78:63:86:f8:24:d6:c7:9a:
e2:3b:b7:2a:46:3b:ec:52:78:e5:65:7f:9f:28:73:
ca:06:08:a1:a9:01:df:0e:54:9b:38:5e:a8:19:47:
06:a2:11:ad:fa:ac:28:0c:b5:94:12:00:08:9c:1d:
df:f6:0c:7d:92:78:37:90:58:f8:00:bd:c9:38:38:
d5:61:82:49:4d:61:88:d1:2a:b5:41:37:d5:bc:fc:
9a:b7:5f:5d:a8:a2:87:98:d4:77:42:a0:13:b8:4e:
92:9c:3e:67:ed:2d:09:b2:e8:c6:ea:0a:c4:49:40:
2d:c2:8a:f4:3d:59:70:a0:a5:33:1b:35:17:30:e0:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E7:6C:C3:00:AA:E9:3F:81:C4:6B:FA:03:0B:4D:FB:A2:55:33:C7
X509v3 Authority Key Identifier:
keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:66:13:90:01:3a:91:0b:80:fb:e1:f9:37:bc:44:d6:13:cc:
07:3e:a0:b5:7d:b8:5b:91:a4:d0:22:29:56:77:04:bd:65:50:
b6:45:89:09:88:91:e0:32:66:42:ad:df:99:93:90:67:e6:78:
85:70:39:09:90:ee:bf:35:9a:d4:be:39:09:88:fc:ee:79:54:
86:02:d6:40:da:ed:03:53:98:7c:b3:47:b1:ed:e0:10:bf:a0:
c1:06:57:57:a1:49:47:fd:76:eb:32:5e:75:f5:aa:f1:db:47:
08:f8:4d:0c:81:aa:d0:0e:b8:b0:4b:bf:67:ee:b0:c2:1f:d7:
67:82:d8:25:ab:b3:11:6a:96:71:48:c5:b1:b3:50:53:3d:33:
c1:ea:eb:a7:a0:4f:e3:9a:6d:5a:45:45:65:08:23:64:56:32:
50:27:a2:46:5a:c6:e3:00:19:11:5b:6f:7a:60:ac:5c:ec:7d:
42:2b:4a:3d:df:37:c4:6b:39:12:05:0a:a4:81:57:ad:ec:b3:
fc:bc:43:d0:9e:fc:e4:f0:84:1c:74:cf:26:2a:e7:a5:6b:c9:
d0:24:93:c4:ab:21:37:8a:3b:ee:30:bf:19:37:14:1b:f0:96:
3b:09:cb:ee:f9:0c:d8:74:3e:f7:d6:21:88:e2:72:43:2c:50:
d4:0c:9d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:23 2026 by rpki-client