Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
File: Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json)
Hash identifier: y66+LmMfY5kLOhjJUWBy0bZtLwqh9zcIZBu9uimwjfI=
Subject key identifier: F7:71:29:23:0A:BF:29:1D:4B:C4:DD:1E:16:4E:6A:C9:AD:4F:F6:A1
Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722
Certificate serial: 019D2816686B205B390DA74189ED5FA1FF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
Manifest number: 0845
Signing time: Thu 26 Mar 2026 03:00:50 +0000
Manifest this update: Thu 26 Mar 2026 03:00:50 +0000
Manifest next update: Fri 27 Mar 2026 03:00:50 +0000
Files and hashes: 1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: LtubjLgOIh1RtVi6+g6H2a2cMs5fmycgIOaP6GU/mbU=)
2: eI-ehXddlcSy-ljw7tvO4bB6Wvw.roa (hash: IitlgjD1A9ywmqlI7KTae7u+H+3I3h+Rr83XGfruLVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:68:6b:20:5b:39:0d:a7:41:89:ed:5f:a1:ff:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722
Validity
Not Before: Mar 26 03:00:50 2026 GMT
Not After : Mar 27 03:00:50 2026 GMT
Subject: CN=f77129230abf291d4bc4dd1e164e6ac9ad4ff6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:c0:13:46:77:4b:b4:96:89:9d:7e:d7:2f:
24:74:1c:f3:65:f2:4e:90:3e:4b:79:59:8b:64:f5:
a4:f5:9a:fd:ba:e5:c3:ae:14:36:3e:15:12:dc:60:
ce:35:4a:d1:6b:ac:0e:5e:f0:c4:ba:ee:85:d3:e2:
41:b7:4c:b6:80:fb:28:12:59:8f:fe:99:2a:19:41:
b7:85:74:7c:88:6b:e3:54:62:d5:a4:03:a2:90:05:
02:2d:a4:19:c3:a6:fd:21:07:24:59:40:61:1b:d5:
b9:85:ca:e4:f5:45:3f:70:47:65:bf:65:f9:c9:23:
d5:83:0f:9a:81:80:d7:17:97:b9:74:c8:9a:b6:f6:
39:f1:18:f6:d7:34:48:f8:e1:a1:84:b4:c9:84:f4:
76:3d:ac:ad:0f:c0:7a:ce:fb:50:f8:8d:52:9b:d7:
9c:44:11:07:5a:3d:bc:4e:1b:65:c5:57:71:92:d8:
8b:f6:9a:ad:d9:5c:81:22:fc:44:fd:cb:30:2c:d8:
08:34:77:58:6f:df:c3:99:17:7a:3d:5b:90:fd:07:
a1:64:4d:a6:c6:e5:21:6f:f9:5a:39:f5:02:34:a7:
57:af:f7:ea:dc:6a:29:1e:69:69:74:78:cf:66:c4:
80:5c:2d:0a:e1:b0:da:1e:17:22:4f:ae:64:0c:1d:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:71:29:23:0A:BF:29:1D:4B:C4:DD:1E:16:4E:6A:C9:AD:4F:F6:A1
X509v3 Authority Key Identifier:
keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b5:28:b5:c9:ca:5c:70:3f:f3:ba:50:48:3d:a8:1c:b1:4a:
55:e6:cf:ba:08:22:e2:63:99:ba:95:08:b0:ff:31:dc:aa:07:
d0:ac:56:d0:8c:83:62:c7:2d:aa:d3:39:87:b6:ec:ff:22:4a:
c2:9b:2a:3c:80:68:df:62:a7:49:c4:65:3b:92:fc:6b:8b:0f:
d0:5a:a4:16:13:66:0d:41:16:11:58:96:88:0b:79:d0:fb:3f:
58:7f:f3:08:ef:c5:cd:ed:89:23:8c:41:65:98:6d:ff:59:be:
36:2a:49:b2:29:29:23:5a:73:be:71:91:a3:13:71:ad:1c:98:
04:6f:cb:c3:9a:ed:2a:6d:47:86:0e:19:fc:5e:c7:f6:f2:cb:
31:83:fd:00:1e:89:82:b9:1b:dc:1c:44:24:00:1a:3d:cf:18:
2e:fd:15:2e:67:6c:3c:c3:03:1b:b6:15:35:92:d4:a2:72:00:
27:f4:94:c9:93:3f:dc:fb:d1:aa:07:49:10:cc:8d:85:98:ee:
be:10:85:aa:5c:56:ac:73:7e:d4:81:01:da:91:8f:0d:67:d0:
24:4a:97:45:a3:91:d3:fa:30:95:87:29:88:24:cf:ec:a7:b7:
61:80:fe:7c:f5:af:4f:18:fa:e1:34:ff:44:e9:98:0f:ab:bc:
5f:44:84:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:18 2026 by rpki-client