Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier: 29BUcqselepaS/7ZWkAh9xkOcKxqK6egaY6Jzpoxqis=
Subject key identifier: 3E:00:A0:41:B2:7B:71:39:41:EE:C4:B6:87:57:48:7E:D3:04:3C:06
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 019D2772AF43702BA53A8EC547DF706873B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:02:00 +0000
Manifest this update: Thu 26 Mar 2026 00:02:00 +0000
Manifest next update: Fri 27 Mar 2026 00:02:00 +0000
Files and hashes: 1: 2FrN58Szgu73eOaW5wzREjA1APU.roa (hash: eg4laZvDlSkpaWdKinkI+Xun4MLQfCIFg3SA+VvwdzM=)
2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: LAwmIl4OV2kFxkbXzYdHdxxpXYfSK+c115vI8DHrOaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:af:43:70:2b:a5:3a:8e:c5:47:df:70:68:73:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Mar 26 00:02:00 2026 GMT
Not After : Mar 27 00:02:00 2026 GMT
Subject: CN=3e00a041b27b713941eec4b68757487ed3043c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:b3:5d:85:0d:00:39:8b:8b:85:d4:fd:25:
99:00:31:9f:46:0c:ba:c9:4d:67:df:37:ef:e2:83:
7b:e6:88:79:34:66:40:f2:be:27:5e:40:53:79:79:
1b:3e:bb:ee:19:78:05:2b:d4:ee:ff:ae:b1:54:77:
b9:5a:a8:47:db:18:3c:c8:52:3e:70:ae:0b:4f:e6:
7b:f4:d9:76:7c:03:77:e9:03:bf:a5:16:5c:87:44:
97:ac:f6:ce:c6:2c:72:f3:6b:fa:34:28:cb:92:9c:
b3:40:35:c9:74:4e:88:47:0d:fc:04:76:b9:06:4b:
74:1f:5e:9a:21:57:9f:1a:61:f2:77:9b:80:f4:8f:
0e:c7:1f:7d:5e:1d:f7:7f:d2:c0:ee:64:26:79:9c:
53:d4:9d:3a:ec:38:e3:e2:08:78:f7:19:21:bd:3b:
1e:67:87:40:13:c0:fe:f7:76:88:7a:c3:df:1c:42:
4a:8e:c1:b0:5b:9d:2b:84:22:45:f7:9b:d1:f6:09:
b4:15:d4:ed:f9:44:4d:1e:e8:2c:29:d3:e2:e3:89:
43:7f:e1:11:8f:50:64:9a:b8:42:21:a7:b5:a6:1f:
aa:84:d5:1f:7d:4d:e7:1c:db:86:52:41:7b:64:ed:
0e:89:95:6a:48:02:27:15:31:e1:2e:47:23:24:01:
dc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:00:A0:41:B2:7B:71:39:41:EE:C4:B6:87:57:48:7E:D3:04:3C:06
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:39:1b:29:dc:b5:17:c4:07:96:be:49:b8:30:3b:03:cf:8f:
75:03:e2:ce:94:03:6a:03:63:94:08:2a:ac:d5:52:3b:8d:20:
64:6e:9b:6a:9f:0a:f9:63:34:2f:0e:3f:03:5e:9b:57:a9:8e:
28:34:2c:aa:f8:91:0c:ee:65:ed:00:64:14:19:ed:56:ee:15:
8c:34:16:4b:11:49:7a:fb:cb:36:7d:9e:7f:b3:53:93:01:3f:
59:7d:de:d6:75:8b:63:99:5b:ab:a3:01:b6:d7:1e:b2:b9:dd:
40:24:b6:1c:13:f1:f1:b4:34:1c:8f:8c:68:ff:5f:54:2d:76:
22:f6:43:19:d1:4e:8a:46:1b:ae:b6:3d:96:2b:bf:e2:c6:be:
d8:da:7a:dd:9b:b1:37:18:a0:88:51:11:2a:a7:08:50:c9:22:
1b:05:26:06:86:c2:7c:42:42:b4:90:c9:bb:80:61:5b:a0:d0:
7b:80:de:f9:e4:b6:d6:30:eb:94:1a:66:13:73:d8:78:39:fc:
07:31:99:8f:a0:b3:a1:06:f0:73:20:86:4c:74:4e:a9:d3:a5:
84:c2:cd:7f:9f:b0:22:50:8b:de:68:21:f7:1d:5b:a2:b9:28:
20:81:6f:c3:09:ac:25:b5:32:42:4b:4d:76:19:fc:10:cb:5e:
a7:8b:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:27 2026 by rpki-client