Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: Bc1sFRK3Vn4QCxwunePh2dmdmG83afRMGtjX8Hz3/h8=
Subject key identifier: A0:45:50:7F:C0:60:05:86:C9:A2:E4:57:3F:B9:02:AD:80:DE:93:2B
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 019D28F24CAD2A44296A0C52CEA1E1621D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 120C
Signing time: Thu 26 Mar 2026 07:01:00 +0000
Manifest this update: Thu 26 Mar 2026 07:01:00 +0000
Manifest next update: Fri 27 Mar 2026 07:01:00 +0000
Files and hashes: 1: RfdbavmQcT8mIQaqZ9oKJHaDxao.roa (hash: Nx9pU5kvqjdGo4y6nmuhAb86Wl01qIbkTY3uv0AJ+IU=)
2: qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (hash: zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=)
3: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: JLbgcY+SL2RKAk+araPE76fl908kkrOBvamL6IZxx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:4c:ad:2a:44:29:6a:0c:52:ce:a1:e1:62:1d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Mar 26 07:01:00 2026 GMT
Not After : Mar 27 07:01:00 2026 GMT
Subject: CN=a045507fc0600586c9a2e4573fb902ad80de932b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:d1:18:f1:4f:6a:73:20:bb:62:c6:df:55:
12:6c:b5:7c:8c:6f:cc:d2:7d:be:60:06:9e:d0:26:
80:3c:0d:72:8c:c2:c8:e6:7d:4a:e8:63:ea:fe:f8:
33:46:36:65:3c:23:94:68:18:9a:30:95:66:7d:42:
35:36:d4:02:71:83:ab:12:6a:86:37:7b:23:a3:15:
f4:80:ff:32:d3:43:60:ee:fc:a7:4e:32:62:ab:38:
d5:07:df:04:80:9d:dc:2a:f6:6b:75:2b:60:43:ad:
b5:d2:c5:52:f1:39:fd:e9:89:ee:95:0e:ba:53:23:
96:20:0b:01:e9:0e:b8:54:02:72:d9:23:4d:ed:28:
77:4f:32:c0:40:dc:0a:29:18:5b:c1:23:55:39:ee:
db:3b:e1:70:73:0d:a2:8c:4e:15:db:fa:d9:54:9f:
60:90:39:2f:06:72:63:d0:2e:e3:f3:09:d3:1f:d6:
14:7e:d1:59:8c:53:a0:ca:9b:09:51:61:35:d7:ae:
ce:ab:e4:1d:bc:28:3d:28:ce:01:d4:50:35:49:4b:
8a:21:ea:71:23:a3:5f:b9:dd:1c:65:37:43:c9:3d:
70:94:ee:a8:c1:30:86:eb:58:f6:60:4c:ef:a8:9a:
4b:8a:3e:49:4b:1a:e4:03:3d:32:5d:d3:3e:a8:1d:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:45:50:7F:C0:60:05:86:C9:A2:E4:57:3F:B9:02:AD:80:DE:93:2B
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fb:b2:58:56:d4:b3:a2:3e:14:ae:58:fd:b1:88:d7:97:5e:
e5:f5:fc:86:b7:b5:9e:1e:3c:b7:d7:dd:ca:6d:d5:7d:1b:54:
d7:ab:76:ec:bb:2e:50:08:7a:1f:a6:d7:be:f5:f0:c5:a1:79:
14:08:d1:4b:b0:06:9d:59:be:4c:dc:71:7b:9b:ad:60:0c:f4:
77:42:c9:03:a7:48:c6:4e:17:30:f6:3b:a9:9d:50:90:d6:4c:
cb:00:fe:b5:51:5f:11:ad:ba:88:79:01:4d:d2:c8:0c:27:a7:
1e:75:d9:6c:84:b3:56:5a:c6:2e:cb:bc:45:a6:7e:51:af:23:
c2:74:0c:43:fc:9a:9b:1b:b8:5f:6d:9b:44:81:ff:8f:79:e1:
af:72:b3:71:7d:20:15:a1:69:4b:ea:72:cd:95:60:47:e1:cf:
39:47:09:b9:1f:42:c5:fc:73:a7:d0:95:ac:82:7d:44:ca:67:
23:b1:a2:f5:89:1d:36:50:8f:2e:2a:19:21:2d:f6:23:0a:a9:
13:83:62:5b:ef:5b:c6:3e:76:13:8b:dd:b8:e6:30:23:93:b3:
52:2d:93:19:1a:4d:37:92:37:a3:7a:7c:db:27:99:93:c0:8b:
3a:b9:72:bf:b9:ae:35:fe:c8:09:82:90:eb:1b:9d:61:11:3f:
72:12:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:23 2026 by rpki-client