Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File: YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier: Ce7CiIMAzwvrx4o2qYJIx0uYxayTAlE3/nDSrScJ79I=
Subject key identifier: F3:C2:60:0D:72:34:D5:6F:3F:6C:25:CD:1A:51:04:21:15:9B:F6:58
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 019D2583CFBD528B0046152718841B149488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number: 15CE
Signing time: Wed 25 Mar 2026 15:01:28 +0000
Manifest this update: Wed 25 Mar 2026 15:01:28 +0000
Manifest next update: Thu 26 Mar 2026 15:01:28 +0000
Files and hashes: 1: 63PrN8mXH55oBJX7rIWVabUHvQ8.roa (hash: pZ+Bby5HjRIxKd0d8Pj3TvHaCe/jpasI4E0danVgwOc=)
2: VFxdBR1dDp8JOaA1PwgX0ZNJHzY.roa (hash: 6wRzyykqCCxdI4kZ8Ht7eIQbCtfAS/CYcPHcXOqhj1U=)
3: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: RRdM+pAXtXRk+AelOJ/NrtnBuYaMbAbV7ejYxtctXRA=)
4: wMe5BRxHj63l88AX7uqgxLFEk3g.roa (hash: FNreVADMygUCDT7FyB7Y998XcQmAqj39+EJa5oP6CCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:cf:bd:52:8b:00:46:15:27:18:84:1b:14:94:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Mar 25 15:01:28 2026 GMT
Not After : Mar 26 15:01:28 2026 GMT
Subject: CN=f3c2600d7234d56f3f6c25cd1a510421159bf658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:53:f4:1b:c9:7b:ef:7f:0b:53:64:90:6b:
5e:90:89:d3:41:d5:1d:9c:c9:d5:6e:d3:6b:be:fa:
4b:a5:4b:5e:7d:bf:23:5d:91:b6:ca:b5:f4:91:f7:
71:e7:1b:4b:b6:d7:5f:63:45:9e:f2:53:cf:a5:15:
a3:a4:23:96:3c:99:1b:b9:85:cb:0a:1c:6f:6a:ac:
e8:1a:82:76:34:ce:69:8a:96:7b:4d:39:a2:7f:98:
a6:1a:4f:79:3a:4e:eb:42:ac:08:fd:6d:cc:42:69:
9e:17:2a:b2:8e:eb:24:8c:a5:ab:ca:bf:f7:af:74:
38:77:2d:55:40:24:b9:81:bf:36:f9:ad:32:3f:ba:
90:55:bd:b5:b5:be:dc:53:8b:1d:88:d2:14:cb:73:
69:c9:59:71:25:f0:d6:78:f7:3f:30:6e:e7:da:0d:
4e:23:37:4e:47:4f:96:11:a2:53:51:d8:b8:da:c2:
9d:86:7d:5a:a7:a8:05:79:70:8a:58:68:b6:95:16:
40:3b:15:11:0a:4d:a3:4a:1d:16:38:a2:b3:5e:56:
6d:92:f0:97:29:a1:90:c0:68:8b:1b:d3:45:eb:9e:
66:6d:63:9a:3c:9c:b1:af:a6:c5:c1:ec:f6:0a:19:
8b:ba:33:20:bd:de:03:79:90:b0:46:59:b1:b3:11:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:60:0D:72:34:D5:6F:3F:6C:25:CD:1A:51:04:21:15:9B:F6:58
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5d:cd:17:59:9f:ec:eb:31:d0:5d:a8:ab:ba:44:63:ea:b6:
f4:2f:37:1f:2b:a7:90:f1:52:f5:a2:7b:40:94:b9:e4:e1:b0:
dc:7e:84:4b:41:7a:76:b4:4f:07:44:f0:d1:98:72:d4:b3:7b:
d3:e0:f9:9c:a7:f5:12:8c:60:ba:2b:56:fe:c6:00:cd:48:f6:
7c:5b:0d:7d:92:50:0c:17:91:42:79:72:a6:fb:97:ef:82:e0:
61:aa:7e:37:42:99:90:a3:cf:38:ab:be:47:76:88:ad:35:fc:
e6:90:38:88:ab:0b:1b:66:2d:a2:25:94:62:26:92:91:3a:7b:
0d:21:04:aa:23:1e:68:c3:9e:79:a0:15:61:93:2f:55:5d:e2:
20:74:4e:f8:b7:69:d9:20:bf:34:51:e7:2e:f3:1b:40:35:2c:
69:98:20:6c:01:ec:b6:38:87:a8:ec:fc:36:32:62:15:d5:80:
03:07:80:90:20:ee:fb:6e:33:a0:d0:1a:97:ce:6d:e6:22:6c:
c6:a8:c5:b4:f9:a0:5b:f8:85:e0:0a:5f:b2:b8:11:75:56:23:
df:ff:df:62:7f:6e:df:7c:71:b5:b8:35:03:54:ef:ab:6e:05:
5e:56:15:f7:21:35:c7:c7:1b:0d:39:35:ac:bc:92:10:c2:56:
bd:59:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:45 2026 by rpki-client