Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: 7Is1JEllMGTPqrkr4slfJyDuSv0KTVAGwPUYMK1EXA8=
Subject key identifier: D4:B2:3E:5C:87:7D:B5:B9:AC:BD:93:05:5A:C9:65:F1:5E:6F:FA:64
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 019D27A88DBCD93A52D28B1404B457853993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 1226
Signing time: Thu 26 Mar 2026 01:00:50 +0000
Manifest this update: Thu 26 Mar 2026 01:00:50 +0000
Manifest next update: Fri 27 Mar 2026 01:00:50 +0000
Files and hashes: 1: 2N5xpRJZNXE8KzyralBufJCFAGk.roa (hash: Gqf6uvdiXISfNhnWADuNcf6vyOowNUUoaBaYKh4kdEc=)
2: sO9pZ5FwOgUvmAOslbboRpxPFe0.roa (hash: VzoA5+Tb86N+TDJqseTFSnd7RnKY9v3RHbW5iUpaNO4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: pTS5rGYHtnoOwO7vf+nYHeCLJ9Bex3OXUDI0DQvycGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:8d:bc:d9:3a:52:d2:8b:14:04:b4:57:85:39:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Mar 26 01:00:50 2026 GMT
Not After : Mar 27 01:00:50 2026 GMT
Subject: CN=d4b23e5c877db5b9acbd93055ac965f15e6ffa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:09:3a:d9:37:33:ec:a1:41:22:f8:51:09:
2b:c9:ba:3d:32:70:e7:96:31:74:54:86:58:ca:a2:
95:00:63:9a:df:17:ba:b5:ee:96:0e:64:ff:59:31:
a2:3e:af:6b:86:d3:00:7b:70:c7:e1:6c:45:4d:50:
89:ca:8e:c8:c4:85:e7:bf:f4:da:6a:09:f9:92:43:
1a:6a:09:c7:71:17:bb:84:7a:5d:7c:81:17:b5:74:
b5:29:20:0e:05:a6:64:bc:92:d4:8d:b5:71:80:2f:
7c:be:18:a8:e7:38:1f:54:4c:ae:a9:0c:a8:7e:5e:
4e:52:fa:af:ed:96:c2:7c:de:30:6f:46:61:c9:e9:
5d:d7:d9:60:48:68:f0:fc:69:21:eb:67:21:49:32:
fa:db:f4:2f:3e:ac:eb:1a:4a:65:96:a1:1e:88:77:
5f:80:d4:90:f8:6c:cb:6a:51:5c:92:ec:3b:62:6c:
64:5c:4d:a8:75:4d:3c:e0:f7:57:20:bb:77:c5:82:
84:3c:14:66:1b:43:54:49:c9:15:62:56:9c:8c:00:
be:f0:6c:3d:d9:30:30:0d:1a:dd:e5:fd:91:1c:9f:
06:44:da:b9:4f:66:88:98:4f:42:04:45:ac:a2:ca:
f5:24:fc:f0:05:dd:80:e6:84:02:43:66:eb:26:81:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B2:3E:5C:87:7D:B5:B9:AC:BD:93:05:5A:C9:65:F1:5E:6F:FA:64
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a0:71:10:e4:e8:74:28:c1:64:e1:15:11:38:14:25:92:05:
43:b8:ae:29:1c:1d:8b:ea:21:3f:7e:5a:ba:a0:ec:84:a2:1e:
5c:b0:dc:06:46:af:d7:52:e9:3d:16:8f:4e:77:63:90:b1:3b:
3b:67:30:35:7f:05:1c:74:58:bb:a6:41:b5:8f:ee:1b:5a:c6:
02:be:ce:95:fc:b6:97:71:e5:ce:02:3c:3d:c9:e1:de:b3:d2:
6f:c7:03:b4:fb:82:f6:3a:21:93:82:66:de:31:e7:c8:72:a7:
3f:9d:45:7c:c3:13:75:f7:9d:6d:37:42:28:a1:bb:ec:df:b6:
8b:37:ad:c0:2e:fe:bd:1a:31:02:a5:c4:5a:c7:05:38:be:73:
62:01:47:25:f8:f9:d7:9b:f6:44:02:eb:75:20:30:f7:c9:62:
b4:16:e5:e9:fc:a9:c3:82:47:ba:28:c9:85:2c:02:f1:12:03:
01:c4:5b:82:4e:b3:b5:f5:3b:e2:b5:aa:fb:e0:5b:60:62:e4:
e9:24:91:7e:31:4b:3f:55:bd:7b:d1:89:19:0b:d2:32:d8:ef:
52:5e:1d:ba:24:3c:ba:1c:0f:bf:86:0f:1a:6a:85:34:f7:58:
27:84:8f:5b:9c:20:ba:10:56:e8:bf:b2:9e:ae:ac:3e:4c:24:
38:48:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:22 2026 by rpki-client