Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier: pSStRykToIyp4MzcAgDy7+VGtkJqzgVUNiQ5Y+pm3sY=
Subject key identifier: 31:95:EA:8F:CA:9C:A6:7F:28:12:11:CD:2E:86:D0:EE:42:A5:63:6B
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 019D3307D8E8B7F2A9D1B680CFAC93C0C329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number: 1890
Signing time: Sat 28 Mar 2026 06:00:45 +0000
Manifest this update: Sat 28 Mar 2026 06:00:45 +0000
Manifest next update: Sun 29 Mar 2026 06:00:45 +0000
Files and hashes: 1: _xsLd4qUBjb6_7VD2WkixJfaVoY.roa (hash: nohQUdIFn7a7lR0P0bYRkbo26wNDU405wKs7TmIgPaA=)
2: jyhNKA-sqNdbKhKjDCM2oFmxAKA.asa (hash: +kK89jyXB9T4Lltl2vWeU7yjctVLp1sfe0s6KqTiyYE=)
3: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: w0g5XgeMNy25GO1OYDGqz+vDY/T0Hli0eWJ43Lk+sCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:d8:e8:b7:f2:a9:d1:b6:80:cf:ac:93:c0:c3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: Mar 28 06:00:45 2026 GMT
Not After : Mar 29 06:00:45 2026 GMT
Subject: CN=3195ea8fca9ca67f281211cd2e86d0ee42a5636b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:6d:12:0c:c3:42:53:17:cd:cf:b9:20:16:
81:54:b5:34:36:0e:af:51:0d:b0:a8:d7:c1:ba:a7:
e8:85:ed:a9:13:34:c5:af:6d:96:87:36:d3:bf:15:
6b:f9:d3:a9:55:b5:38:18:f2:54:14:49:b7:ea:6a:
df:08:4a:34:11:08:80:78:23:f1:8f:90:b7:a4:77:
98:e2:0b:8c:03:49:d0:6d:49:63:2f:06:cf:41:10:
8f:e4:fd:36:36:e4:19:f7:89:1e:74:e6:ec:24:bb:
0d:60:de:90:cf:9b:2d:36:af:11:a3:6b:35:99:96:
7b:90:00:09:aa:17:67:d7:a3:15:6a:bc:0c:20:47:
6d:27:d2:a9:06:c1:8d:c6:8f:40:b3:30:24:fa:25:
4c:a5:ea:2f:0a:17:bc:e3:85:c2:9c:1a:35:42:ba:
00:c8:42:c5:d5:b3:23:f1:2c:cd:c0:9d:bd:31:0e:
3a:5b:b8:c9:bf:e3:65:ad:9e:90:b1:73:47:c2:4a:
0a:c7:73:a0:51:01:95:95:41:a2:f3:e9:3f:e2:cc:
ec:b4:e1:f1:a8:96:16:3c:e1:38:4d:5d:32:d7:7d:
62:ac:af:5a:b2:8f:32:0d:67:f5:4e:27:aa:af:f6:
f8:55:5d:ed:bf:98:0d:18:56:ed:ad:0c:2a:ae:6b:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:95:EA:8F:CA:9C:A6:7F:28:12:11:CD:2E:86:D0:EE:42:A5:63:6B
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ad:b9:f6:c2:64:2b:fe:4c:da:b7:08:77:a8:ba:b6:bf:fc:
c4:f6:8c:ad:43:7b:b6:61:f6:3b:b4:9f:b8:cd:49:57:fd:26:
1a:16:d8:cc:5d:99:b6:91:88:e3:17:1f:a6:01:b0:59:69:0b:
2d:88:33:8e:6d:0b:1f:3d:0d:1c:94:91:ae:e3:6d:a0:2d:04:
55:0b:1a:7c:61:4f:3b:f5:0e:f1:8b:62:d7:9a:ad:43:37:dc:
76:54:ab:08:aa:cc:11:ac:90:cc:31:90:28:02:a1:cc:d8:e9:
3b:21:33:29:a8:70:01:b6:d4:0b:fb:0d:cc:ae:dd:5b:6b:52:
f8:70:52:80:92:3c:3e:a4:c1:ec:31:c0:b4:54:06:4a:e6:e1:
98:4f:1d:27:9c:49:55:44:ee:54:91:fc:15:93:b5:a0:53:20:
15:98:51:31:52:bb:6e:8c:76:35:93:92:32:32:e8:df:8e:4d:
2a:65:1b:30:af:62:1c:70:16:e8:d9:e5:d8:91:c0:af:b1:0b:
42:0d:2e:ad:72:05:af:83:fd:c4:63:d2:0d:4a:92:40:c7:dd:
0d:e5:88:38:77:8e:f0:fc:4a:b0:94:59:07:de:ae:a4:d5:fb:
54:62:8f:a0:e1:1c:b4:41:25:0b:d0:21:eb:a3:fa:3e:4a:6d:
a5:bc:7c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:16 2026 by rpki-client