Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
File: yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json)
Hash identifier: moNMnyfesXIqZFomiKYctdd9SPuSfIYjV4in6M3mH70=
Subject key identifier: 14:7F:FB:AE:2D:48:E4:1E:A4:74:7A:54:15:20:64:60:73:C5:75:C3
Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829
Certificate serial: 019D2A04558F6E4A441E66A4EEAE93BABA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:00:20 +0000
Manifest this update: Thu 26 Mar 2026 12:00:20 +0000
Manifest next update: Fri 27 Mar 2026 12:00:20 +0000
Files and hashes: 1: 1Y3Jx-pHnnlaAgkd81VS3ppPNg8.roa (hash: tTjmMx7gS2w8jTpbpktEzeLgDcYSzx93pMRGzj4kGes=)
2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: xn6Rfz7SfCyxk9zIFbBW9YFNcWrZgbO+fdwW3jXWRpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:55:8f:6e:4a:44:1e:66:a4:ee:ae:93:ba:ba:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829
Validity
Not Before: Mar 26 12:00:20 2026 GMT
Not After : Mar 27 12:00:20 2026 GMT
Subject: CN=147ffbae2d48e41ea4747a541520646073c575c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f3:00:80:4e:85:f6:38:67:b9:d8:74:52:3e:
93:dc:4e:09:b1:15:f8:56:d3:37:e0:db:bc:79:c5:
aa:e8:5a:87:69:fd:c0:4f:68:c5:ca:f0:b7:11:7b:
09:f5:ac:70:31:c7:4a:8f:cd:0c:eb:56:68:d2:c8:
ed:c2:ba:5d:10:68:7e:6a:ce:7f:50:84:e3:ae:e1:
10:7c:5f:dd:95:90:4f:d4:03:ae:43:40:e7:1d:29:
45:bf:a0:1f:8c:38:bd:1d:66:dc:cb:56:34:39:37:
c0:7c:4a:ba:31:da:14:25:0e:44:7a:41:5e:4e:49:
84:18:c3:f7:03:f7:89:7a:4e:87:30:94:1d:56:6f:
6e:03:0e:4d:0a:1b:f9:1e:a4:3b:4d:4e:f9:08:55:
10:4f:9b:fb:a3:39:14:b1:b4:c0:5d:16:9e:52:26:
74:0b:b4:df:f7:d4:ec:60:7d:4d:3a:77:44:37:48:
35:93:24:1d:b2:a2:13:53:22:4a:c0:2d:f3:4e:b9:
8b:04:57:e6:2c:32:58:9b:16:cc:71:06:e7:75:47:
1c:e2:9d:ff:a2:26:af:dd:e9:dd:e8:6a:13:a5:3f:
5c:a8:55:ff:b7:77:e3:94:57:79:63:fc:c9:01:af:
8e:ff:21:bd:35:15:9f:6b:c7:28:2c:4f:8e:43:b9:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7F:FB:AE:2D:48:E4:1E:A4:74:7A:54:15:20:64:60:73:C5:75:C3
X509v3 Authority Key Identifier:
keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:73:ef:7f:50:ae:86:c6:be:ca:84:8d:ad:44:84:f4:ca:9b:
73:ba:93:d0:9f:c1:d6:da:e1:16:a3:bd:97:63:ee:f6:32:06:
b6:b1:f3:7a:e6:cc:aa:88:60:73:d0:e8:cb:38:18:45:83:71:
ad:f8:8e:72:80:5e:e9:9f:16:ee:9c:cd:35:d1:e2:64:82:2b:
86:f4:32:4e:57:2e:2d:af:ca:1b:9f:b8:4a:07:af:d6:05:f6:
64:8d:9f:06:1f:6f:07:d2:a2:32:3f:c2:03:84:b3:8b:0a:0a:
d8:6b:f7:45:30:6a:18:60:ad:90:cf:d9:e6:65:bd:ca:97:26:
0d:39:97:b0:ff:41:3b:5c:00:bd:0c:96:fd:24:c4:96:5a:a9:
ad:b7:ba:86:8b:15:49:97:88:2e:a8:ae:6b:4a:4f:3b:dc:92:
a9:f2:59:03:94:4a:47:a2:b4:44:86:15:ce:d2:8f:78:fe:8f:
f1:65:a2:00:e7:d2:43:50:31:63:47:7f:f5:8b:95:7e:00:c5:
79:e4:5a:f2:10:46:80:78:19:70:04:82:24:5c:97:16:bf:e0:
d0:cf:fb:6f:9a:f7:de:70:2b:4b:eb:f7:12:3e:82:6a:5e:d6:
c2:b8:a4:11:4a:c5:a5:b9:4f:01:f5:c5:0b:2d:4e:c7:70:ff:
f8:5d:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:28 2026 by rpki-client