Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
File: YIH8-etwqw4f3KwJx_m7XgFMnb0.mft (raw, json)
Hash identifier: /4DOcMJ24Pf1ZdU/4heHo9cfCt7i2+d9PhduPsNPQjw=
Subject key identifier: 70:42:71:E2:32:33:A1:D0:2C:74:37:02:2A:32:50:04:B1:14:62:DE
Authority key identifier: 60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
Certificate issuer: /CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Certificate serial: 019D28BBE3136091E7BAC2F257884E5189C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
Manifest number: 0DE2
Signing time: Thu 26 Mar 2026 06:01:35 +0000
Manifest this update: Thu 26 Mar 2026 06:01:35 +0000
Manifest next update: Fri 27 Mar 2026 06:01:35 +0000
Files and hashes: 1: YIH8-etwqw4f3KwJx_m7XgFMnb0.crl (hash: s7zzRd+ZN5eubpektfG7UFSGwUdKTmJ6QnMRjWKZGCs=)
2: i1wzJi411R8A7tdxRjJMFITH3kg.roa (hash: lf3PRhdfk/V5Q4RlSc6sqN7sf87cHuqeFhcGd+41a0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:e3:13:60:91:e7:ba:c2:f2:57:88:4e:51:89:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Validity
Not Before: Mar 26 06:01:35 2026 GMT
Not After : Mar 27 06:01:35 2026 GMT
Subject: CN=704271e23233a1d02c7437022a325004b11462de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:1e:d0:2b:ea:4e:9d:a5:b4:b6:7b:6a:9e:
83:ef:49:44:b8:97:b7:9d:29:b9:a2:67:e4:b2:f8:
a1:01:13:b6:61:d6:16:c2:1f:44:ea:1e:af:7b:9f:
c6:17:e1:d7:38:27:92:29:10:8a:ed:5e:13:15:ce:
51:75:1b:2f:f8:e8:0a:3e:4e:bd:1a:ad:28:42:4c:
9d:e2:ad:ea:8b:b9:3a:5a:cd:ab:89:b3:8e:f1:8f:
04:a4:11:5f:88:84:67:fd:4c:a9:a8:a7:a3:7e:6c:
af:61:c5:2a:df:d9:67:e5:f2:97:cd:ab:ee:4f:d8:
89:9b:f7:e6:71:a6:98:c1:cb:7a:55:c0:36:b1:5c:
2e:cb:8e:4e:37:7f:d5:47:df:24:e8:ae:79:9e:da:
c9:85:b9:88:35:90:1b:94:56:bd:21:fc:3d:a9:93:
1c:a0:84:4e:62:ac:6c:4b:4b:31:cb:4d:57:63:39:
55:bc:f8:4a:67:d3:7b:32:30:24:4c:4e:80:61:d1:
16:03:90:af:cb:30:81:e2:7c:f9:88:df:d8:f9:b3:
89:03:21:37:ac:ef:20:0c:ba:a0:09:f1:00:15:5e:
cb:3e:9c:98:65:18:1e:a3:28:5b:04:e3:93:c5:84:
23:25:9e:b3:c7:9d:d6:59:56:a3:09:d0:fd:91:00:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:42:71:E2:32:33:A1:D0:2C:74:37:02:2A:32:50:04:B1:14:62:DE
X509v3 Authority Key Identifier:
keyid:60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b6:f5:fc:1a:e0:77:3b:2d:81:6d:19:06:1e:7e:0f:b0:9e:
d1:72:17:6f:73:ca:38:ce:87:2e:7a:8d:3f:22:6f:9c:13:cf:
f0:97:eb:7d:fe:4f:e4:04:61:76:30:53:d1:8b:93:32:c6:a9:
1e:d6:cd:8b:92:09:2e:56:de:a6:f1:e8:f8:e4:ea:18:d7:90:
ee:31:e5:ab:11:49:ff:61:25:2f:f8:83:53:f4:1b:b2:fa:3a:
3f:08:52:78:2a:fd:df:ac:23:cb:7e:dd:57:df:a7:89:0a:e9:
2a:35:ea:d9:31:6c:d6:3a:83:39:7e:33:b1:5a:1e:c7:9d:8a:
07:1a:5d:a1:54:db:75:0b:98:22:6c:f6:64:46:66:85:99:07:
f1:97:83:a3:c8:21:4c:b1:bd:9c:6e:3c:a0:25:77:d2:a8:31:
3f:5b:9f:3e:52:6b:41:5f:6f:4f:7a:e7:28:18:1a:e8:39:a1:
ff:44:6c:96:4b:73:3a:79:ea:45:64:c9:57:39:e0:48:be:dd:
f7:b8:6f:20:c3:a2:ab:7f:c8:eb:06:61:2f:00:e5:99:fa:72:
6f:c5:22:62:bc:0e:a9:14:2e:4b:40:32:4e:c6:ef:6a:35:eb:
30:ec:9f:39:bf:83:57:90:82:d4:ca:86:9a:69:33:0e:dd:24:
89:c2:8e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:05 2026 by rpki-client