Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: /XM9H8hIg+PvIgIYtH3ozAF1Uu2G11i4naSSHTr0WTQ=
Subject key identifier: B1:DE:B8:A8:1C:F7:C1:E2:CE:B5:47:41:2E:B8:22:CF:1B:3B:13:7D
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 019D25835EB22D6BA9DAFBBD0ED5F1E11C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 05A1
Signing time: Wed 25 Mar 2026 15:00:59 +0000
Manifest this update: Wed 25 Mar 2026 15:00:59 +0000
Manifest next update: Thu 26 Mar 2026 15:00:59 +0000
Files and hashes: 1: vli7nBMVVsmnP9pgh14ogSpMo5o.roa (hash: vG8+FAZpGpoQ8aVKGYzKfazZEnPs10bdq4+yw4mlzf4=)
2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: /kzX8PrJjzHrZq5X99REjSO7NMt+jgnac8HPRQqKOMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:5e:b2:2d:6b:a9:da:fb:bd:0e:d5:f1:e1:1c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Mar 25 15:00:59 2026 GMT
Not After : Mar 26 15:00:59 2026 GMT
Subject: CN=b1deb8a81cf7c1e2ceb547412eb822cf1b3b137d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:6a:5a:c9:e0:9e:89:f0:ea:fe:8c:22:f6:
d9:8f:c0:0f:6f:31:41:c5:10:a1:38:8c:39:64:b9:
a3:13:b6:be:24:49:e8:75:ce:7c:db:aa:c7:9d:c1:
d2:9c:a7:a5:ae:45:cf:6b:0c:92:7f:d3:af:0a:3f:
0e:fb:fd:5b:02:00:08:02:c8:3e:ba:33:8a:fc:82:
c1:77:79:68:96:2d:75:f6:6d:22:fa:33:9b:f7:fa:
00:cb:94:b6:25:a1:18:e1:fb:6a:1e:70:30:35:d6:
88:0f:38:46:48:52:1d:e5:a1:6b:dd:8e:c0:5f:a3:
29:67:27:aa:78:d0:67:3e:41:76:8c:84:0e:45:a8:
af:7b:73:13:c8:62:b7:ca:55:46:c1:8d:51:24:ef:
d9:30:4c:75:23:4d:61:28:c8:5b:69:dc:4d:3a:ca:
6e:03:95:7c:b0:73:9e:07:20:36:e4:9d:1d:0c:19:
ab:d9:58:d2:20:81:a5:4d:b9:9a:07:2b:a4:92:ca:
1c:ef:cf:b5:5d:db:12:96:bc:68:50:20:79:42:3b:
b9:77:08:42:d1:c3:6d:8b:62:a3:ab:3f:ce:23:19:
0a:d5:f2:7c:04:d0:b9:f7:f2:96:08:9d:68:e6:d2:
91:28:49:98:29:2e:c6:40:7d:c5:2f:08:5c:6c:7c:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DE:B8:A8:1C:F7:C1:E2:CE:B5:47:41:2E:B8:22:CF:1B:3B:13:7D
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c2:4b:6d:a6:ef:09:07:c8:3c:c8:33:d1:3e:56:52:fb:33:
4a:78:97:48:29:f6:5e:98:9b:2c:71:17:56:bd:14:e3:d6:24:
59:4c:20:d9:b4:ce:92:3f:e0:0a:87:99:fe:f3:37:8c:d5:53:
56:7c:b8:80:df:00:b2:55:41:5b:ad:33:6e:50:17:10:54:07:
9c:d0:20:24:63:98:18:5e:5a:c4:4d:8d:a9:fa:9e:c5:fc:a6:
e3:18:86:bb:3c:25:35:76:a3:94:ee:3c:26:00:50:7e:d2:4d:
c0:46:ed:d6:3a:d0:e0:02:2b:3c:e0:20:4a:b0:74:23:13:49:
a2:74:ad:a7:ca:53:d6:14:8d:8c:07:63:cc:bb:8c:c8:c7:8a:
50:8b:fa:75:05:33:c0:d5:3b:95:ef:e8:41:97:5d:50:0d:34:
34:37:7b:aa:bf:e7:e5:2b:ff:9e:36:76:3d:0f:30:19:01:53:
3d:57:a9:7e:fd:2e:58:d7:0b:db:b6:a4:2b:f5:2f:3c:52:58:
56:c2:7d:02:6e:c9:c8:b0:b5:5a:95:a3:66:e5:f4:df:49:9c:
ca:32:a0:61:be:43:39:96:ea:0e:15:f3:f3:ea:0f:a0:70:cc:
d7:5f:6c:10:2b:c0:82:3d:ae:6d:b5:c7:5c:b5:42:70:82:50:
79:81:27:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:31 2026 by rpki-client