Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: QfYkKtcouAPc16o6ki7dosilrG4Jloq8Mu2CGm6phpY=
Subject key identifier: 73:B4:14:FE:F6:AC:F1:BD:EE:AC:F3:76:0D:31:07:3F:DF:4D:4B:51
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 019D265FFBDA23A5F846A32C434532B15EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 0993
Signing time: Wed 25 Mar 2026 19:01:57 +0000
Manifest this update: Wed 25 Mar 2026 19:01:57 +0000
Manifest next update: Thu 26 Mar 2026 19:01:57 +0000
Files and hashes: 1: 5cWjha-GN6V_9NCDJSfw9KGOEhk.roa (hash: H2Otkpibc9NdK0JV6LzlQxY+/YrLYIKAppuBF7pGTck=)
2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: Sc+vEGUrhHgD6X4wjBVUDZD02TzE33NFoPLuxMjH/+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:fb:da:23:a5:f8:46:a3:2c:43:45:32:b1:5e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Mar 25 19:01:57 2026 GMT
Not After : Mar 26 19:01:57 2026 GMT
Subject: CN=73b414fef6acf1bdeeacf3760d31073fdf4d4b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:9b:21:0e:d0:23:8e:03:b4:3d:9c:0d:0b:
6b:dc:46:88:41:33:cc:28:a9:f9:2c:e8:0f:1c:54:
42:28:6b:ac:12:f1:a8:ab:e4:30:9f:76:c6:65:47:
44:a3:c5:4c:80:3b:81:15:ec:00:3e:09:95:c0:75:
8c:b3:fa:db:1d:ab:bd:7b:4b:2c:f9:cc:1b:fc:6e:
af:e6:53:ab:43:4c:7e:76:91:59:80:04:cb:f8:45:
77:ee:8a:e9:96:15:77:b8:b7:47:b7:dc:1a:3c:bd:
77:b9:9d:62:11:30:18:c4:d3:f4:06:9c:16:15:2d:
21:11:13:c3:9b:96:05:aa:f4:56:4a:22:bf:7e:44:
1e:51:16:90:3f:0c:2f:f7:da:e7:8d:56:6a:52:0d:
f3:07:80:4b:56:9a:7c:57:1e:6a:89:46:8e:fd:65:
f3:5d:b3:66:8d:60:56:2e:e6:57:68:f9:fd:d1:41:
22:5a:39:13:db:12:4b:21:d4:40:74:dc:ac:6f:05:
40:83:02:39:fe:d3:db:a1:51:e4:9d:ba:1f:49:f9:
02:64:80:26:0e:65:67:e7:94:3c:bb:73:1e:cd:15:
63:50:e8:1d:f4:09:33:94:af:b2:57:6f:8f:a0:3c:
b3:b2:60:4e:4d:45:62:c0:d0:9a:48:c1:08:cb:e2:
08:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B4:14:FE:F6:AC:F1:BD:EE:AC:F3:76:0D:31:07:3F:DF:4D:4B:51
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:84:c2:5c:21:84:2d:97:c3:5f:f0:5a:f8:17:5a:6e:4a:de:
af:f0:a9:7d:66:62:8a:d8:c2:3e:8b:fd:06:07:f4:66:d0:80:
4a:04:82:19:1d:ec:4e:8f:84:cc:2e:85:d3:c3:f1:6f:58:da:
ac:c5:22:26:30:5c:0f:a9:1a:53:5b:f2:d7:5d:e4:2d:16:0b:
61:96:0d:32:f4:4f:0a:19:45:eb:fd:39:97:f7:2d:2c:a3:ee:
63:e8:13:d9:09:d4:c6:79:54:4b:ef:a8:b3:26:48:50:7f:a6:
fc:cb:22:75:b3:ba:43:47:9e:02:9b:82:e6:e6:91:33:83:c4:
1a:28:36:e7:dc:30:c1:c1:6c:69:5a:d3:27:c0:77:8a:31:96:
45:6c:2f:07:fb:97:34:8e:cf:bd:9b:e1:df:75:6e:e3:14:22:
fd:89:6e:c8:5f:ce:e0:7c:27:53:27:24:65:dd:96:5e:ed:09:
9e:37:77:97:ba:eb:82:24:7c:7d:eb:3f:98:ad:dd:1c:91:86:
d7:e4:92:3b:62:37:d0:f2:23:e7:f1:8d:08:a1:9c:7e:8f:5b:
e1:76:40:5b:f0:cd:da:67:94:b4:20:40:2c:59:5c:98:6f:2c:
07:6a:d8:28:9f:8f:e0:ed:17:2e:c7:91:a9:03:6a:a7:26:92:
8b:b8:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:41 2026 by rpki-client