Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
File: ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft (raw, json)
Hash identifier: tWwW+R7y8/CUNdudruJILTsEL444xb7x+b706U6JIlY=
Subject key identifier: 8A:2A:BF:A9:D1:55:00:42:EA:5C:FE:B7:E6:45:AA:E9:76:A1:92:64
Authority key identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
Certificate issuer: /CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Certificate serial: 019D29976A712739B734716FA89AE0FBF801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
Manifest number: 0300
Signing time: Thu 26 Mar 2026 10:01:22 +0000
Manifest this update: Thu 26 Mar 2026 10:01:22 +0000
Manifest next update: Fri 27 Mar 2026 10:01:22 +0000
Files and hashes: 1: aX-bCk9kbXqytG_4jbY-UgtjVKY.roa (hash: ZuwhAjD2QMVYYccyvC88HRDcRNRXFhvyNan7F7qqMoQ=)
2: ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl (hash: FkFdLRwrwBGiJNJcMqBNNziiTdhohbDA/8i5mSb9Bco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:6a:71:27:39:b7:34:71:6f:a8:9a:e0:fb:f8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Validity
Not Before: Mar 26 10:01:22 2026 GMT
Not After : Mar 27 10:01:22 2026 GMT
Subject: CN=8a2abfa9d1550042ea5cfeb7e645aae976a19264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:ba:1c:ca:c2:7c:52:5e:1d:c4:07:93:eb:
84:78:9f:29:17:85:d8:a0:bf:fe:bf:b4:f7:56:f0:
b0:8e:78:df:b5:88:32:a6:d2:d8:a8:0a:a0:d3:46:
54:f5:73:34:55:18:dc:51:fb:35:73:4a:8f:81:11:
6a:ec:78:77:5c:de:81:5e:ec:5d:ab:e9:1d:42:26:
ac:98:9e:89:10:e5:ce:e0:e9:28:5b:8c:36:ee:59:
22:f3:e6:22:13:5f:95:d5:08:cd:10:d2:6a:07:13:
47:ec:18:e2:4e:61:99:f8:91:1c:c7:8d:a5:f3:74:
1b:da:d7:77:c8:3e:fe:2f:84:da:f5:f9:4d:64:0c:
98:f4:cd:3a:a3:07:26:a6:5d:c0:cb:0b:25:be:e0:
a4:31:7f:03:3f:36:b9:f4:fe:22:48:57:cb:71:1b:
61:72:bd:35:0e:46:fb:a3:72:95:34:ee:01:62:9d:
bf:6e:73:c7:1f:fd:2b:e8:21:e1:bb:17:92:fa:55:
c2:4d:08:36:01:14:3e:76:3c:95:7e:2e:4b:2d:b4:
e3:ad:10:25:63:61:90:a5:4a:60:37:63:b9:66:30:
95:68:e3:5e:39:fb:c2:14:1f:4e:a0:db:3c:b3:93:
a1:a5:30:5e:ae:1a:14:7a:c6:ca:3b:9b:21:65:32:
53:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2A:BF:A9:D1:55:00:42:EA:5C:FE:B7:E6:45:AA:E9:76:A1:92:64
X509v3 Authority Key Identifier:
keyid:CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:45:40:62:90:ec:8e:b5:c1:6a:bb:cb:bc:47:a9:2c:02:d4:
3b:d6:af:19:2e:aa:6a:46:9d:17:f6:7e:c3:99:61:09:d0:94:
58:3a:62:32:b3:64:1e:05:ad:f9:8d:2f:39:11:00:b7:86:54:
fb:fe:31:e0:89:f4:31:9f:9b:d7:aa:40:85:27:12:26:c1:01:
5d:3a:19:3d:c3:56:d9:78:44:4d:7e:31:e2:ad:08:93:b9:28:
11:db:79:d0:27:cc:b0:33:59:40:b0:92:ca:0e:9e:14:78:3b:
6c:9a:5d:21:8d:0e:49:fc:bc:fe:1e:1b:9e:97:fb:8c:cc:b1:
db:7f:51:e0:f5:eb:02:e1:ea:b9:05:56:d2:23:03:92:ec:45:
1e:55:8c:08:49:55:89:2c:61:12:08:62:a3:ec:15:47:10:30:
de:3d:64:3d:3a:10:c4:c3:78:4b:28:c5:fe:e6:11:a6:e5:a8:
9e:e4:28:d4:53:50:7b:d2:a1:3b:60:6d:c6:3e:3a:8b:c1:fd:
26:e1:8a:ea:a7:b9:6c:c6:58:19:00:a6:14:b8:57:53:e7:a2:
53:a3:f5:0a:2a:ad:6f:92:9e:22:b3:29:3e:6c:de:b2:67:d6:
3e:45:49:0c:a8:c9:fd:db:bf:e4:33:3f:49:33:70:f3:ee:45:
43:48:9c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:18 2026 by rpki-client