Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
File: yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json)
Hash identifier: RcA3Dcd1NXRB2fOShk04Wvtg24kTRLwbSrYaJVBliYI=
Subject key identifier: AE:B9:39:8C:16:A2:FF:52:99:5A:43:B5:6C:DF:27:E7:B2:F2:54:AA
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial: 019D269678530056BC6D84A1AEB199BD1076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
Manifest number: 151B
Signing time: Wed 25 Mar 2026 20:01:28 +0000
Manifest this update: Wed 25 Mar 2026 20:01:28 +0000
Manifest next update: Thu 26 Mar 2026 20:01:28 +0000
Files and hashes: 1: YjABWXq1K-e_wEund0ue5nxCxOU.roa (hash: PI1L0CXgsAmafCm4unnTqfAaCBg3v/MEpLRsMdPwg9s=)
2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: qKg1oVEzOBtt3wpP5RBjWjm2FhEig3hGH8VREa4BjqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:78:53:00:56:bc:6d:84:a1:ae:b1:99:bd:10:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Validity
Not Before: Mar 25 20:01:28 2026 GMT
Not After : Mar 26 20:01:28 2026 GMT
Subject: CN=aeb9398c16a2ff52995a43b56cdf27e7b2f254aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:5e:20:c5:95:22:fa:c0:0b:e8:b0:89:8e:
b3:4d:2f:e1:6e:d7:92:8c:cd:e0:ea:1c:85:64:11:
49:48:2c:1e:b4:49:d5:8b:76:e2:ac:dd:36:2d:52:
30:fb:b5:0c:9a:68:f3:18:fa:e2:0e:84:9f:e2:39:
71:76:7c:cb:c6:65:b7:05:4c:03:e7:28:67:db:c7:
2f:fe:7a:3d:1b:80:1a:f5:9d:05:17:b2:75:84:21:
84:27:8b:84:77:9f:bd:3e:91:af:d1:8e:86:30:98:
8b:88:9c:36:78:3d:09:49:87:cb:cd:16:d6:dc:76:
8c:14:8b:6c:b7:6a:48:1d:05:73:44:20:24:d1:47:
f1:ad:4a:7b:5f:8b:a5:c9:44:4b:91:0c:b0:e3:9e:
c3:b6:f6:46:75:9d:ab:a2:95:c0:3a:e1:ff:c5:72:
33:84:97:b0:97:da:53:23:5f:ba:1b:75:ef:4b:9e:
4a:bf:e1:a3:0d:ee:b8:37:c6:c9:04:44:6a:97:4b:
1d:78:cd:ff:5c:af:ff:59:21:e8:27:bf:89:45:61:
48:e3:76:64:85:6d:04:ee:0e:e0:54:03:e2:13:68:
d2:2e:87:90:a1:aa:56:69:79:cf:1f:0c:3d:62:d1:
89:56:4c:5b:66:99:2c:d4:51:4f:8c:87:3b:e4:51:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:39:8C:16:A2:FF:52:99:5A:43:B5:6C:DF:27:E7:B2:F2:54:AA
X509v3 Authority Key Identifier:
keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:78:10:88:a5:7a:d8:b2:38:25:08:73:7d:76:03:b4:c9:80:
b3:7e:e5:4f:de:cc:40:ae:1e:1a:83:d6:f3:a8:6b:6e:8d:39:
6a:a9:8d:6d:77:27:46:01:fe:55:97:94:57:e1:10:c9:c2:43:
15:f8:55:a8:b2:0e:99:f1:0b:9d:c3:25:79:3f:01:1b:fa:56:
52:02:b8:10:8b:d0:d1:6f:bc:12:77:89:41:45:0b:69:16:af:
42:fc:24:ef:46:29:7d:14:75:ed:b3:56:1e:a8:eb:42:af:0c:
25:38:a1:c2:21:56:1d:05:6b:64:68:54:e5:c7:b2:de:84:c6:
3f:9f:76:71:81:1f:1b:99:87:c8:b4:48:8e:d0:61:07:0e:26:
f8:21:dd:98:6f:a0:29:3d:5c:4d:8c:77:b6:b7:f8:27:cf:fb:
39:44:00:db:4d:f7:8f:bb:b2:b9:99:44:58:e6:c5:ff:2f:94:
5e:52:c6:70:e6:bb:9b:33:bf:59:89:c8:ea:45:e8:56:e2:78:
94:2a:42:44:ea:be:bf:20:f4:1d:4d:35:e0:0c:ad:e9:38:63:
f2:33:53:e9:38:49:74:f2:b6:ce:b7:13:52:f2:61:c6:28:0d:
20:5a:c5:21:bb:71:43:e1:97:92:00:e0:fb:3b:f6:04:4b:22:
a3:96:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:09 2026 by rpki-client