Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
File: YmFlv7I92h-YcLJBf0lkhebAinQ.mft (raw, json)
Hash identifier: 6j+Eqvl5H6qa47O+NdzbBQiwwLggw6SEBCNLAHseT1U=
Subject key identifier: F0:E8:F9:18:47:E5:D4:41:28:FE:65:3B:B5:03:67:B8:3B:F7:AE:43
Authority key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
Certificate issuer: /CN=626165bfb23dda1f9870b2417f496485e6c08a74
Certificate serial: 019D27DF98FE509BDB306A5ED49B62434401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
Manifest number: 0615
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: 2AHtmhkmAt12Qh4fBCM-56oX8gY.roa (hash: KJViVmT29xLVAZvhSPdG3WsX06P/yToLqg0u7mRQc34=)
2: YmFlv7I92h-YcLJBf0lkhebAinQ.crl (hash: fk1DfzvBFCmnahXJP/T3C9VuA6YfBk56XAPJEpxhYF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:98:fe:50:9b:db:30:6a:5e:d4:9b:62:43:44:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626165bfb23dda1f9870b2417f496485e6c08a74
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=f0e8f91847e5d44128fe653bb50367b83bf7ae43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:39:36:61:fc:90:91:d2:cf:d7:5a:04:bc:
9f:82:de:7f:0d:04:33:82:c3:d6:1b:8d:57:c7:90:
26:08:f2:d7:5e:78:70:e6:31:d3:fa:1e:dd:b8:5b:
bc:c6:6f:af:dc:26:84:46:13:22:05:ce:7f:56:0c:
35:b4:31:b0:30:3d:ed:46:0d:da:eb:0d:28:7f:3e:
58:51:c9:10:84:38:6f:b5:3c:35:0f:d0:c9:b1:0a:
d1:18:20:c8:c7:51:90:13:b2:4f:02:68:0a:b3:26:
41:f3:fb:77:7c:19:bc:c1:47:12:02:cd:56:43:36:
a8:ba:6c:20:d2:fe:e9:82:39:87:9f:8a:b8:a6:ac:
0e:6b:80:8b:1f:17:93:24:b0:dc:b7:b5:d8:bb:0d:
02:7a:0f:87:54:72:f5:d2:92:8a:ce:45:2a:90:8e:
6d:eb:8d:d7:96:1d:4b:4e:a1:19:b9:09:e4:cf:71:
fa:00:63:8a:c0:73:1f:db:98:6b:34:04:a2:89:c7:
3e:5a:e1:89:1f:de:90:97:fa:48:94:06:aa:a4:6f:
be:de:89:01:93:23:76:5a:03:b1:06:e0:6f:fe:b4:
62:b9:88:2d:3c:d9:ca:37:a5:61:48:5e:07:37:6e:
22:02:87:62:07:35:3b:e7:fe:de:82:d5:9f:d2:24:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E8:F9:18:47:E5:D4:41:28:FE:65:3B:B5:03:67:B8:3B:F7:AE:43
X509v3 Authority Key Identifier:
keyid:62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:9c:a2:7e:3c:50:0f:69:e9:f9:b2:11:10:63:7f:a4:d2:e6:
79:d9:81:f0:49:39:a0:21:9d:7d:87:02:50:58:bc:bc:7e:c7:
89:16:ad:85:51:53:85:3e:60:50:2c:8b:3f:01:33:4c:b9:a9:
e6:78:47:c6:3e:20:57:7f:52:ec:09:a2:81:ed:e0:64:f8:00:
bf:bc:0d:95:55:85:e2:08:3e:77:50:88:1d:df:ed:ea:4e:cc:
1c:17:2d:6f:e6:52:aa:66:13:f2:55:ec:24:a6:22:52:31:ed:
88:42:f0:75:1a:b0:db:ae:c8:80:d2:59:71:e2:ea:b1:ef:65:
e5:f7:a4:8d:16:b2:c5:65:ee:17:69:c9:1d:03:83:60:7f:ec:
06:df:69:26:7b:87:ab:95:da:02:32:1d:c3:4c:05:4a:da:2d:
be:db:98:55:49:88:83:3f:81:fd:68:96:1e:ff:76:fa:06:21:
df:ef:d9:29:01:94:ef:e1:44:1a:38:72:16:4d:e7:fe:db:68:
c3:2b:c1:8d:56:58:22:2e:b6:47:92:64:91:cb:0b:40:e4:3f:
ef:47:3a:5f:4f:27:8f:04:91:90:9d:c1:36:df:18:fe:03:96:
e9:26:76:a3:93:fc:df:a5:74:a8:45:89:ee:a8:83:01:54:2c:
99:fb:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:40 2026 by rpki-client