Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
File: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft (raw, json)
Hash identifier: 1OhTki/KSlGADYN0oDHACNE4X1lHbc5eh2RsNFi9pog=
Subject key identifier: 6F:EF:99:42:6E:4F:B1:7E:2E:2C:CA:67:89:DE:52:C7:A8:4A:8D:EE
Authority key identifier: 62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3
Certificate issuer: /CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
Certificate serial: 019D27DF56D5FAF37CB367E8876D36765456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
Manifest number: 0102
Signing time: Thu 26 Mar 2026 02:00:41 +0000
Manifest this update: Thu 26 Mar 2026 02:00:41 +0000
Manifest next update: Fri 27 Mar 2026 02:00:41 +0000
Files and hashes: 1: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl (hash: tfuRx2ES6ReloqpcCpv8qWadZ6ZnpwBTSMd3bNOPN0w=)
2: nURomofbDgSrxYM0O1_tcq9RI08.roa (hash: tbGTgdyklPOm5IjmielhkBjtWa6HmczItFnGfm4z+A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:56:d5:fa:f3:7c:b3:67:e8:87:6d:36:76:54:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
Validity
Not Before: Mar 26 02:00:41 2026 GMT
Not After : Mar 27 02:00:41 2026 GMT
Subject: CN=6fef99426e4fb17e2e2cca6789de52c7a84a8dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:09:a3:ae:a8:60:fd:81:cb:be:3d:38:ac:
2e:62:da:3f:ee:dc:12:e7:51:f4:72:b1:26:08:17:
cf:ee:27:c5:9c:96:e9:8a:37:a1:30:1f:a5:a4:13:
c1:d7:93:6b:41:3b:e1:7e:10:60:93:97:d0:20:7c:
76:ce:2b:55:07:64:f2:7f:1b:2f:dd:b0:cf:e4:a4:
5d:74:aa:8f:90:85:2e:50:e6:67:f1:95:ef:c0:23:
ff:b8:1c:40:cc:66:5f:47:0f:51:f4:bd:86:d6:5e:
cd:36:be:8a:e4:7d:64:b3:c4:e9:65:df:db:61:8d:
4f:ff:c3:8f:fb:de:42:3a:e8:88:0c:30:e5:a7:39:
d1:88:cf:17:46:c4:a2:3b:cc:cd:c4:8b:68:64:fd:
fb:bd:fd:c1:2c:bd:7e:1b:9c:03:53:69:6f:b1:d5:
c9:c7:9d:51:07:16:b1:73:ba:81:34:70:c3:1f:2a:
2d:c6:66:44:5d:0d:cd:c8:bc:47:93:cf:fa:2b:95:
ed:dd:9b:ac:a3:70:61:1c:81:d6:b0:99:6d:0d:23:
e9:92:35:df:60:93:5d:25:19:6f:18:06:7a:fe:e9:
ae:34:a1:8b:70:b2:f5:b8:a4:ea:04:27:cc:4e:52:
64:e5:f1:fe:e6:c3:92:fc:c2:8e:bd:b5:f5:d7:b1:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EF:99:42:6E:4F:B1:7E:2E:2C:CA:67:89:DE:52:C7:A8:4A:8D:EE
X509v3 Authority Key Identifier:
keyid:62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:44:bf:ba:db:87:33:39:35:ec:14:4c:fd:05:ef:70:3f:d5:
79:34:d7:7a:e7:80:cf:15:5d:e4:99:43:cb:c0:6c:d0:b8:14:
14:0d:64:ba:1c:cf:16:ea:50:34:6d:5f:07:af:20:33:f2:bd:
ec:4c:16:0e:4e:05:47:aa:3a:0c:94:a8:f3:63:72:eb:06:33:
b3:67:4c:85:82:72:5a:73:f8:50:42:32:3c:ff:4e:a9:4f:16:
f3:37:b2:58:cb:8e:49:db:79:0e:36:f7:76:66:92:1b:fc:5c:
96:c8:00:f2:ac:de:d7:b0:39:3e:67:d6:9e:20:42:ba:72:b0:
96:87:f7:93:20:3f:a0:49:ad:54:f8:5d:d9:f7:66:57:c1:56:
2e:1f:12:65:3c:f0:d7:dd:9d:66:23:fb:0c:62:e3:c4:d1:de:
3e:56:78:61:9c:eb:f3:d9:21:4c:c2:ea:ef:06:50:77:9b:c2:
eb:00:82:0c:70:32:fc:68:3a:f2:39:39:3d:6d:01:ad:9a:47:
d5:f9:8c:b5:81:56:76:df:23:69:0e:26:7c:d0:46:d2:e3:41:
42:29:88:57:eb:8c:7d:a1:f7:01:49:07:91:82:2a:cb:ce:24:
42:f6:b3:9c:dd:13:48:c1:91:4d:9f:bd:91:e3:4c:29:57:13:
c6:0a:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:54 2026 by rpki-client