Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
File: yGEQ5MdkHRgOjxkgrGX7788G18c.mft (raw, json)
Hash identifier: MwSjk+wRdMdx5IWhq74cPt6jYwuzIo8N2fOr5D3vHI0=
Subject key identifier: C5:7A:3F:EF:DC:AE:A1:CE:FB:0B:9F:BA:ED:09:07:EE:2F:F8:43:66
Authority key identifier: C8:61:10:E4:C7:64:1D:18:0E:8F:19:20:AC:65:FB:EF:CF:06:D7:C7
Certificate issuer: /CN=c86110e4c7641d180e8f1920ac65fbefcf06d7c7
Certificate serial: 019D269666D00C39383CD7D08552294B0F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
Manifest number: 0319
Signing time: Wed 25 Mar 2026 20:01:24 +0000
Manifest this update: Wed 25 Mar 2026 20:01:24 +0000
Manifest next update: Thu 26 Mar 2026 20:01:24 +0000
Files and hashes: 1: yGEQ5MdkHRgOjxkgrGX7788G18c.crl (hash: s0+ePKa4BlM76a2BSjFJZ5pu7K58CJA+0DMxbK1jacU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:66:d0:0c:39:38:3c:d7:d0:85:52:29:4b:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86110e4c7641d180e8f1920ac65fbefcf06d7c7
Validity
Not Before: Mar 25 20:01:24 2026 GMT
Not After : Mar 26 20:01:24 2026 GMT
Subject: CN=c57a3fefdcaea1cefb0b9fbaed0907ee2ff84366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:3a:3d:73:bc:a3:04:83:ba:db:e0:26:ff:
cb:6c:4d:ec:2b:f3:e1:2c:cb:4d:19:f3:05:3a:14:
4d:f6:bc:b6:d7:f0:bf:38:c2:f6:77:9b:8b:b3:be:
1a:4c:5e:9a:e4:dc:08:2a:7a:d4:03:b7:40:4d:ba:
01:97:52:4b:82:c6:5a:d5:1a:cc:3c:75:b8:f2:8c:
59:20:48:c0:a9:12:26:2c:ee:0b:05:37:dd:3b:e5:
dc:63:65:5a:e6:fa:3d:26:2a:00:d4:cb:a9:93:69:
09:e7:00:b5:50:5f:b5:18:01:2f:d0:e2:65:a2:35:
06:a9:22:f3:8f:ec:be:9c:d2:99:6e:65:6b:05:c8:
f1:58:e6:44:f3:d8:2a:b3:b9:30:31:cd:a6:5f:83:
0a:da:f1:3b:ff:cb:06:f8:e3:cf:de:af:8b:ca:42:
cf:e2:b5:65:bd:6c:8b:7d:1f:22:20:a9:57:65:09:
92:67:de:3d:88:10:1e:78:0d:dd:61:65:59:ed:a2:
81:66:94:bb:59:95:ae:ba:aa:39:a2:76:a6:bf:80:
38:4f:f9:a2:cb:e0:82:c8:e4:26:dd:26:13:9c:85:
d7:87:ef:35:4c:40:80:b3:6a:4d:60:55:ec:5b:53:
4f:e2:87:e5:23:49:82:bd:d9:d0:ed:b1:1c:d3:48:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7A:3F:EF:DC:AE:A1:CE:FB:0B:9F:BA:ED:09:07:EE:2F:F8:43:66
X509v3 Authority Key Identifier:
keyid:C8:61:10:E4:C7:64:1D:18:0E:8F:19:20:AC:65:FB:EF:CF:06:D7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4b:c6:a4:1d:c1:f2:03:0c:44:7b:e1:7f:86:e0:9b:b9:be:
66:d6:aa:55:b4:68:02:af:04:d1:52:12:a7:d9:09:ba:37:ab:
