Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier: nEctdM5337q+0tZNvUW6dtTv6Dgj8YfV9OKgjSX9fBs=
Subject key identifier: 70:50:A4:A3:D2:FC:00:66:35:43:8A:44:0F:ED:55:06:94:7C:1F:22
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial: 019D2704A0D6AFF06B9640C26DE6748027C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: NITgwZ0BoycrXSGPU8iX7ZnWyHc.roa (hash: 5tWOFXf/UnsBI5wfRpAA1+yDyuJUDNX32cEt3vj5vdk=)
2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: sbzXF3rx9G3lpQ9E7lM0kzHCVwf2SO52723jIEfauC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a0:d6:af:f0:6b:96:40:c2:6d:e6:74:80:27:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=7050a4a3d2fc006635438a440fed5506947c1f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:9c:1f:7b:c9:5e:fc:56:7b:ab:7d:f8:48:
25:ce:5d:0b:f8:7a:3d:15:31:33:b3:61:6d:63:14:
fc:b4:94:76:82:29:3e:13:ec:3a:a3:86:5d:24:dd:
74:e4:17:3a:40:c7:26:95:9b:d5:2d:45:f2:f7:a2:
34:8a:eb:c9:c5:2b:28:00:10:22:79:9f:91:d2:ce:
da:5a:04:42:2c:91:7d:6b:9c:2b:f4:b4:f1:fa:34:
e3:c8:16:d5:1b:77:c3:92:3a:71:ef:5c:30:00:cb:
3b:4a:74:19:62:ca:dd:33:5a:cb:33:7b:51:ce:2e:
c4:fd:04:9a:27:42:58:8a:05:ac:03:7b:6e:c6:c6:
d3:79:a0:26:1d:22:41:56:47:64:f9:03:34:27:ff:
f8:f5:02:7f:39:d1:7b:a4:53:02:d6:71:52:fc:db:
9f:63:5d:08:d0:88:b9:1e:00:cf:df:c8:00:22:c8:
7a:7d:70:52:3a:1c:d9:6f:b9:0d:3e:8a:4f:5c:a9:
8c:cc:a7:a8:66:04:96:59:90:70:51:94:78:9d:ab:
38:73:53:ad:23:70:fb:35:e2:d5:94:c3:e8:30:6d:
c1:08:b5:65:b2:39:e4:07:cb:6a:9a:8e:7a:29:c7:
93:f8:ea:fc:fe:c9:65:48:85:cb:5a:2a:1d:9f:15:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:50:A4:A3:D2:FC:00:66:35:43:8A:44:0F:ED:55:06:94:7C:1F:22
X509v3 Authority Key Identifier:
keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a7:64:6a:ba:f4:3f:1b:73:d5:94:63:19:2f:62:e9:36:d2:
9e:24:38:0e:bc:12:1e:4a:1b:ac:2c:4f:4a:40:8d:34:69:56:
e3:a9:36:46:55:2a:67:93:77:bc:30:86:01:62:c9:a6:c6:c0:
4a:a6:28:0a:69:0e:81:cd:c4:6e:25:67:52:a3:a2:24:ac:b0:
49:ff:a8:9d:46:dd:a5:7f:65:16:18:e8:60:2c:3d:b9:60:ee:
eb:12:7b:13:bd:2b:81:e9:e0:9b:ca:18:d5:df:05:66:51:c9:
c7:4e:d1:f4:85:f0:5f:e7:16:37:2b:c0:5c:cb:a9:10:69:92:
f0:bb:a8:7c:a9:fb:2e:4e:2c:8f:af:74:78:da:51:2c:ac:ce:
e8:6a:e7:ba:b7:7d:24:95:55:d4:f5:52:3b:89:98:b9:71:49:
c0:b8:46:94:d5:40:ae:36:f3:b6:86:c5:85:bf:94:d0:83:05:
81:8e:91:fc:34:18:e6:e8:b3:22:c5:27:18:c5:bb:f8:2a:2d:
c0:65:9f:4b:cd:49:5c:e1:57:fe:42:21:76:90:1f:a7:b9:16:
e2:c7:d8:29:02:c1:fe:9d:83:1f:69:5c:97:04:e5:ea:6f:d6:
ce:f6:0e:b7:8d:cf:86:d8:a5:93:ad:9d:d3:78:8a:67:95:43:
d4:b2:0e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:18 2026 by rpki-client