Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
File: YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft (raw, json)
Hash identifier: 96PnyJUOzub+yTp+3OOcTE1V7c2soRCN0OkVj+2WtvY=
Subject key identifier: 3A:C3:A4:62:EB:F6:EB:3E:EA:95:1D:3A:F5:E9:30:C6:B4:72:AE:2C
Authority key identifier: 61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
Certificate issuer: /CN=611343a8ee92aec36510de97382dc6a420888efe
Certificate serial: 019D25BA8C7EC82A702F0FBF786AECB1646F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
Manifest number: FB
Signing time: Wed 25 Mar 2026 16:01:15 +0000
Manifest this update: Wed 25 Mar 2026 16:01:15 +0000
Manifest next update: Thu 26 Mar 2026 16:01:15 +0000
Files and hashes: 1: 1WBi4O0mvLv4eBmlkjen331LEKc.roa (hash: na8Ngk5oUxgxLL20/k7/joU0dOOdxW3ksCrQTLpvfHc=)
2: YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl (hash: 1M2XxQx+OlWL5qgyLFdyCOOztqxyFTBIdSK0VRGP780=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:8c:7e:c8:2a:70:2f:0f:bf:78:6a:ec:b1:64:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611343a8ee92aec36510de97382dc6a420888efe
Validity
Not Before: Mar 25 16:01:15 2026 GMT
Not After : Mar 26 16:01:15 2026 GMT
Subject: CN=3ac3a462ebf6eb3eea951d3af5e930c6b472ae2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:bf:c8:cf:1c:fa:92:1c:33:f8:37:4b:e2:
7a:0c:60:61:0c:84:4f:8a:a6:b2:3f:d7:26:81:7e:
ad:49:a3:62:70:71:be:62:4f:70:5c:07:20:43:c3:
b3:52:91:02:aa:dd:7b:f4:a3:e9:8f:20:c3:6e:c4:
bd:10:d1:5b:cd:e7:30:89:f3:c1:a0:07:15:b9:26:
20:81:78:1b:56:93:91:cb:35:5e:28:45:7d:b7:c8:
26:98:46:6b:ac:ff:b5:8c:de:72:47:aa:a8:fe:a5:
28:2b:cb:0a:cd:46:f7:60:2e:a7:c3:cf:1a:05:8f:
20:c5:92:8f:9b:9e:97:80:47:bb:c1:b9:00:9d:35:
d5:a5:2e:c0:0a:76:45:a3:df:c1:a7:98:f4:5e:ee:
b6:b0:5d:b7:49:09:b4:aa:95:5a:1b:e7:30:33:c0:
3d:cc:b3:9d:9f:3e:45:d6:1a:10:7c:0b:bb:5d:e2:
48:9a:9a:de:98:02:c3:32:b5:16:0e:35:f5:5a:fa:
69:ef:6f:fd:de:f6:e0:8b:95:21:de:ff:7e:73:60:
7c:60:fa:f4:ef:e1:e7:ae:28:0c:38:62:03:8f:0b:
cb:c0:be:60:34:fc:18:2a:0f:07:e5:67:a2:9e:97:
ff:40:bd:3a:63:8d:f8:9a:14:26:c2:7c:b0:6c:77:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C3:A4:62:EB:F6:EB:3E:EA:95:1D:3A:F5:E9:30:C6:B4:72:AE:2C
X509v3 Authority Key Identifier:
keyid:61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:94:f8:f1:2f:6d:b8:ba:20:98:6b:de:eb:98:c5:87:8a:cd:
7c:54:90:e8:08:de:0b:ad:14:77:6f:cf:9a:9a:4f:db:c1:6e:
41:bf:f5:99:aa:51:a7:e6:57:86:f6:c8:28:39:94:b3:2d:1d:
3c:2e:f5:d9:79:50:ac:23:28:27:36:f9:25:c0:58:0d:cd:29:
3c:c0:2d:3b:07:60:9f:43:ff:3d:5f:25:5a:73:7a:31:17:46:
f2:8f:01:3b:79:6e:23:16:92:c7:38:72:1c:2b:22:9c:ba:10:
bc:2f:62:e6:e4:ae:71:6f:aa:95:19:ed:8d:07:93:70:e3:03:
b9:72:69:94:ae:1e:0e:87:c8:44:09:c8:d8:94:bc:ab:b2:5c:
6b:f4:9a:d1:61:98:35:b2:19:03:95:80:ce:ec:fb:9f:d9:10:
84:1d:a0:be:27:6a:ba:f6:37:ec:80:5b:5b:ff:d0:29:9a:f8:
6d:2b:80:50:a0:f1:93:42:54:0f:c9:4a:98:86:20:41:a9:b8:
7c:06:e0:84:75:bb:1c:ed:1e:bf:28:8c:57:df:44:fb:a6:ba:
db:6a:68:b0:30:73:f7:4b:58:98:23:51:04:1d:92:4c:f7:f1:
7b:1a:b7:3e:86:df:94:fb:c1:c7:a2:b3:8d:23:fb:5e:28:90:
ca:5c:5c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:15 2026 by rpki-client