Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: gjcHK6MBSS7+5t3bIsOX6vQng3Ysu8DCvMBvndjPslk=
Subject key identifier: 3A:71:80:8A:AC:8C:3E:B6:0D:1A:AE:FC:84:63:AE:36:46:AB:39:1B
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 019D270457ED3DF6E2329FABEFFC50745520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:29 +0000
Manifest this update: Wed 25 Mar 2026 22:01:29 +0000
Manifest next update: Thu 26 Mar 2026 22:01:29 +0000
Files and hashes: 1: Nb1S4rIJytNZ9EyG1Fq9oCGchKk.roa (hash: E0krvPCL+AC9YfaXQIlTvkeNOsHIRhUhj8ZYv72osZM=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: s4sBM4IR0NXZU3mDFshSJ4mU/zATxdGkonMinakjc1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:57:ed:3d:f6:e2:32:9f:ab:ef:fc:50:74:55:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Mar 25 22:01:29 2026 GMT
Not After : Mar 26 22:01:29 2026 GMT
Subject: CN=3a71808aac8c3eb60d1aaefc8463ae3646ab391b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6b:b0:7a:b2:68:53:6f:a3:d8:0b:38:28:e1:
89:b2:54:e1:ad:60:8a:c5:3c:9d:e1:16:ab:66:60:
60:5b:af:c5:63:16:e0:17:c5:79:76:dd:64:59:80:
96:c5:ed:2c:93:aa:df:b1:d7:24:69:56:0a:a0:e5:
41:03:6a:d3:8e:0d:8e:d6:01:db:8c:4b:b8:d6:34:
33:28:06:32:fd:9c:d1:59:3f:f2:50:04:02:f5:a1:
36:dc:b7:d2:b1:79:78:b2:cd:82:be:2a:c9:67:e7:
7d:3c:f2:ae:a0:e2:fe:88:07:54:ff:13:ba:0a:c1:
49:8d:77:3c:d1:d6:9e:52:e3:09:56:9d:b9:a9:46:
c8:cc:02:4f:d5:b6:76:df:86:82:e8:5c:b7:2d:e6:
5b:92:ab:33:24:0c:eb:51:a6:68:70:a2:ca:03:74:
04:0a:a9:23:b2:dc:3d:c9:57:72:52:39:cc:05:86:
82:fe:f4:1c:b0:dc:ac:d6:60:0a:ae:35:6a:03:aa:
12:c7:10:9e:a2:f7:e9:47:2e:fe:65:5e:b4:d9:06:
c4:5f:76:ca:78:53:97:90:63:8f:d6:59:b7:56:22:
2b:62:78:da:89:19:9d:39:42:13:9c:bf:ce:7c:1f:
78:49:aa:fc:9e:b6:43:b6:1e:03:d8:a3:8f:7a:31:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:71:80:8A:AC:8C:3E:B6:0D:1A:AE:FC:84:63:AE:36:46:AB:39:1B
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:50:68:35:6e:72:f3:b4:c6:72:a1:6d:f1:61:96:d4:7c:05:
44:46:dc:d2:9b:fd:87:f7:c4:be:86:e9:2d:c9:2a:93:1b:9f:
44:c2:82:e6:39:84:38:ec:5f:a0:6f:3c:4f:7d:f8:c4:e4:a1:
28:d2:cd:a3:35:0f:1f:65:b3:15:4d:0b:32:d4:fd:8a:72:e8:
3a:fd:ec:12:15:0b:9d:2f:6a:9a:49:e6:9e:56:cc:2e:19:b6:
81:17:43:b6:42:69:2a:2c:d4:42:a2:a8:33:ed:d5:89:34:f9:
09:26:06:1f:29:4a:0c:7c:d7:85:f7:97:20:d0:4f:61:7c:ee:
c8:61:8f:d8:7b:e6:56:4d:ca:21:bf:ac:8a:8d:7f:ad:bc:89:
87:fa:9c:94:fb:df:56:98:94:76:d1:e9:1e:3b:fe:84:6b:a7:
3c:58:64:5d:58:61:bf:1c:77:57:33:df:8e:9a:7d:7b:1f:38:
7f:15:7f:77:49:76:8c:e8:7b:0c:e6:37:ec:d5:8f:01:d9:0d:
e6:d0:d7:bd:83:7f:95:9b:97:9b:ed:54:77:db:a2:93:51:e5:
f9:4e:8d:cc:49:f5:fd:ca:33:cf:a6:38:3a:cc:26:0f:24:f8:
87:68:2d:fa:b9:f9:6c:ba:7c:8c:46:7f:eb:f7:f7:2c:dc:c5:
f5:7a:f3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:34 2026 by rpki-client