Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier: +JAx5DmBFjhyZ0S51itMCF+bABroYzK4o5QReFtjeXo=
Subject key identifier: 80:A1:8B:B6:D0:2D:E7:90:E8:FB:DD:F5:B7:75:DB:69:05:52:2F:19
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 019D3263431255CE66E5A66A058B47BA5833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 03:00:59 +0000
Manifest this update: Sat 28 Mar 2026 03:00:59 +0000
Manifest next update: Sun 29 Mar 2026 03:00:59 +0000
Files and hashes: 1: 45j6eHYF_02muc8QdARO0K6hDmo.roa (hash: RBkJqhmrXlwPWTL2teXXxMSS7p2416ywX2dYxmAUw9s=)
2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: wN6eyOnOOzpUpS9EEuV9KXOTZKGRFMO5T7kUBKvjFIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:43:12:55:ce:66:e5:a6:6a:05:8b:47:ba:58:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Mar 28 03:00:59 2026 GMT
Not After : Mar 29 03:00:59 2026 GMT
Subject: CN=80a18bb6d02de790e8fbddf5b775db6905522f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:49:5a:d5:a2:6f:34:05:4a:2a:40:ff:3a:
db:5a:12:10:a9:d8:87:01:62:e5:58:48:09:b3:d2:
b8:c1:7a:84:79:f4:b9:2d:a2:6e:67:e4:8c:a2:5e:
e8:34:d9:46:78:0e:98:18:5e:6f:80:55:06:b1:0e:
df:06:d6:5f:f6:ed:e8:58:2b:29:ca:3f:88:28:4f:
bf:c0:cd:2c:a5:9b:06:b9:ba:d4:02:3e:60:5c:6c:
48:af:f4:06:ee:e1:4f:79:c1:ab:94:80:4e:43:e4:
6c:32:63:7f:f5:41:e5:4c:d4:56:49:0a:e0:c8:a5:
70:e0:02:b0:f0:1d:bc:8e:21:99:40:c1:64:48:bd:
c8:ca:02:4c:6f:28:72:07:4c:55:fe:09:bd:5b:de:
fe:89:42:1e:cb:50:2f:47:41:d8:6e:d4:90:9a:16:
31:61:7f:66:29:0b:24:47:1a:0d:c5:4f:d9:19:74:
be:e6:f5:a7:ff:04:ca:9b:af:57:15:ee:df:2a:79:
a4:f8:24:7b:ea:eb:0e:58:55:cd:08:4e:93:40:f9:
c1:dc:75:63:9a:22:5c:b7:19:b9:fa:14:0c:a2:b2:
bb:a5:cc:95:7a:63:8a:c1:69:b3:27:25:28:91:63:
66:24:af:fb:89:e2:53:b3:e3:67:1d:b0:e6:62:91:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A1:8B:B6:D0:2D:E7:90:E8:FB:DD:F5:B7:75:DB:69:05:52:2F:19
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3e:f7:20:3c:4a:a5:d3:b9:57:c7:b4:fb:dc:17:4c:00:97:
6b:3b:e8:db:fa:1a:4f:54:46:b2:ed:a2:dd:34:62:e5:ae:0a:
9e:df:c3:91:e6:85:9f:76:1b:0e:39:2f:b6:4a:35:16:07:e6:
79:4e:e6:f4:24:9e:e8:7b:0d:86:76:07:53:da:52:5b:b6:4c:
4b:1d:f2:c6:0e:0c:f8:e7:ad:ad:53:be:e3:2c:a8:15:bf:cb:
dc:e5:b7:ae:1f:97:2f:82:ed:3d:e9:af:74:07:27:35:62:5c:
2e:bc:08:17:15:07:30:d8:ac:62:59:34:e0:82:d3:97:0e:e2:
04:8c:3c:28:2a:63:5f:5b:a1:fd:44:a2:74:5d:05:dc:0f:18:
36:0a:91:16:82:19:d6:27:2e:a4:26:be:17:2a:6c:30:56:05:
74:5d:d1:ee:dd:a4:a2:e3:f1:54:57:43:a9:e1:6f:68:cd:51:
f5:95:32:fc:3b:0c:45:69:85:32:f2:05:33:e5:9b:e7:a2:00:
0f:14:26:57:d2:62:11:4f:15:14:0c:84:2a:65:79:0b:06:a2:
cc:cf:37:62:a5:d3:cb:8b:2f:23:10:eb:fc:cf:05:03:c9:89:
36:89:8f:8a:91:35:75:e4:18:dd:22:e5:9a:04:85:19:b7:b2:
1a:6b:dd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:10 2026 by rpki-client