Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: q/kaSUbEl14sde+Yq+ePxq/ydP4v7sIz3KSpT6gpxdA=
Subject key identifier: F5:8C:ED:8A:C5:91:41:6D:65:EA:31:99:DD:D5:EE:1B:90:02:9E:07
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 019D29617AD0FE192E84E3485FF2AE5FF0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:02:27 +0000
Manifest this update: Thu 26 Mar 2026 09:02:27 +0000
Manifest next update: Fri 27 Mar 2026 09:02:27 +0000
Files and hashes: 1: B_Yga8dFIroZi4oBY8FBGZQGvOc.roa (hash: Xqwgsd+G6A3vjt3PhRx4O36PvKDRIPU7eS7eBDKIq0I=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: LiYWmWFAVDjblIPKUPpWd22aYj8b3lGW3a8Ymmtzs0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:7a:d0:fe:19:2e:84:e3:48:5f:f2:ae:5f:f0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Mar 26 09:02:27 2026 GMT
Not After : Mar 27 09:02:27 2026 GMT
Subject: CN=f58ced8ac591416d65ea3199ddd5ee1b90029e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:76:aa:8a:75:0a:b3:54:4d:be:1a:6b:10:
7d:a6:2b:f2:c3:a0:49:44:d1:8e:a0:23:9e:9f:f5:
f6:60:64:e8:67:5e:0d:d6:9c:28:13:dc:b1:43:cc:
ca:b6:25:4c:27:69:95:19:65:98:1a:fc:be:7a:ad:
ee:15:9f:b8:26:4f:86:e4:cb:5d:ed:88:ea:d9:25:
5c:46:fa:6a:ca:91:5c:61:d2:d7:1a:89:5d:f7:0e:
b0:d0:d9:b4:3b:aa:07:83:74:9b:1f:d7:36:b9:4e:
41:4c:75:7b:42:e5:8a:21:48:b4:d4:eb:38:b7:25:
91:a2:b5:ca:d0:18:49:a8:93:e5:59:77:56:92:b8:
83:de:8c:96:70:5d:5f:82:24:84:7f:fc:45:34:73:
26:75:c7:f6:bd:63:0f:2e:c3:e1:41:02:3f:b0:67:
7d:2b:cc:38:63:0a:99:34:cc:ba:7a:fc:6a:ba:56:
44:18:10:54:23:db:22:48:fc:fc:71:16:78:1b:ee:
9d:93:83:f8:55:4d:2e:fb:60:f2:c2:7a:be:54:8b:
80:e3:05:e5:65:c3:22:01:e1:d7:f4:6b:6b:5c:45:
04:23:2c:6c:af:cb:2c:e3:4a:5b:02:30:f4:fd:13:
08:53:c0:55:08:02:f3:67:e1:2c:28:60:a2:10:c3:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8C:ED:8A:C5:91:41:6D:65:EA:31:99:DD:D5:EE:1B:90:02:9E:07
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:63:6f:d1:ee:f0:e2:35:21:40:3a:30:1b:99:a6:c5:ce:08:
1a:d9:1e:27:28:ec:ff:d3:67:7b:d8:45:02:b5:07:57:df:7f:
45:e2:a5:54:08:b4:1c:15:f9:96:17:63:a4:7b:96:4b:94:8b:
15:d0:ee:a9:a9:e3:9f:00:73:bc:b4:78:27:e9:dc:e9:14:b9:
ba:14:4c:2b:87:a2:01:db:21:36:2c:f8:a6:e7:a8:e5:fc:cd:
a5:77:51:b2:28:c2:ea:c2:0e:5b:2a:45:23:1e:68:a5:59:6e:
b4:c8:7b:d8:51:c5:4f:0d:5b:c9:c2:e5:61:e8:31:0c:47:11:
67:65:51:14:f9:6b:a3:60:a8:7f:fb:36:82:36:c8:94:89:46:
b6:11:01:31:ba:72:b6:df:d1:9f:2c:96:1d:0d:68:46:31:6c:
01:35:dd:de:eb:88:b4:3d:f0:d5:a4:9c:b6:9b:fb:26:58:90:
f9:74:c3:5e:58:ae:40:59:e3:06:0c:f6:51:7e:b9:9a:99:c4:
41:1c:9d:c6:95:30:53:fd:02:78:6f:77:85:3d:c3:d9:72:35:
ac:f0:c2:35:08:a4:30:84:11:be:2a:18:f1:ec:bb:00:69:54:
44:88:ba:3c:7b:5b:ec:1c:ba:1f:9d:7c:56:13:76:2d:99:d7:
6e:c5:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:37 2026 by rpki-client