Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: ArIjqrxn2ZlBovsH8IcsvKPsftnuYMH6XX8EMgIoCE0=
Subject key identifier: AC:C4:33:F2:9A:41:8B:AA:05:91:B8:D4:8B:BD:2F:6C:9A:73:CB:94
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 019D265F4E0E98DB12111C561D5EE13840F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 0CBE
Signing time: Wed 25 Mar 2026 19:01:13 +0000
Manifest this update: Wed 25 Mar 2026 19:01:13 +0000
Manifest next update: Thu 26 Mar 2026 19:01:13 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: 1Z0zwyzxIWlp77X46GWPbDg6JNa0wHcDJ3LTUju6AII=)
2: loy4dq4keQGVVjd_GZNqzZEFuGk.roa (hash: xIPUz5Sh2e4Af6AHs7cOizEtdk/KROc6aaXyJduVd/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:4e:0e:98:db:12:11:1c:56:1d:5e:e1:38:40:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Mar 25 19:01:13 2026 GMT
Not After : Mar 26 19:01:13 2026 GMT
Subject: CN=acc433f29a418baa0591b8d48bbd2f6c9a73cb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:a6:a4:53:9c:a2:a2:48:8c:6b:0e:ca:5f:
39:2a:02:4d:29:b1:2e:da:11:d5:3a:d2:26:17:b4:
66:8f:75:10:f4:6d:c4:14:83:78:45:4f:b5:20:8a:
38:88:d7:09:07:31:01:19:e6:7c:19:b5:a1:0d:97:
08:ce:5f:56:19:15:89:a0:74:f7:09:d6:9d:35:f8:
fa:8d:28:5a:d2:c7:6b:d2:62:0c:2b:41:a6:6f:83:
53:ff:43:bc:ea:80:01:0b:3a:80:86:25:2e:b8:e9:
8f:be:9b:af:13:a8:89:cf:c8:11:4d:b0:b4:3a:d3:
4f:e8:9d:8c:2e:20:c5:eb:55:a5:55:f4:04:35:7e:
d1:6a:57:08:bc:0c:a7:53:72:f6:a7:be:c5:e9:d5:
9a:95:4a:3c:03:92:03:62:cd:c0:a1:b1:a2:32:26:
53:d7:3c:3d:98:71:68:53:30:64:08:a1:c8:ea:33:
28:a9:45:30:ac:53:b2:cf:da:53:87:e5:00:a2:ab:
fa:05:16:5d:63:f2:34:dd:b8:9b:e0:27:0a:ef:78:
f2:8c:a5:21:c3:57:c2:2e:d7:74:54:35:55:4c:5b:
e0:67:00:d2:00:c3:76:3c:47:ca:30:47:4d:c2:7e:
c7:15:b3:14:45:92:cc:63:f0:6a:e6:a0:5b:9f:04:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C4:33:F2:9A:41:8B:AA:05:91:B8:D4:8B:BD:2F:6C:9A:73:CB:94
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0e:15:9e:bb:e8:08:bb:ad:02:63:ac:a3:3e:99:ba:0f:8f:
8d:5b:90:1e:04:9c:e7:2b:8e:ce:a2:27:48:c1:38:3c:0c:17:
32:6b:c5:42:b0:ef:fb:91:07:db:4b:28:b1:b2:b7:3e:94:60:
c8:06:35:8f:24:1d:86:31:27:a6:c1:cd:2a:69:40:e4:03:c5:
6d:13:a1:dc:d8:57:e4:57:9e:2b:09:89:26:92:ff:ec:51:2c:
79:9e:6a:e4:3e:59:93:30:29:27:be:a8:ed:17:63:ad:c6:ac:
8d:43:89:03:41:af:28:bb:a8:f2:90:4b:96:ed:86:2d:9d:c9:
74:6c:71:ac:1c:c5:63:c3:9e:bf:32:5e:54:a4:7e:5d:f3:70:
b7:65:f9:29:e5:7c:8a:b0:44:91:72:98:c9:70:4a:0b:34:06:
0e:33:1e:8e:a1:6a:f0:c4:f1:4d:e4:c7:20:c7:66:ac:a2:07:
25:39:76:3d:cb:82:85:a7:3d:d6:c4:8f:20:78:52:09:d8:47:
56:15:f7:f7:47:d3:f5:22:73:af:29:8f:4f:f1:ce:08:8e:f6:
17:cd:95:b7:c7:bb:71:5c:30:a1:11:ae:b3:ff:6d:89:f1:7b:
c3:9e:f9:b3:2c:e6:4c:01:7d:fc:28:e1:35:39:74:f6:11:f7:
3d:03:d8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:54 2026 by rpki-client