Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: 4FkbNMiVgVSxpZ7CuhNWOdfY7jPN5evW2WM9Yt4HIio=
Subject key identifier: DF:94:F4:78:3D:66:CD:BC:BC:AA:6E:BC:D3:4D:F7:71:C2:69:8F:E7
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 019D284D422D00AF6D8FE84F07DE0FC74FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 0904
Signing time: Thu 26 Mar 2026 04:00:44 +0000
Manifest this update: Thu 26 Mar 2026 04:00:44 +0000
Manifest next update: Fri 27 Mar 2026 04:00:44 +0000
Files and hashes: 1: XQZYtmJX7BpNzPu03srU_4VYUsc.roa (hash: Bjg0iayeOq8sVWJ1lC2MT+jpchRq5ORWkMqvwpb8VDY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: 2tchkNxXCfuuadmteMBue1qmoDI0vZTjLIcEunA7t58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:42:2d:00:af:6d:8f:e8:4f:07:de:0f:c7:4f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Mar 26 04:00:44 2026 GMT
Not After : Mar 27 04:00:44 2026 GMT
Subject: CN=df94f4783d66cdbcbcaa6ebcd34df771c2698fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:d2:25:e2:6c:dd:eb:06:f8:1a:48:d2:09:
5a:78:97:a9:21:b5:ef:3a:04:5b:d2:be:0f:2a:68:
8b:d6:b8:4a:b0:80:ba:69:39:ff:81:e1:d2:2a:73:
96:08:8c:89:c6:62:62:a2:a9:20:3a:de:b6:1d:c9:
54:a7:b6:af:61:53:f8:27:b9:31:27:94:40:3b:3d:
4a:43:95:ea:03:ae:a9:f3:5e:81:ef:4f:f4:e2:3c:
65:5f:dc:a4:f2:46:6e:2d:b6:53:87:05:53:9e:31:
86:39:ba:81:9e:8b:82:b1:6a:97:bd:44:39:c7:39:
fe:0d:ef:9c:d3:d0:ab:a2:89:1a:95:82:e0:b6:67:
4c:33:35:57:fb:aa:14:ee:e3:bd:39:6f:60:bf:e9:
92:10:e5:4f:7c:c9:f6:78:37:76:de:cf:d8:12:36:
c0:09:39:f0:b4:a4:9e:e7:df:e1:56:99:2f:1e:0b:
b4:69:fa:b8:72:79:24:5c:3b:73:c0:8f:13:b8:5f:
51:c7:a1:2a:18:54:96:f3:e7:04:0f:e1:27:29:a4:
6c:6a:ff:fe:d3:d6:06:fa:8e:75:96:23:4a:77:bd:
78:30:34:b6:61:de:a3:1c:1d:ba:5c:e3:fc:31:5f:
aa:d9:14:bb:e2:3a:73:38:85:e6:42:cc:3e:d4:15:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:94:F4:78:3D:66:CD:BC:BC:AA:6E:BC:D3:4D:F7:71:C2:69:8F:E7
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:00:49:e0:a7:bf:e1:eb:40:8e:0a:70:bf:9a:4f:b3:a7:fb:
ac:f1:75:71:a1:00:a1:f4:d6:52:15:e0:2d:d4:93:25:4d:20:
66:bf:26:ab:91:d8:ca:e8:a9:40:b5:23:08:4d:d5:1b:e2:83:
da:18:72:8f:60:ba:b6:1a:fa:e4:85:43:49:61:7e:b2:5a:a6:
04:57:8f:a6:aa:a1:be:44:de:2a:5e:50:af:a4:92:d5:07:4d:
7b:a0:05:a8:c6:68:fd:0b:04:da:63:f0:1c:8e:2d:3e:2a:9d:
43:5e:c8:6c:6d:4a:a1:37:f6:5d:69:a4:2e:a1:f2:ea:2e:1b:
1e:1a:a8:6e:22:35:1e:99:86:bf:3c:be:ac:73:90:5d:cc:13:
21:a2:d8:56:2b:1c:34:98:5d:63:56:f1:cc:47:f6:1c:f4:3d:
df:6a:40:00:3b:3f:fc:8d:7a:80:dd:90:5f:09:83:1e:22:d2:
8e:0d:26:72:8f:19:6c:2a:3b:e0:31:c9:0f:64:db:03:4e:d4:
f6:27:83:b5:c3:4b:93:1d:a1:47:b8:7e:12:8d:ee:57:e0:e8:
d8:09:ed:1d:81:66:bb:25:7f:42:62:79:67:1f:23:40:10:27:
b7:20:39:2b:1e:d6:9a:46:60:84:bc:8a:45:1b:81:43:b9:95:
12:61:d7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:28 2026 by rpki-client