Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: gos++qVl6teaBI3fp5Tm+tBQdkqlwaWBZoNCrpp/PwA=
Subject key identifier: 42:47:CC:8B:EC:25:69:D5:3D:F4:A0:E8:83:6E:89:21:90:64:E2:5E
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 019D27A927207D39B030D7F5D8D8FBDAB6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 11D8
Signing time: Thu 26 Mar 2026 01:01:29 +0000
Manifest this update: Thu 26 Mar 2026 01:01:29 +0000
Manifest next update: Fri 27 Mar 2026 01:01:29 +0000
Files and hashes: 1: WEResR1vKVF1XFqQZFnpiSVDhdQ.roa (hash: nNBq14HUZikLjgzpH3qRgEC7vVQNRFCy0PpayQuzXVc=)
2: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: bl3DaQqm5RPtqxq2qTTVErXegM/biu3G7QOogMU6zhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:27:20:7d:39:b0:30:d7:f5:d8:d8:fb:da:b6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Mar 26 01:01:29 2026 GMT
Not After : Mar 27 01:01:29 2026 GMT
Subject: CN=4247cc8bec2569d53df4a0e8836e89219064e25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:4d:45:86:f6:d1:62:b1:a9:c9:ea:cb:2c:
b2:a0:f6:86:74:7b:5e:c6:8c:2b:7f:68:66:81:4f:
85:02:8c:91:76:16:48:d7:b8:e4:75:0c:bc:50:5f:
05:40:91:09:9e:91:c8:93:2a:07:12:1a:5d:9a:fe:
cd:24:72:19:00:a7:7f:d9:52:42:99:6c:31:66:48:
fd:52:20:3d:1b:46:2a:10:3e:2d:73:58:04:c1:f7:
64:ae:d9:df:f7:d0:78:62:9a:ad:9b:60:e4:45:c7:
8c:dc:8a:9e:e1:cf:36:ad:d3:26:a4:30:16:4b:9e:
a7:a0:da:4e:2f:44:76:14:eb:44:73:a5:7b:c2:b5:
6f:bb:f4:aa:e5:58:fd:ac:aa:1f:ef:2a:6a:28:25:
e1:b9:c4:a0:1a:b6:4c:fe:57:0a:c5:1a:6e:2e:5a:
2a:5f:15:27:ca:61:8f:c6:1b:2f:89:76:0c:e5:b1:
40:3d:18:a5:9e:44:31:29:d4:45:18:60:17:11:09:
a1:42:5a:68:03:50:5a:61:5a:66:b0:10:62:46:25:
c7:a5:c7:26:b0:fd:4a:16:fe:ec:9c:c3:d3:2a:83:
c4:46:2f:08:4c:49:ca:f4:0f:a2:34:1e:42:22:af:
e7:2f:95:3b:9c:69:54:e1:0c:97:cf:de:74:27:f2:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:47:CC:8B:EC:25:69:D5:3D:F4:A0:E8:83:6E:89:21:90:64:E2:5E
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7e:45:f2:94:ee:c5:90:f3:fe:89:a7:36:cc:46:66:04:41:
33:c1:03:be:9a:ca:de:d7:4f:e6:14:c7:49:75:34:83:c4:c4:
0a:34:69:14:fb:af:88:ef:b2:25:a9:d9:d6:58:0c:75:95:1b:
4d:cd:16:90:01:04:17:a9:89:e2:33:fb:8d:f5:fc:a0:35:6a:
d4:5a:f3:d6:01:8c:77:2b:20:e3:88:c2:6e:34:5d:35:18:f1:
1f:1c:25:13:01:a2:69:6b:22:a4:33:cb:76:8b:17:8c:9a:d5:
e9:ec:2b:48:ae:da:7a:d3:a4:a3:9f:f5:78:0b:a4:ab:2b:e2:
3a:bc:6d:ca:50:62:da:cb:ae:e4:64:65:df:40:42:59:b7:80:
a6:20:6a:32:dd:d6:9f:40:de:be:78:5e:da:af:41:e8:1d:e7:
bd:2d:71:77:b9:2b:59:1c:14:f5:6d:65:ae:b7:32:1c:cc:2a:
d0:42:f8:dd:7e:c8:cb:50:33:22:c3:2a:7e:e1:dd:33:aa:dc:
21:22:0c:a8:ea:c2:04:dd:0d:9e:13:e2:f9:30:23:a1:b8:22:
8a:5a:8c:ff:10:6e:a6:8a:0a:38:0d:36:e2:d8:fb:50:1c:11:
98:4d:93:5a:5d:48:72:93:95:16:65:84:83:25:ea:81:4b:bb:
55:df:12:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:22 2026 by rpki-client