Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: yXQGrXumyMwWI6fbOFMmsmkQF6kMv46rVCMl3B7XlZc=
Subject key identifier: 84:E3:52:96:BC:78:18:3D:2C:8C:71:8A:2A:4B:30:4B:86:6F:38:A8
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 019D284D649D8949DE952716812A4F6AFB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0B66
Signing time: Thu 26 Mar 2026 04:00:53 +0000
Manifest this update: Thu 26 Mar 2026 04:00:53 +0000
Manifest next update: Fri 27 Mar 2026 04:00:53 +0000
Files and hashes: 1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: MU4cNU1hTJRm1T2SbbnnPDVYmcU/IQ3awKWhEhF4Hug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:64:9d:89:49:de:95:27:16:81:2a:4f:6a:fb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Mar 26 04:00:53 2026 GMT
Not After : Mar 27 04:00:53 2026 GMT
Subject: CN=84e35296bc78183d2c8c718a2a4b304b866f38a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7c:8a:54:85:7f:a5:82:7c:d4:43:0d:5f:43:
00:22:43:c7:5f:fb:9c:8d:d2:b4:cf:93:17:08:15:
ee:6b:0b:35:fa:da:f1:7c:29:75:01:e1:ad:3c:03:
00:d7:18:32:ad:99:49:76:df:2c:be:ec:cb:3e:34:
a7:8c:a1:35:a1:af:1f:f8:2a:10:f0:d5:3e:4f:03:
61:8c:a3:63:83:34:45:90:46:2e:d4:8c:20:5e:20:
de:d1:70:18:41:30:bd:60:a9:ed:ba:a9:ee:3e:11:
e6:97:d2:5e:b7:9a:84:f3:dd:0e:28:fc:92:6f:ad:
28:69:6b:12:48:31:1f:07:a4:e1:ec:d9:f9:79:46:
7f:8e:64:e3:07:f5:d0:5d:10:ca:8c:67:23:65:6c:
ca:81:29:69:84:18:ac:ef:8a:88:03:a3:ee:26:30:
1e:1e:2e:ba:01:ab:43:b5:ef:4f:77:a9:e6:f8:2e:
79:0f:44:97:78:66:24:d7:b9:cf:01:f3:d2:ba:65:
4e:36:a0:12:7c:1f:5e:ea:05:5e:20:10:28:ec:f4:
52:56:d0:f2:8b:10:90:c7:da:ae:86:6f:4f:9f:61:
48:65:d2:0e:3c:f9:d2:50:b2:6c:44:52:15:6e:8e:
6d:1e:49:c2:42:be:44:94:81:74:a5:23:4c:44:5f:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E3:52:96:BC:78:18:3D:2C:8C:71:8A:2A:4B:30:4B:86:6F:38:A8
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fe:25:5c:b7:95:11:dc:6e:61:c5:66:72:76:45:3e:18:a9:
c4:cb:05:91:64:28:7a:11:dc:bb:56:b9:d0:86:fd:66:07:69:
f2:84:58:3d:a1:54:86:0f:a0:c4:55:eb:55:fb:4a:37:e4:e4:
08:06:6f:70:b4:8f:9f:26:d7:cd:aa:fc:4d:52:62:c6:38:58:
ed:d9:e9:06:7d:d4:ac:3d:2d:83:ba:c5:73:c2:80:d3:bb:17:
39:91:8d:78:60:86:86:a0:2d:c9:ca:f7:29:05:53:73:8d:db:
c2:93:d7:2a:ef:f9:d5:18:a4:12:e3:6f:58:2c:6a:41:46:1e:
56:6f:12:2a:73:a1:49:0b:c1:c2:9f:88:3f:b1:23:79:d3:ff:
7c:b7:c9:5c:14:98:9b:7d:aa:cb:6f:99:4f:d2:06:e4:ff:82:
db:76:bb:c6:0a:f3:7d:99:dd:c4:9d:23:c5:b5:1f:12:15:74:
c0:c6:31:30:74:93:ae:d6:8d:79:27:34:ab:ed:19:42:8f:9f:
61:e3:53:a2:09:9a:1a:87:46:cc:40:1d:2c:b4:e9:94:9e:cc:
4d:af:5e:a5:17:1b:3d:d6:e4:03:69:68:4c:a5:f7:e5:cc:c7:
15:6c:9c:6b:4d:fa:f3:f1:70:06:8a:f2:37:17:0f:c5:29:22:
2d:e6:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:43 2026 by rpki-client