Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: 8dG/0pd6SnQtcTWPJzvjqFWoza6ViX2iZbJOV8bci3A=
Subject key identifier: D9:C9:CB:18:B6:83:B4:C8:CC:BD:9A:88:9A:5D:8E:14:5B:08:97:EC
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 019D2BF33EC9975401F392580D84F90F5E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 21:00:54 +0000
Manifest this update: Thu 26 Mar 2026 21:00:54 +0000
Manifest next update: Fri 27 Mar 2026 21:00:54 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: 7gVvPjr3J5oNwG81JkwPterFdcj+mwI2UHLqJqAtyoM=)
2: LbD2tYPsPC8uP37pndvidAshgOM.roa (hash: ePxnnXcYkNMYiZIwMvTVXJah+jChUGFP5Kv/37gIREs=)
3: yV2l8jCuUkBjhG1YrGK34ROvjco.roa (hash: OW+ZvGgaMJR1U5WGE2eB0o2w9cCprc/bpgV1/vZl/uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:3e:c9:97:54:01:f3:92:58:0d:84:f9:0f:5e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Mar 26 21:00:54 2026 GMT
Not After : Mar 27 21:00:54 2026 GMT
Subject: CN=d9c9cb18b683b4c8ccbd9a889a5d8e145b0897ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:2c:ee:1c:cf:5b:24:f0:c7:1f:38:e6:4f:
e3:2a:41:95:88:a6:46:30:dd:02:4d:ad:ff:c2:88:
96:05:a2:b5:8f:b6:e3:2a:d5:9d:8e:70:bb:af:43:
c0:f6:bc:85:38:ba:9d:09:30:7d:6f:ea:27:5d:e6:
c2:cf:e3:02:21:52:4b:f4:05:58:98:1a:ba:55:fa:
7d:95:c5:33:0b:41:b2:19:25:69:d7:26:bb:97:6c:
68:a8:fe:03:df:a2:70:de:e5:01:4a:ea:08:19:9c:
67:c5:4c:51:03:c5:0b:7b:ce:76:56:3f:48:42:32:
94:0f:10:8a:c0:76:1e:8f:f0:f0:ca:18:bc:a3:0d:
b0:e8:06:61:9f:1d:22:04:9e:dc:f9:81:4c:57:d3:
c6:20:69:b7:8a:a2:d4:75:4b:3c:05:db:78:5b:32:
5e:9b:6e:d0:66:6f:51:08:3b:b5:b3:24:db:8b:29:
07:97:1e:ab:db:41:84:f4:08:e1:0a:19:49:00:f2:
db:32:d2:46:10:59:0f:17:1c:bf:0a:a2:56:c3:67:
c6:34:94:69:e6:3a:74:57:d0:6d:62:6a:15:d1:a6:
63:11:91:6f:0a:66:86:63:ea:57:d1:0f:67:a7:8b:
49:ea:4b:bd:51:06:fd:a9:5d:08:ff:d3:35:bc:66:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C9:CB:18:B6:83:B4:C8:CC:BD:9A:88:9A:5D:8E:14:5B:08:97:EC
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:07:cc:16:ef:b3:40:4a:8f:ff:dd:c7:23:2d:e6:0c:e8:73:
c8:45:41:59:79:a3:21:33:80:66:b0:23:0a:9f:5e:ab:ef:41:
aa:2b:05:53:24:48:08:8d:aa:1a:b3:bb:24:f4:56:1f:03:56:
5f:2e:8a:ba:81:0c:91:c1:b3:48:36:62:cb:58:22:35:49:72:
43:42:13:6c:e7:9e:8b:1e:3e:2b:bb:9d:b1:12:f4:14:f7:9b:
0b:27:c3:68:f2:8e:f2:e8:b7:aa:86:94:34:5f:c9:eb:57:77:
a3:6c:b5:fc:3d:04:fc:75:c8:ff:e8:45:31:09:68:03:04:01:
bf:d2:8b:a7:05:83:99:64:12:b6:af:ed:20:fe:34:7b:d3:dd:
53:87:f0:93:f5:92:e7:fa:c2:f1:eb:fc:1b:6a:c6:b3:b3:0c:
b8:33:0a:6d:f5:69:08:ba:24:b3:49:53:57:16:50:16:1d:0f:
c7:08:1c:c8:9c:64:8f:b1:c4:75:54:24:9b:1e:23:c7:2b:fd:
2b:b6:be:7d:75:11:f7:e0:74:1d:8b:9e:e5:2b:53:38:e3:8d:
b2:7e:0d:82:d8:57:dd:a0:fd:82:80:55:5b:fe:f7:a5:4a:8c:
0e:3e:30:9f:2c:98:a1:9c:86:6d:f9:81:6d:4a:ea:ab:38:c5:
b8:65:f3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:07:26 2026 by rpki-client