Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
File: yQs5SsYzN2B_obsOq6EUU6gx85g.mft (raw, json)
Hash identifier: 9B3a3gp2vr0ptm8cPS20qcf0n50p19tQ3NbgqM9F0wQ=
Subject key identifier: EF:83:D0:07:29:E8:B7:CD:1D:20:AB:0B:C3:58:66:B4:2C:77:4A:25
Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
Certificate issuer: /CN=c90b394ac63337607fa1bb0eaba11453a831f398
Certificate serial: 019D2A04F94107B05C9A42716CE0D0B8BE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
Manifest number: 0F26
Signing time: Thu 26 Mar 2026 12:01:02 +0000
Manifest this update: Thu 26 Mar 2026 12:01:02 +0000
Manifest next update: Fri 27 Mar 2026 12:01:02 +0000
Files and hashes: 1: XsUKN2cOhLRHhR3AtKfxWQhi9jo.roa (hash: 6oB/bvwt2D2mFpVBEQFtPNnqH7Wf192r6bul35x6h9A=)
2: yQs5SsYzN2B_obsOq6EUU6gx85g.crl (hash: m5H8HsE0vpVXbawFfIthPHa6HUwkDRiBUBQtvpz5VJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:f9:41:07:b0:5c:9a:42:71:6c:e0:d0:b8:be:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398
Validity
Not Before: Mar 26 12:01:02 2026 GMT
Not After : Mar 27 12:01:02 2026 GMT
Subject: CN=ef83d00729e8b7cd1d20ab0bc35866b42c774a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:c8:d1:58:78:bd:1a:20:8e:03:44:2d:fe:
11:33:31:e6:72:4f:65:68:b2:c0:42:bb:a6:10:68:
1b:28:b1:51:b4:38:a7:d7:ff:52:9e:c4:49:16:b4:
49:4d:cd:b6:f5:19:fb:1b:e5:23:8a:38:b2:0d:51:
fb:14:ef:53:b0:5b:c1:df:15:a6:86:b9:4d:b6:29:
77:bc:ee:65:c1:3e:a5:9e:32:65:6c:04:71:df:ee:
84:75:2b:a2:d1:ae:43:27:7a:34:0a:3b:7e:6f:8f:
2c:0a:ca:33:4e:f7:4d:5f:32:20:32:87:10:e1:5c:
17:8c:24:b3:19:3d:7f:51:84:72:6a:c4:37:63:12:
c1:94:5e:cc:94:48:76:e0:0e:62:b4:aa:75:77:b2:
7c:88:15:02:7e:b1:2b:13:52:24:97:ae:ff:8d:63:
de:d7:82:d5:00:ee:a8:57:11:fb:c6:1e:af:d1:2a:
48:e4:d0:2f:07:8b:ac:b6:97:a2:60:35:de:67:9d:
d6:c5:84:36:31:94:2b:4a:c0:34:23:62:e0:6a:75:
a5:92:29:cf:7b:20:1b:73:aa:f0:b7:55:61:80:f8:
27:b6:48:8f:b7:58:97:b3:b6:57:b8:70:35:25:84:
7b:c7:4f:fd:54:74:7c:af:51:b3:df:23:9d:a5:1d:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:83:D0:07:29:E8:B7:CD:1D:20:AB:0B:C3:58:66:B4:2C:77:4A:25
X509v3 Authority Key Identifier:
keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:83:10:8f:ac:03:6a:2e:d1:28:f1:0a:51:48:db:b2:91:d7:
db:51:8d:a3:ec:57:70:0b:71:b6:a5:8a:b3:d4:99:f2:45:f0:
3c:f2:80:33:5c:8c:e5:6d:a0:5e:c5:97:7c:0f:97:5f:d8:68:
04:d9:5e:98:77:9a:99:44:61:b2:d9:43:87:e8:da:9b:da:e8:
d5:91:a2:ed:4a:a9:8b:a4:e0:07:a2:ec:f0:3a:e9:27:c4:2e:
9f:54:6c:3e:fc:8b:a2:e3:0e:a9:d1:77:ea:a3:5d:62:35:fb:
30:3f:a6:da:71:ec:16:ec:b0:78:b8:24:86:09:87:c4:48:2c:
89:89:57:45:54:7f:03:1c:da:48:de:11:5c:1b:79:2e:49:a4:
ee:85:cb:71:27:c7:42:a7:b9:c1:c7:64:90:da:cc:4e:f4:77:
3d:88:b0:de:62:ce:a2:89:ee:69:03:57:96:27:bb:a0:ed:21:
01:8a:dd:c4:c9:89:c8:34:4f:ac:12:b1:c1:de:d6:0f:2b:2e:
fd:15:b9:ae:94:86:a7:0a:e3:92:20:4d:13:f1:e6:21:11:52:
ea:d1:00:a5:3c:9d:6f:b2:68:e2:0c:5f:2b:d5:99:9d:bd:a5:
c6:0f:96:31:44:a1:47:f2:be:11:2c:a5:b8:ae:39:23:1d:56:
62:cd:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:42:57 2026 by rpki-client