Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier: YYMTuH97nvx+C3hHLzB9YkjVOagZxhpf/B/iUBHUZgg=
Subject key identifier: 66:D9:C7:D8:93:0E:81:51:85:7C:FB:41:36:58:9E:04:23:45:C3:D3
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 019D2929566E0DA665437C9D45D38C12F21B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number: 0DA9
Signing time: Thu 26 Mar 2026 08:01:08 +0000
Manifest this update: Thu 26 Mar 2026 08:01:08 +0000
Manifest next update: Fri 27 Mar 2026 08:01:08 +0000
Files and hashes: 1: 4NkVvtcGrZVKXcIHUXN3aX5aR-U.roa (hash: uUV3NRxzmHCDo1hNed6mKPC9qoNr+1AXHF3xP4nPhT8=)
2: CsyMHLJsqJsWQMS5RZVl3HT44Ig.roa (hash: eTv1DPwyjyPAv2oxMpOhG4oCNxnU96J8zTE8wkeBsrA=)
3: VX7ZDp6l2UyCZjm0hRN6nGJk9i8.roa (hash: B+CJtwt+tc0wqY8DQhcHcXdy6r3buq290Njel11LhmU=)
4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: 2PPreJE3A368CpT30BnxlFuk3Uhz1WNM4lLLcghqMFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:56:6e:0d:a6:65:43:7c:9d:45:d3:8c:12:f2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Mar 26 08:01:08 2026 GMT
Not After : Mar 27 08:01:08 2026 GMT
Subject: CN=66d9c7d8930e8151857cfb4136589e042345c3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:12:78:8d:b1:ee:dd:19:e4:91:d7:28:c2:
ce:32:d7:63:7b:db:80:34:97:51:ae:a7:a5:87:d9:
b0:b6:c1:23:1f:60:37:2e:2c:5f:69:4a:e8:09:90:
9d:d0:53:c0:d0:d8:e5:1b:d3:33:87:27:83:76:d3:
af:7f:3c:a2:7e:20:85:3b:88:82:8f:f2:54:ed:ea:
f4:0a:46:ba:ea:b4:06:2d:41:36:3b:d4:6d:ee:6f:
6b:e2:01:da:44:f1:71:00:14:34:51:15:8c:fa:b5:
2a:11:eb:98:ae:8a:9a:84:81:14:94:f6:c0:d4:20:
b0:bc:58:73:5b:36:c1:4a:26:b9:90:1a:36:51:d7:
9a:30:d3:6c:8b:7c:6a:ca:3c:6b:50:49:99:80:13:
76:70:13:77:ff:e8:a6:16:08:08:02:d9:3c:3d:a4:
56:a3:8a:3b:a7:ca:a7:bf:9c:cc:a7:76:04:9e:02:
c0:d5:6f:06:ac:96:1d:25:08:b1:98:73:50:d3:fa:
6c:69:61:04:78:ab:56:47:ea:2a:93:73:17:c0:4f:
99:07:5a:64:fa:21:45:6d:19:e1:5b:22:98:e5:64:
e1:ab:e5:fe:07:68:f9:68:d3:95:92:3a:5b:22:26:
c3:78:50:3b:ba:b3:61:85:18:25:0e:17:03:3a:1a:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D9:C7:D8:93:0E:81:51:85:7C:FB:41:36:58:9E:04:23:45:C3:D3
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:06:64:f6:fd:bf:70:60:31:0e:25:48:80:7b:e9:4c:32:ac:
79:25:8e:d3:96:db:35:c5:9a:96:0e:e7:71:5e:1a:9d:d4:28:
f2:b5:46:c9:47:17:0e:47:c8:9e:2c:7d:20:66:70:58:4b:18:
c7:4f:9b:bc:c0:81:70:2d:9d:d6:a5:8c:6e:d3:c6:31:81:2c:
24:60:84:89:1c:4e:db:b5:c7:ba:56:ca:c5:b8:84:81:d9:34:
3a:f4:3c:6c:a6:8a:d8:7c:51:21:97:f4:91:eb:25:40:57:54:
01:66:14:ea:de:6a:31:2e:49:df:54:36:1d:41:36:df:c4:03:
6b:bd:7a:83:2e:6e:df:2f:37:ce:10:2e:6e:99:55:95:96:4e:
73:ce:ca:5b:16:6d:49:6c:44:1d:78:34:21:6b:11:fd:6e:56:
3e:90:a3:8f:20:d0:9b:a8:89:44:a6:88:18:fb:4c:a9:6a:14:
85:6e:c5:63:66:ec:b9:7b:49:44:17:35:93:86:cc:fe:56:eb:
e4:3a:86:06:5b:f8:67:4c:0b:a7:9a:24:e6:6f:bd:9f:bb:4f:
89:e3:f7:b5:33:51:e8:aa:7a:b3:4a:b1:be:d3:46:c1:3e:61:
c7:be:06:32:ea:99:4e:60:94:59:9f:ba:8c:a0:80:df:26:07:
6f:b2:ee:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:49 2026 by rpki-client