Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
File: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft (raw, json)
Hash identifier: hajeuTYl4ia9plO3+fh11aPEoZp4j8SMXowz9T4/m3I=
Subject key identifier: 03:38:40:D1:20:FE:4D:45:C6:FA:D9:B5:48:5E:A3:6C:86:00:4D:F0
Authority key identifier: C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
Certificate issuer: /CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Certificate serial: 019D270468689D65FDDC387D164CB9F79658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
Manifest number: 0401
Signing time: Wed 25 Mar 2026 22:01:33 +0000
Manifest this update: Wed 25 Mar 2026 22:01:33 +0000
Manifest next update: Thu 26 Mar 2026 22:01:33 +0000
Files and hashes: 1: Yqw8nqYWjqFUz5Vz5_cXTd2EZJE.roa (hash: c6hadjikHVcvC+Q5pJmMMnFQCoRVJRf9GgAQl95ZwLY=)
2: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl (hash: So1KcAJ6ScmE7VV9NKOzYb7bAvA9byi1sq1xoUk4+TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:68:68:9d:65:fd:dc:38:7d:16:4c:b9:f7:96:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Validity
Not Before: Mar 25 22:01:33 2026 GMT
Not After : Mar 26 22:01:33 2026 GMT
Subject: CN=033840d120fe4d45c6fad9b5485ea36c86004df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:35:3a:fb:7b:7c:b3:f7:d7:6c:1e:4b:8d:12:
9d:9e:98:23:ac:18:e0:f1:42:96:93:36:05:48:78:
c8:78:b6:70:69:09:f1:10:b8:56:39:c8:36:5b:91:
97:5e:05:93:f3:99:be:4c:41:d6:f8:c0:54:76:fe:
a2:80:aa:66:26:94:86:ec:ae:e1:24:1d:77:77:e0:
2f:6e:17:bf:3d:2d:4f:36:17:20:f1:f5:90:d1:80:
13:a8:47:87:8c:7e:5f:13:25:39:30:a1:67:6d:66:
99:db:e7:a7:bf:fd:b5:b9:93:a3:30:c1:4e:e4:f5:
21:38:a3:6e:ef:d2:20:25:b5:73:b8:34:20:78:79:
5a:f1:e8:53:50:e8:4a:46:5a:b9:7f:2c:c4:9b:7e:
fb:e7:f3:98:62:0b:51:42:b5:0c:14:d4:a0:79:4f:
ac:c9:0c:9e:47:c4:c5:03:34:72:88:7f:2c:e5:79:
19:0f:be:b6:23:0b:f3:cc:65:2b:1f:a4:35:f5:2b:
95:79:3b:c7:fe:17:40:3b:7c:c0:c3:3b:79:a3:60:
d6:c6:e7:f0:e2:2e:57:22:ea:5e:24:ee:94:be:1a:
a8:b5:c1:bd:79:38:2a:72:4e:20:b4:11:16:be:d6:
b7:3a:34:f5:e6:b5:41:08:77:d6:cd:f1:80:6e:b9:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:38:40:D1:20:FE:4D:45:C6:FA:D9:B5:48:5E:A3:6C:86:00:4D:F0
X509v3 Authority Key Identifier:
keyid:C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:52:6a:e2:6c:f3:cf:8f:30:17:7b:62:5a:46:41:98:8f:91:
be:d2:17:68:06:a4:3b:05:2c:04:56:2e:c4:a8:cb:b9:71:8e:
64:82:4f:3f:88:81:91:27:51:f0:8a:d6:e2:ad:c3:e0:7c:ea:
b8:e3:14:ea:37:ab:bd:64:ae:d6:3c:74:79:2b:5f:ba:8c:12:
c5:2e:02:0a:db:2d:8e:9c:98:fd:3d:07:b4:2c:41:ad:69:d7:
b3:69:e0:62:0b:6c:79:d7:97:46:62:da:1f:b1:5e:30:dc:01:
7e:ad:04:86:27:65:d2:43:01:c1:c0:3d:39:8e:43:ff:96:46:
7e:8a:5c:95:55:71:5f:b7:ee:6c:4f:37:51:b8:c1:7c:c9:6a:
6b:da:47:9c:98:11:ef:39:a1:0e:f1:3a:96:9e:bf:a2:d2:36:
1f:fc:aa:08:17:d1:c5:2c:e5:2b:4a:81:4d:49:f4:0b:5d:40:
36:78:49:cf:c6:78:24:1c:ef:4f:3e:84:38:8d:ca:96:d6:47:
96:4a:48:c3:0a:42:06:45:4f:7b:8d:ee:55:09:36:8f:1d:55:
2d:a5:62:6b:7e:30:bf:3f:96:f2:ac:72:8c:e9:1e:af:46:32:
aa:3e:b3:2d:ea:36:36:11:1c:7a:f0:aa:2d:a6:67:b2:94:25:
09:e2:3d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:18 2026 by rpki-client