Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier: UrzMPXeGvi0MtdVW01kdhqnc3vvlAXy1uTuW2GZfr/o=
Subject key identifier: 0C:61:B2:6D:74:36:DB:69:BF:73:03:91:B3:85:9A:B3:F7:C2:FD:1F
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 019D25F1DDDFAC60943899FE679211292067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number: 18A6
Signing time: Wed 25 Mar 2026 17:01:41 +0000
Manifest this update: Wed 25 Mar 2026 17:01:41 +0000
Manifest next update: Thu 26 Mar 2026 17:01:41 +0000
Files and hashes: 1: CpcMl2eeE4kivr7Y_KcbhMBQkho.roa (hash: 3J5pbfw99fV9VldJRwXaEGP1Raiiwe48ExCYD8L4uko=)
2: gECFr_lCurPKmYUZbnBME6fDRJI.roa (hash: zPv5BFtY7ZttrJvpLgH3TkAwwjvJ39/Ya/LcQ77bi7A=)
3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: oTJDoGM57YEMkNPfIJclvrZg4BN1ow/liFmVtKha4EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:dd:df:ac:60:94:38:99:fe:67:92:11:29:20:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Mar 25 17:01:41 2026 GMT
Not After : Mar 26 17:01:41 2026 GMT
Subject: CN=0c61b26d7436db69bf730391b3859ab3f7c2fd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:05:55:69:f4:a0:f9:b8:e5:7b:1a:2f:47:
0f:5e:16:d3:b0:21:ac:b1:27:40:38:46:e5:f2:cd:
32:07:f1:3c:58:82:44:bb:09:30:69:42:e8:ee:56:
31:93:5c:24:f1:9c:38:c3:36:8b:c7:4b:b0:d6:34:
c6:13:d4:4e:30:06:f3:24:9d:4f:f8:7f:42:89:45:
7d:42:fc:e2:03:eb:a0:f6:53:32:98:80:9f:cb:6a:
1d:a2:da:f4:6e:2f:72:a7:4a:48:5a:0d:e1:fe:00:
08:6a:39:27:d8:51:71:b6:56:5c:13:a0:86:1b:b0:
da:c9:e5:08:a7:b0:fa:8e:1d:8c:ac:fe:8f:a8:a9:
6e:06:27:80:fd:cc:77:58:29:42:1b:fa:ba:9f:ae:
d6:1e:16:98:9f:d3:6c:c8:5e:cf:db:5a:31:88:df:
b3:e4:d6:75:94:56:c5:9e:f1:58:0c:f8:8a:a1:8b:
ff:f4:a0:2a:95:39:46:3f:89:af:97:74:f4:51:bb:
8c:b4:23:09:8f:43:27:a1:a2:4d:ad:a5:a7:66:b8:
bd:cb:68:bc:89:6b:56:ff:50:4d:02:46:76:5b:45:
cf:ca:dc:47:53:3b:20:0f:4e:02:c8:83:5e:39:c8:
d1:bd:39:b4:71:18:5d:35:28:35:17:2f:cf:22:27:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:61:B2:6D:74:36:DB:69:BF:73:03:91:B3:85:9A:B3:F7:C2:FD:1F
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1f:51:ca:e2:03:1f:92:50:4c:2e:87:90:88:53:4c:52:41:
4e:c8:cf:17:53:b7:4f:6d:9a:05:d0:86:8b:c0:b0:65:fa:51:
b5:77:0f:46:10:c9:bd:de:5c:11:bc:19:9e:70:d5:97:60:89:
fd:d5:d0:e7:76:c0:1d:e9:c7:79:fd:c2:cc:f3:c4:8b:46:0d:
45:70:83:d1:21:90:c3:f7:05:00:62:19:cc:c7:b1:00:45:8e:
13:41:fb:6f:02:0b:f0:77:5f:36:03:8e:27:66:31:f7:3f:cc:
a7:50:00:c3:10:d1:92:98:bb:92:4d:24:c1:b4:90:4e:30:ca:
e8:74:58:28:f0:48:f0:e1:8d:e7:61:03:e3:72:ad:20:a7:5f:
35:24:97:ab:d5:8c:d1:d7:08:e7:b4:d8:7a:6c:27:fa:25:0e:
1b:bb:c8:fe:64:2c:72:a2:17:6d:65:fc:8d:18:3a:df:47:1c:
2e:ea:be:bb:08:b9:b6:d3:13:97:7d:76:36:33:c1:c7:20:5d:
08:49:8f:30:12:9a:50:91:d7:91:cc:f1:80:78:6f:18:b6:8c:
ec:96:75:f0:59:d8:18:f5:2f:29:10:af:27:67:f7:7a:77:b0:
80:74:99:5f:fa:9f:3d:f0:31:e4:30:3d:ed:62:78:88:12:66:
f2:b6:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:52 2026 by rpki-client