Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
File: YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft (raw, json)
Hash identifier: +Xp8ZEiIefI7MRJafheAXjliqjmv+3mbtEBKfPyF0ZY=
Subject key identifier: 88:BF:BE:20:6D:17:DE:82:07:AD:A4:12:4A:53:2D:F8:BB:34:58:59
Authority key identifier: 62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
Certificate issuer: /CN=6290e6b0cdd7f4986be518d890a8493153504eda
Certificate serial: 019D24DECC9F3FB700FFB409CC5D05D6F07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
Manifest number: B8
Signing time: Wed 25 Mar 2026 12:01:14 +0000
Manifest this update: Wed 25 Mar 2026 12:01:14 +0000
Manifest next update: Thu 26 Mar 2026 12:01:14 +0000
Files and hashes: 1: Ci_joaoGd-NiKdKN-xSlHZZHjsU.asa (hash: w5DoIaMOdhrQzX31C6GNjSJG7G7L2zsb0JalX8bgFEE=)
2: YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl (hash: Z94EPxv2PPx5ZkIe4p1WX+/r1MN4v/OQ9EZ/ROj31r0=)
3: jyKuE2XBeuJrzXa_q0tmSaVEGSw.roa (hash: /T26sfmgIuFdLLHz0t8HyV2eonc//D9WC+03dI2ySjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:cc:9f:3f:b7:00:ff:b4:09:cc:5d:05:d6:f0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6290e6b0cdd7f4986be518d890a8493153504eda
Validity
Not Before: Mar 25 12:01:14 2026 GMT
Not After : Mar 26 12:01:14 2026 GMT
Subject: CN=88bfbe206d17de8207ada4124a532df8bb345859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:1f:13:e2:e2:17:e5:38:36:cf:cc:da:52:
cb:97:93:47:c0:d8:b7:49:a9:27:8b:0a:da:12:50:
5e:87:a9:64:d7:75:5c:cd:17:60:e6:68:fa:88:d1:
75:05:9e:dc:77:f6:f7:a0:3e:a0:c9:5e:ce:79:f8:
e7:5d:4f:79:1b:a0:83:cd:a5:ab:7b:33:1b:48:8a:
44:9a:84:01:9c:58:42:37:03:e0:04:7d:f7:c6:94:
3f:b3:85:be:3b:d3:a6:36:1c:be:b6:8d:7f:a5:57:
23:ff:89:09:18:33:d4:eb:f0:f3:51:0c:71:64:ef:
60:71:7c:3a:a0:63:60:ef:09:f9:41:f6:ad:ea:90:
87:a3:a2:eb:e4:57:43:b0:0d:d3:83:72:e9:5c:df:
51:ce:43:f6:fc:c1:b2:95:7e:91:7f:f3:19:00:8d:
96:2b:5a:38:01:5b:5f:c8:46:37:1c:69:83:c5:42:
1a:a4:56:82:92:e4:96:93:55:2b:25:89:4c:ef:78:
f3:91:42:79:cc:ba:14:cc:d1:8b:bb:62:b0:b5:62:
34:12:04:a9:4e:f9:cd:a1:80:6c:80:30:e1:b6:68:
74:ef:b8:8b:30:fb:78:28:5d:95:35:ad:ce:5a:37:
34:87:89:30:20:bc:11:5f:17:5b:21:21:ef:7e:f2:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BF:BE:20:6D:17:DE:82:07:AD:A4:12:4A:53:2D:F8:BB:34:58:59
X509v3 Authority Key Identifier:
keyid:62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:36:b8:8b:0b:54:a7:3a:9c:63:0e:b0:8e:f3:fc:2f:05:1c:
a8:53:ad:84:ed:2d:73:93:d5:7b:d7:e2:04:32:69:54:2b:dc:
7a:66:9b:83:e2:60:a2:54:cc:ef:50:ab:50:18:6d:6f:29:e7:
23:44:df:c8:49:21:b8:f1:0c:be:87:b6:22:a3:20:4a:be:bb:
a2:c6:e9:c0:4a:a7:52:f3:0b:6f:35:76:a9:67:b8:95:7a:e4:
22:d5:bc:6c:04:a3:a6:ea:21:f2:24:1c:ff:8e:95:1c:26:0f:
dd:b2:c7:9d:1c:14:5a:c8:c3:15:b1:47:70:16:d4:62:e3:f0:
09:df:03:e1:3b:78:99:ef:ef:b7:b1:c4:1f:07:fa:6d:6e:4a:
ee:bb:dc:28:e1:ed:de:63:5a:df:4e:06:f3:6a:78:3b:83:5c:
51:f8:46:d5:21:76:00:54:37:e5:b0:66:34:79:2e:81:f2:ad:
c1:40:a6:e0:c9:37:a9:f7:92:ba:dd:15:31:01:d4:08:4c:9d:
e9:de:d3:6a:89:89:d2:c9:93:23:bb:45:02:a8:03:08:d5:6a:
aa:6a:be:0d:db:09:5c:8c:cf:40:1c:5e:a2:cd:af:4f:06:10:
7f:c8:54:91:31:32:75:49:97:5e:43:ab:29:98:cb:ea:c9:b1:
cc:06:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:33 2026 by rpki-client