Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier: YCdZfKxzO85N0EbAB2fph/jTLQNL8FhL8mNncyAbzJE=
Subject key identifier: 2A:B6:EE:AB:E3:70:B3:6F:CE:C1:48:F7:42:38:84:B2:27:E4:34:09
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 019D2A044C569A1828668837BDA84F22AD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number: 05E3
Signing time: Thu 26 Mar 2026 12:00:17 +0000
Manifest this update: Thu 26 Mar 2026 12:00:17 +0000
Manifest next update: Fri 27 Mar 2026 12:00:17 +0000
Files and hashes: 1: TuLRBXz6EERScy5OEhGKTfByxKY.roa (hash: 4zWLjSSgQ/CzE+D8xtj4xcI0MuMoMFUDlb+Cl92io8o=)
2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: wSC5CQ8usxpftPOupAO2RRsYnxdhnUPmLZ/QO3HANn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:4c:56:9a:18:28:66:88:37:bd:a8:4f:22:ad:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: Mar 26 12:00:17 2026 GMT
Not After : Mar 27 12:00:17 2026 GMT
Subject: CN=2ab6eeabe370b36fcec148f7423884b227e43409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:80:c3:10:e1:0b:50:31:33:80:26:80:95:
a6:92:3c:06:bc:01:24:f3:d5:9d:3e:1a:07:d4:38:
a7:ba:ca:c8:d6:d6:f8:fe:6e:8e:4f:d7:e9:30:40:
63:ec:d0:b8:f0:2c:27:64:75:82:67:1d:ac:b8:84:
79:e0:66:88:dc:a0:af:57:60:19:8b:d8:da:e9:22:
21:91:13:35:04:31:61:70:bd:d0:fc:8b:6d:be:8b:
a9:07:5c:81:81:82:e6:73:ae:79:d4:24:df:40:48:
58:d9:3c:8f:14:13:5f:5e:6c:2e:6e:01:c3:ab:56:
06:c9:77:cb:ab:26:42:e7:2b:d0:06:2c:62:22:0b:
b9:e4:fd:5e:6f:68:67:3f:f2:04:08:fb:ff:10:74:
0c:8b:12:1b:64:0b:04:75:90:c6:7c:59:fb:e4:eb:
ae:6d:14:4a:ed:38:88:a6:4b:0d:8c:24:ba:3c:c9:
7e:18:0d:61:fb:4b:18:0b:b4:4b:1d:78:cd:a3:16:
d6:a2:4a:4b:5a:5c:be:d7:21:1f:8a:7c:86:31:d1:
13:71:4b:5f:01:b0:45:2d:c3:80:08:ad:fc:9c:5a:
a2:01:7d:b5:8a:a1:cc:b6:d1:be:34:d4:a1:e0:3d:
3e:c0:95:d5:95:02:b6:50:5d:97:55:03:e1:2c:ef:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B6:EE:AB:E3:70:B3:6F:CE:C1:48:F7:42:38:84:B2:27:E4:34:09
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0c:70:43:0e:e4:04:d1:ef:89:96:2e:f9:04:d3:34:83:d4:
10:a5:a8:e1:36:8f:5e:8c:05:57:a4:6e:1b:0b:c9:73:06:f6:
fb:e8:7a:3a:ed:cf:1f:21:89:16:70:4b:16:5d:bd:ef:27:9d:
f4:71:91:ae:f0:5a:94:d4:12:8d:1f:55:b6:e0:c0:98:7a:c6:
4b:49:d0:d6:c9:8f:9c:89:34:36:8d:cd:fb:a6:b9:5a:41:6e:
39:25:ec:0f:b2:a8:48:73:e5:42:97:58:0e:95:76:18:6b:cc:
4e:36:9e:97:29:8a:87:f1:42:52:03:fc:eb:56:16:20:dd:d3:
99:b1:36:93:2b:85:40:6e:cf:50:85:d2:0b:c6:cf:ed:8b:d2:
c1:8b:6e:0b:fc:b9:ee:0d:19:f7:63:37:43:40:f0:dc:7f:d4:
bd:b6:aa:b0:ab:43:7d:e6:e0:42:1b:ae:3b:71:96:1d:e9:95:
46:86:ae:3e:87:13:6b:8e:85:d9:11:97:82:69:04:af:1e:32:
70:45:d0:8d:ad:79:f2:aa:6c:b8:1b:8a:e1:5f:fa:98:fe:fd:
69:f5:86:a4:3d:a9:b3:db:de:da:9c:01:a9:34:54:20:94:c6:
0a:1e:e4:15:5a:d5:8a:3d:04:48:9f:34:06:29:a8:f5:51:39:
f9:9c:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:57 2026 by rpki-client