Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier: E0VpZrr1t5u+Aln4d9iokp/wYZ8izd6/b9Cegzz+geM=
Subject key identifier: 70:23:3A:20:1D:5C:D0:85:A5:4D:62:C5:F5:D4:35:D1:A0:7F:E9:68
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial: 019D2771CBEFBB5D24FCA70B704D3B3483F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number: 1015
Signing time: Thu 26 Mar 2026 00:01:02 +0000
Manifest this update: Thu 26 Mar 2026 00:01:02 +0000
Manifest next update: Fri 27 Mar 2026 00:01:02 +0000
Files and hashes: 1: pkANJWQGRxeYUhe9QHaxt_kkCZ0.roa (hash: JQPpr1NgeNVkQnAHd4pZVUEgVBBePxibUcmbvm5s/ds=)
2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: FeMu17edQ43gHPtZ5e/GEMVBm7p857FR+uPQSgjvPWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:cb:ef:bb:5d:24:fc:a7:0b:70:4d:3b:34:83:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Validity
Not Before: Mar 26 00:01:02 2026 GMT
Not After : Mar 27 00:01:02 2026 GMT
Subject: CN=70233a201d5cd085a54d62c5f5d435d1a07fe968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:d4:b1:56:06:62:51:56:a9:42:17:7e:5d:
b9:3c:a6:cd:24:d3:7a:e0:03:9c:f0:7d:50:90:5f:
13:ba:73:3e:d2:e6:73:04:cc:6f:dc:c8:7c:b3:80:
a5:ec:86:90:7c:5d:c0:b0:67:5c:45:ce:af:2f:27:
47:4f:ce:15:9f:0d:d5:62:78:c6:2b:64:2a:a3:7a:
6f:1c:c8:e4:f8:78:60:c6:ae:06:7b:66:a6:68:45:
3d:51:03:31:a2:8b:aa:48:1c:0b:74:29:a9:74:35:
78:2e:c0:08:9f:fb:88:77:a9:a8:17:ea:a4:f5:5d:
ff:e6:fb:02:fd:d0:67:ca:66:8b:ce:27:63:7c:4f:
68:58:6f:9d:6c:01:e3:62:20:52:15:dc:37:65:07:
8c:4e:6a:c2:22:64:7d:d3:cf:3c:67:72:d6:bb:ac:
13:2a:61:c3:c7:ed:a9:6c:f1:01:76:9f:7a:d0:e5:
4b:7c:0e:2e:95:a8:fb:34:2a:93:40:53:1c:cb:92:
44:fd:8d:83:ac:63:f0:fa:42:ec:8f:51:c3:0c:b0:
c3:7e:49:c2:fc:0c:8f:33:7e:19:f1:76:8d:de:a9:
da:ef:48:f7:92:48:49:e8:4e:09:1c:31:89:4d:96:
cd:6e:a8:39:80:28:9d:b5:10:1c:e8:e7:c7:88:ee:
b5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:23:3A:20:1D:5C:D0:85:A5:4D:62:C5:F5:D4:35:D1:A0:7F:E9:68
X509v3 Authority Key Identifier:
keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:60:b9:13:3b:0f:6a:68:fd:c2:f4:fd:40:41:1b:b5:45:16:
45:d1:10:25:3c:f4:7a:0c:12:17:f6:cd:07:c1:f8:37:fd:b5:
cb:d3:af:48:13:60:9d:ca:95:e9:15:99:90:70:32:be:1b:73:
4c:85:8e:6d:6d:6c:da:34:33:27:b6:d7:ce:7c:9d:68:14:79:
4f:54:b7:1f:ab:03:8b:35:59:92:d4:28:fa:c5:bb:a3:e6:de:
d2:3d:2f:41:e7:6e:c3:37:fc:83:ae:82:91:86:e9:eb:5f:15:
63:5b:1e:a6:19:12:49:18:00:15:5a:7a:5c:dd:38:ed:4a:d9:
c5:4e:bb:cf:e9:61:8a:c7:d4:6d:89:33:69:eb:94:65:67:ce:
03:d0:28:a8:cd:5d:4a:d7:2b:4b:b4:d6:44:55:d7:dc:60:e6:
c0:e7:d4:d4:cd:4e:0c:31:6b:23:1c:15:2b:d2:7b:f8:25:5e:
04:0b:0b:7c:8d:e4:12:1b:7d:7a:66:7f:c9:9a:f8:50:32:3f:
b1:af:46:3d:d1:ce:68:e7:02:16:32:72:b2:e9:f9:be:0b:e8:
41:49:73:a6:78:2a:e4:17:17:ce:dc:03:d5:80:00:56:3d:11:
64:17:06:05:34:8e:ca:da:50:20:31:9b:38:a2:9d:17:b7:51:
5b:59:77:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:47 2026 by rpki-client