58:d1:3a:65:b1:9f:13:a6:46:c8:1f:50:be:fe:76:fa:26:9c:
8b:40:99:fa:bb:bb:57:e2:f4:1d:5f:a3:44:04:b4:f9:b2:b0:
bf:00:3e:ac:87:1d:85:2e:be:18:59:7a:f7:77:2b:52:ee:ab:
58:64:34:90:78:5b:e5:1d:82:0e:75:68:b3:9f:14:ef:e5:59:
1b:70:89:2b:55:4c:35:e3:8d:69:0b:b1:31:ba:6e:ab:0c:d3:
d6:17:c5:2c:04:78:35:4c:e3:82:dd:48:02:56:0d:fc:17:18:
85:a9:63:f1:5d:c3:9c:c3:87:63:3f:03:ad:b0:95:82:8b:32:
f2:78:03:7f:a2:3c:59:3a:dc:8b:ed:4a:cd:00:83:f6:77:8e:
73:d9:ab:53:a6:34:a9:be:41:6d:96:5b:65:a4:15:d3:fc:52:
7f:0c:38:33:53:b5:0f:fe:75:50:d8:8a:25:83:14:a7:34:9c:
6f:55:cf:47:2a:ca:72:9b:24:9c:c9:45:ea:d0:b7:12:33:89:
a6:68:a3:54:95:21:f4:3f:e1:e1:46:91:45:d3:c3:df:b9:a6:
1d:a8:4f:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlmbQDDk4PNfQhVIpSw+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NjExMGU0Yzc2NDFkMTgwZThmMTkyMGFjNjVmYmVmY2Yw
NmQ3YzcwHhcNMjYwMzI1MjAwMTI0WhcNMjYwMzI2MjAwMTI0WjAzMTEwLwYDVQQD
EyhjNTdhM2ZlZmRjYWVhMWNlZmIwYjlmYmFlZDA5MDdlZTJmZjg0MzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM46PXO8owSDutvgJv/LbE3sK/Ph
LMtNGfMFOhRN9ry21/C/OML2d5uLs74aTF6a5NwIKnrUA7dATboBl1JLgsZa1RrM
PHW48oxZIEjAqRImLO4LBTfdO+XcY2Va5vo9JioA1Mupk2kJ5wC1UF+1GAEv0OJl
ojUGqSLzj+y+nNKZbmVrBcjxWOZE89gqs7kwMc2mX4MK2vE7/8sG+OPP3q+LykLP
4rVlvWyLfR8iIKlXZQmSZ949iBAeeA3dYWVZ7aKBZpS7WZWuuqo5onamv4A4T/mi
y+CCyOQm3SYTnIXXh+81TECAs2pNYFXsW1NP4oflI0mCvdnQ7bEc00ityQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMV6P+/crqHO+wufuu0JB+4v+ENmMB8GA1UdIwQY
MBaAFMhhEOTHZB0YDo8ZIKxl++/PBtfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUdFUTVNZGtIUmdPanhrZ3JHWDc3ODhHMThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yMDhjMjUtZWRjZS00MTMxLWIzMWIt
NjZhNTJjN2M4YzAwLzEveUdFUTVNZGtIUmdPanhrZ3JHWDc3ODhHMThjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yMDhjMjUtZWRjZS00MTMxLWIzMWItNjZhNTJjN2M4YzAw
LzEveUdFUTVNZGtIUmdPanhrZ3JHWDc3ODhHMThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAskvGpB3B
8gMMRHvhf4bgm7m+ZtaqVbRoAq8E0VISp9kJujerWNE6ZbGfE6ZGyB9Qvv52+iac
i0CZ+ru7V+L0HV+jRAS0+bKwvwA+rIcdhS6+GFl693crUu6rWGQ0kHhb5R2CDnVo
s58U7+VZG3CJK1VMNeONaQuxMbpuqwzT1hfFLAR4NUzjgt1IAlYN/BcYhalj8V3D
nMOHYz8DrbCVgosy8ngDf6I8WTrci+1KzQCD9neOc9mrU6Y0qb5BbZZbZaQV0/xS
fww4M1O1D/51UNiKJYMUpzScb1XPRyrKcpsknMlF6tC3EjOJpmijVJUh9D/h4UaR
RdPD37mmHahPmQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:19 2026 by rpki-client