Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
File: ySynGDiuM8zsxfEKtU7D_HG_u4I.mft (raw, json)
Hash identifier: mayuGzwO4XU+Phredm9G3MrUJu6itjM2nxvDxCS6190=
Subject key identifier: DB:11:6C:5B:FD:0F:F3:E4:BF:22:1A:07:37:50:1E:4A:37:7B:DD:34
Authority key identifier: C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82
Certificate issuer: /CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
Certificate serial: 019D33E36F16B6D25CE04784666DA50EF765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
Manifest number: 0A65
Signing time: Sat 28 Mar 2026 10:00:36 +0000
Manifest this update: Sat 28 Mar 2026 10:00:36 +0000
Manifest next update: Sun 29 Mar 2026 10:00:36 +0000
Files and hashes: 1: mmjMofrrbKgoCjPRlZXSZw-GT9g.roa (hash: WPU4HxsKpJGTw0PZwb4XnnI8k0102pp1cmkJ3VryINw=)
2: ySynGDiuM8zsxfEKtU7D_HG_u4I.crl (hash: iyS8c+wYoiVMfXgUoKkiiG2M0cB8bAuvjGVj5CttU2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:6f:16:b6:d2:5c:e0:47:84:66:6d:a5:0e:f7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
Validity
Not Before: Mar 28 10:00:36 2026 GMT
Not After : Mar 29 10:00:36 2026 GMT
Subject: CN=db116c5bfd0ff3e4bf221a0737501e4a377bdd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a1:7a:81:98:e5:19:50:9c:3f:88:58:0b:c6:
5e:1d:5a:08:4c:68:c5:ef:7d:0b:f8:8a:87:ad:23:
00:e2:79:1b:d5:35:0d:ea:c7:f2:8a:8a:f5:cd:87:
8a:c4:1f:ae:26:b0:38:bc:49:f5:b1:39:6a:26:23:
a5:21:df:69:66:61:1e:6e:d6:88:14:96:a5:2c:ff:
fb:c1:f8:75:71:3f:31:2d:5f:0b:64:59:32:f3:61:
7b:0a:78:5e:de:2c:ae:57:05:71:f2:bb:57:21:69:
87:99:2e:cd:3d:b4:cf:f2:05:48:0a:42:3f:5f:ec:
85:18:c2:9c:b2:4b:ec:a3:94:7b:25:4d:26:b7:ad:
1f:c5:f0:7c:a7:c8:78:89:bd:ef:15:37:c4:c6:bf:
b5:e4:7d:27:5a:c8:fd:1e:d3:66:27:81:4e:39:ff:
53:59:73:1e:c3:83:26:4c:0c:86:45:f4:7f:e4:e4:
48:c7:e2:18:6b:a7:0f:aa:ca:7f:8b:96:a8:77:5e:
9b:9b:3e:9d:aa:8a:07:a3:65:fd:24:2e:02:b4:cf:
4b:39:3e:57:ca:8e:c9:5b:63:f4:51:42:e0:49:3d:
9d:e3:0d:ae:42:91:e5:25:32:90:4c:dc:b4:95:bc:
c5:2d:cf:d9:00:2f:a9:a0:e0:15:ff:fd:c4:77:09:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:11:6C:5B:FD:0F:F3:E4:BF:22:1A:07:37:50:1E:4A:37:7B:DD:34
X509v3 Authority Key Identifier:
keyid:C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b6:75:aa:aa:30:df:33:eb:dc:22:5c:7a:13:df:d6:10:83:
b8:76:84:86:2c:2d:af:83:68:b9:a6:36:ac:8a:db:28:dc:e8:
30:b5:75:10:e1:80:52:ff:ba:9c:15:ee:e2:ae:4b:de:1d:7c:
34:ce:63:ff:8f:91:08:a5:09:d8:71:67:cb:a9:6d:26:71:c9:
07:76:7c:cc:55:5f:c1:5d:46:c9:4d:82:7e:b2:f2:77:df:d0:
ac:64:b6:d2:38:74:47:ae:64:98:1b:8c:58:4d:38:0c:07:4b:
bb:5b:c3:6e:0c:d7:a0:b0:7e:76:4f:e5:1e:16:b0:a9:f9:a3:
bf:4b:10:f3:86:59:ad:f4:4c:d1:24:93:e3:e9:ed:17:5a:cb:
65:af:69:36:10:1f:fd:9a:d0:f2:5d:5d:18:83:60:ce:c6:9b:
a6:3b:a0:32:54:9a:d1:0b:9e:92:86:88:59:20:9f:11:e1:8f:
3e:23:f4:3c:f6:1b:8f:a6:35:54:6d:de:51:8a:8d:f7:07:fd:
07:eb:c9:df:de:8e:cd:d9:b4:f7:07:47:ca:f2:fb:ca:15:03:
0d:f7:cb:33:be:7c:ce:52:92:52:ee:6b:7c:71:f4:1e:cc:4d:
65:53:e9:2a:f5:2f:49:58:c3:3e:ad:1d:e0:f3:fb:04:0d:84:
e1:19:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:36:29 2026 by rpki-client