Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
File: yxODRz6KqHJwaPx1LgYOPb9j4O8.mft (raw, json)
Hash identifier: ZBD1iNJ69Fb0rIHo0kMINcKSodtKbQ9L7n1SuHvg9Qg=
Subject key identifier: 35:90:6D:E9:68:71:D3:9D:BD:11:E8:78:7D:11:70:D6:A1:85:C3:35
Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
Certificate issuer: /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Certificate serial: 019D288445483BB11486E65F4C47AE0C680F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
Manifest number: 0A43
Signing time: Thu 26 Mar 2026 05:00:50 +0000
Manifest this update: Thu 26 Mar 2026 05:00:50 +0000
Manifest next update: Fri 27 Mar 2026 05:00:50 +0000
Files and hashes: 1: 153fjxVtV5IdmULjsKFsyho7xsA.roa (hash: sMHTNIGNQvUhkdN5VlDx3F2+I4FUHbgADAQUyA3sCa0=)
2: yxODRz6KqHJwaPx1LgYOPb9j4O8.crl (hash: lfT138/82nSpDdStx4OBlPAkhnetl0YNW5hEw9KgXqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:45:48:3b:b1:14:86:e6:5f:4c:47:ae:0c:68:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Validity
Not Before: Mar 26 05:00:50 2026 GMT
Not After : Mar 27 05:00:50 2026 GMT
Subject: CN=35906de96871d39dbd11e8787d1170d6a185c335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:5a:a9:3f:37:f2:30:38:dc:31:69:80:3a:
60:21:70:c5:cb:a2:d7:39:78:d0:39:c5:6e:f3:b0:
41:d0:55:3f:eb:0d:83:06:0e:40:81:28:37:f3:7f:
a8:9d:e1:e2:7b:c6:8c:65:96:dd:6f:21:24:77:25:
07:71:cf:5e:c8:25:be:46:bd:cf:32:14:d3:c2:27:
21:f3:61:40:7e:37:42:aa:60:f3:7a:98:ef:f8:12:
4d:14:92:a0:c9:e0:5a:be:3b:d2:41:cb:b0:41:d6:
e6:33:76:34:43:1a:ed:e3:f0:5e:2a:ce:c8:f3:df:
37:4a:16:0f:a8:60:51:b2:06:d2:83:c2:d5:fa:37:
d0:e9:98:ed:bc:df:ee:55:e4:cc:f8:34:dd:8d:b1:
63:e5:d5:4d:bd:3b:63:83:76:cb:0a:0d:ec:7e:4f:
87:82:2a:cd:94:b0:39:15:54:36:2d:07:71:74:1f:
da:e2:ad:b8:be:80:08:95:74:50:c4:7b:3a:b6:6a:
10:81:1f:25:91:53:0e:a1:37:37:bc:a5:5a:26:1b:
1e:e6:8e:c8:32:72:9f:90:39:e8:c2:80:3b:69:bd:
c2:09:7f:5a:11:09:e1:f3:63:64:db:97:77:4c:aa:
a8:24:57:8c:3d:bd:40:0a:3f:b0:7b:22:40:c6:54:
bd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:90:6D:E9:68:71:D3:9D:BD:11:E8:78:7D:11:70:D6:A1:85:C3:35
X509v3 Authority Key Identifier:
keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c9:bf:bd:23:57:98:47:3d:42:8f:60:f9:67:af:0f:d2:01:
73:be:5d:04:21:0f:81:c0:4d:19:e4:ef:2c:2b:54:19:a2:5b:
7c:20:f8:d7:57:12:5c:dc:0a:f9:99:59:29:b2:5d:7f:7d:46:
13:f5:7a:a9:58:1e:2f:7d:db:77:4e:21:45:e7:ce:47:d9:ce:
57:86:5c:e3:10:90:eb:94:bf:4e:b4:04:84:ab:f8:11:fe:e5:
6e:f2:3d:1f:7f:11:a0:80:30:a1:c3:74:8b:75:30:14:83:68:
9d:f8:c7:aa:a8:37:a9:fd:13:a5:86:81:6d:30:3e:1f:86:ee:
f2:70:3a:7f:ba:84:01:2e:ad:4e:ae:bd:f4:c1:77:09:e3:ec:
d9:4b:a5:94:17:e0:fd:87:29:30:69:a1:89:f1:a0:86:df:c9:
23:72:f5:ff:28:bd:92:34:95:ab:15:1e:e5:92:b8:8d:36:9e:
6e:22:22:f9:00:fc:ef:d9:95:93:b0:d8:d3:ce:15:77:14:0d:
4f:bc:a5:48:3d:54:9c:d9:fa:fb:a9:65:06:48:d6:1d:00:89:
79:9f:6c:35:c4:eb:64:ff:02:23:e3:6d:a3:7c:f9:bd:e1:d6:
7d:71:62:d7:ba:36:5c:c2:b8:21:ab:66:4f:18:69:7a:80:a2:
c9:84:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:09 2026 by rpki-client