Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier: F+ybWP1/FBG9CJ0FDrahphlLqprli8SW3x2d6Uux4H4=
Subject key identifier: 4E:5B:16:7E:7F:C5:5A:89:D8:CF:04:12:8D:3E:9D:C6:9E:2C:2B:F1
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 019D25BAB1915EB305F24C51C3CF155F7777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number: 0AD5
Signing time: Wed 25 Mar 2026 16:01:25 +0000
Manifest this update: Wed 25 Mar 2026 16:01:25 +0000
Manifest next update: Thu 26 Mar 2026 16:01:25 +0000
Files and hashes: 1: pfwLznvoYJJqfRCh4o2zmPQohuE.roa (hash: AfFbs4eSFCbfML477ZQsZuVVVQdsY3hUFmoLGoZMXTY=)
2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: SCgTq/EQ2qL0xZffKWkuQxqSqw/qv8meLIo4hBHr+fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b1:91:5e:b3:05:f2:4c:51:c3:cf:15:5f:77:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Mar 25 16:01:25 2026 GMT
Not After : Mar 26 16:01:25 2026 GMT
Subject: CN=4e5b167e7fc55a89d8cf04128d3e9dc69e2c2bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d5:ff:9f:a2:83:82:38:81:d6:08:ca:c0:0a:
cd:d6:0b:c2:70:35:f2:e6:3b:dd:56:2f:4e:04:d4:
13:eb:f3:91:7d:25:25:c3:f5:01:5e:eb:9f:6a:61:
7d:c0:ca:56:c6:dd:bc:c2:6f:0f:6e:d1:ae:3c:04:
70:2b:8a:91:83:df:c4:7d:e5:f1:7a:7b:0b:b1:f6:
50:2f:df:38:0f:72:2e:10:ed:52:61:23:54:69:54:
05:28:aa:45:a3:14:97:f6:22:3d:d1:71:71:2c:53:
32:e6:75:33:ff:80:de:19:61:86:07:0a:5b:ef:7d:
33:4c:66:86:9d:3a:16:e4:4d:11:70:e9:58:dd:83:
eb:f9:fb:9b:4d:18:76:e4:78:ce:8a:fe:d6:b9:39:
7f:84:11:07:ed:cc:d8:27:20:3b:5a:7a:c9:fe:d3:
13:3f:55:f2:dc:be:0f:82:54:c6:76:e6:cb:57:36:
5d:47:73:16:4a:31:13:34:f8:e8:55:fb:2d:de:74:
55:81:05:28:84:fc:15:70:7c:e7:aa:c8:98:cf:16:
72:56:4d:b4:c1:3b:0f:7c:02:4b:85:15:45:c3:cc:
65:6a:83:dc:0e:33:48:82:18:fa:b1:47:2b:8c:5f:
6b:75:a2:78:2e:82:c3:3f:e2:e5:c7:6a:58:67:9b:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5B:16:7E:7F:C5:5A:89:D8:CF:04:12:8D:3E:9D:C6:9E:2C:2B:F1
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f6:37:84:e4:c6:0d:b4:a7:ec:6c:9e:62:37:30:5a:10:51:
04:92:f1:06:49:fd:ab:b5:ee:7a:2a:40:fd:48:37:61:7a:5c:
d4:02:29:b9:05:92:d6:27:6d:77:6a:c6:04:6f:ed:8a:8a:ea:
db:ed:4a:18:3e:45:cf:f8:e4:71:62:85:84:1a:78:43:e7:10:
46:8b:81:a4:bb:51:99:84:ec:a3:11:e3:20:f0:0a:40:c7:19:
13:c6:dd:4a:13:4d:4f:bd:e7:fd:af:10:51:af:f1:56:5b:6e:
ed:a6:23:a9:9a:7a:c6:01:5c:8f:28:0e:1b:e3:5a:4b:c7:ed:
c1:14:8e:79:70:d5:84:77:08:f1:c6:9e:3d:25:8d:bf:17:3c:
a8:78:ed:0d:be:be:78:89:a1:93:b1:f2:92:d1:d3:3b:4c:14:
d0:bb:4f:8a:0e:fa:94:ba:3a:08:98:8b:5e:3f:b8:e6:76:7a:
ea:cf:83:86:82:ec:90:8a:0b:a4:35:00:5b:64:ca:33:0b:85:
62:61:58:70:0b:6d:cb:b4:c0:e6:25:0b:2b:86:d4:e2:64:a3:
50:01:b9:9b:f9:5f:2e:0f:62:a3:9d:bf:f9:f3:91:84:bb:6a:
3e:e2:f0:59:d9:56:30:3d:34:47:4f:51:6b:32:29:e8:90:c5:
05:4c:93:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:37 2026 by rpki-client