Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
File: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft (raw, json)
Hash identifier: Fb9PmSCYcMo789ZWiw7nfVwfWNHwsXZ38blINhIQ4Nk=
Subject key identifier: 56:68:B9:BA:6F:E2:98:94:F7:F6:07:C6:84:C2:55:EA:47:CF:9D:68
Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
Certificate issuer: /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Certificate serial: 019D326311A6BFC6ABA49E64797C7DA90262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
Manifest number: 0432
Signing time: Sat 28 Mar 2026 03:00:46 +0000
Manifest this update: Sat 28 Mar 2026 03:00:46 +0000
Manifest next update: Sun 29 Mar 2026 03:00:46 +0000
Files and hashes: 1: 1-tZEy19BYfVf-5wZ51FQXwuOEhw.roa (hash: /nAeBMYlXnQjZhhvuAHNLWLzGOzbbDnBysJXkWN1VRY=)
2: fhE6sPigjHqQymOx_07DpW-kE1A.roa (hash: nhb6C1pl90rN5e/RFq9dkJcLPr8IuI/iDY7Kr68b/2U=)
3: q4uZxE3KkC0inDgHTmM59wbNnqY.roa (hash: w6RhV4LCKX7pRPd2Vmf4e6OYIboTowPiLjjbc9D8/Z4=)
4: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl (hash: jBsSjD0wHpz4110oI8SDHCI/Wjv1vrje8DWggeL33Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:11:a6:bf:c6:ab:a4:9e:64:79:7c:7d:a9:02:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Validity
Not Before: Mar 28 03:00:46 2026 GMT
Not After : Mar 29 03:00:46 2026 GMT
Subject: CN=5668b9ba6fe29894f7f607c684c255ea47cf9d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:c2:2e:51:33:70:88:0d:01:74:7a:e1:e6:
1e:a4:52:51:48:66:65:a7:14:53:c2:a9:b6:76:d0:
4f:89:9a:4a:49:1c:45:ef:28:c0:f6:32:b7:8b:f2:
1e:78:61:4c:d5:ed:9e:4e:88:47:9b:8d:2c:9d:12:
ca:d9:c5:a0:f4:df:6a:37:3a:3f:2b:f5:ac:71:94:
b3:65:a9:11:d6:79:18:f7:2e:90:9c:7e:49:b6:3b:
1e:4c:25:4e:b1:f8:58:08:04:41:9c:9b:ba:24:ea:
3c:36:7f:e3:a1:e0:e1:4a:7a:aa:2d:b9:c3:01:53:
80:14:cc:ab:b8:43:ed:66:d1:8d:6c:23:cf:ee:64:
21:d5:82:e3:69:97:f6:6c:9e:cd:e6:64:e1:8d:89:
1c:b8:f4:3e:82:92:61:11:4b:54:ba:ba:75:2f:e3:
df:e2:1c:4e:14:8f:47:73:de:dd:99:03:ce:65:68:
62:df:20:ff:6b:e5:59:e0:11:49:fa:16:23:c6:1f:
8d:23:db:93:0a:38:82:a7:5c:1c:3f:38:c2:cf:bb:
6b:ee:67:3b:4b:af:64:0e:b8:06:e2:b3:34:cf:a7:
03:e7:4c:aa:c7:6e:53:d1:d7:4f:eb:bf:07:25:d2:
14:0c:1d:2b:d4:f1:0c:65:c2:5e:cf:7d:5b:60:2e:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:68:B9:BA:6F:E2:98:94:F7:F6:07:C6:84:C2:55:EA:47:CF:9D:68
X509v3 Authority Key Identifier:
keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1d:b9:5f:c6:b4:fe:17:9c:41:65:f2:71:04:f3:55:15:34:
df:2d:61:7e:ad:54:02:90:55:77:b6:3b:32:d0:19:ab:06:f4:
be:c2:67:41:19:b3:f2:2f:1c:ee:30:57:ac:9f:1d:e3:de:1b:
05:11:18:88:36:14:a9:38:e8:e5:c5:52:49:6a:59:e8:da:e8:
ed:ba:d9:6f:cb:1f:ba:ca:eb:65:33:e6:46:5d:a8:e4:fb:db:
cc:81:ca:24:63:7d:26:c0:ca:d1:9d:1b:25:b0:57:16:54:a1:
ed:c2:d8:e9:e2:42:e2:ec:62:0f:2c:37:30:ec:c1:72:b3:62:
50:7d:de:e2:d3:98:4b:3b:54:07:52:60:ab:e9:c5:55:65:2b:
2b:a0:be:ce:26:cd:11:94:eb:ac:e3:9b:e4:a2:16:58:f1:df:
ca:84:14:f1:ce:ce:ad:53:e0:ad:43:1f:2f:a0:87:46:4f:3f:
61:0e:fd:1e:85:fb:f1:b3:17:42:2a:ac:1a:69:ce:7f:72:52:
fd:3f:5d:0b:aa:e1:46:95:8e:fa:02:ac:cb:98:75:a2:93:70:
e7:8b:c8:cc:34:8f:32:8d:7b:0e:4b:ab:a1:b3:fe:55:f5:ec:
0c:0a:b3:9c:5d:e7:aa:0f:2e:a3:da:c6:15:97:97:ef:80:87:
8c:84:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:16 2026 by rpki-client