Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier: aA41cP4rGkjKlleK1kE6Ax5oGUqZHxEb8uxGV+gcEiY=
Subject key identifier: 17:AE:7D:82:05:73:96:6C:CC:14:56:D8:ED:AA:A6:59:D0:65:99:DD
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 019D2A3C339A5EDB07CA3E52B3CDCF2F3DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number: 0D31
Signing time: Thu 26 Mar 2026 13:01:21 +0000
Manifest this update: Thu 26 Mar 2026 13:01:21 +0000
Manifest next update: Fri 27 Mar 2026 13:01:21 +0000
Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: LRv28+6kl9GsG6YU9jfuMLSezdZBeRwgTz9Ji/R+MyE=)
2: e2fLwwNnC7_gQ85Q33UfXuK3PBc.roa (hash: GaXv8AkKDgccbaFAmhisldDeR5nblYKbBIpd1n6r6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:33:9a:5e:db:07:ca:3e:52:b3:cd:cf:2f:3d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Mar 26 13:01:21 2026 GMT
Not After : Mar 27 13:01:21 2026 GMT
Subject: CN=17ae7d820573966ccc1456d8edaaa659d06599dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:62:c7:d4:c4:94:66:36:b3:f0:e8:2d:b0:
0f:2d:90:45:82:1a:1c:0a:7c:84:4c:0c:fa:56:af:
e7:9b:07:0f:b0:6a:c5:8b:5c:4e:f8:36:fe:ea:aa:
2a:ed:08:f0:d9:10:ab:09:2e:e3:bf:31:ec:1e:e0:
8e:9f:10:ec:3d:45:20:e8:0d:e0:70:49:75:b2:94:
7a:e5:bb:df:c6:2d:b7:05:c3:57:45:ef:ec:1e:c6:
f2:72:ce:e9:e2:97:ee:05:90:c6:aa:68:2e:7d:a3:
f6:7a:c5:00:38:77:86:25:61:27:5e:17:4f:ad:df:
06:9b:07:ce:d1:4f:c9:5e:52:94:1f:56:93:02:f4:
a7:5a:5c:50:f9:9e:32:b8:78:d1:f7:1b:57:3c:12:
10:4a:a0:d1:75:5d:7e:33:b2:f2:2a:c8:70:8d:a5:
94:e9:38:7f:19:8f:8f:5e:0f:c2:a8:e7:d5:71:e8:
ce:7a:b6:04:0b:77:d7:4d:cf:eb:1b:e9:e8:7b:78:
e5:df:86:16:63:36:dd:a9:55:33:c3:71:cc:93:94:
63:86:9b:de:da:a4:d2:b7:63:7e:69:19:6a:e6:fc:
67:07:ad:78:96:e9:3f:6c:a2:cc:3b:ce:75:7a:d1:
38:83:17:35:80:95:71:ef:d0:6e:89:b3:19:27:8c:
0d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AE:7D:82:05:73:96:6C:CC:14:56:D8:ED:AA:A6:59:D0:65:99:DD
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:92:63:de:16:7b:36:e1:b3:17:d5:c1:82:62:fd:0a:77:f6:
e4:0d:58:7a:3f:b1:52:cc:69:25:54:83:a5:30:24:19:1c:ab:
9f:53:cf:1d:41:02:89:61:86:d5:35:d8:30:5f:b5:a0:7b:1c:
63:a6:c5:71:43:ac:34:fa:62:9e:4d:80:38:d8:11:1d:ee:74:
e4:26:aa:47:5f:9b:57:b8:53:df:16:64:dd:fa:af:69:7c:b2:
58:63:12:c5:de:72:64:4d:65:24:b0:c8:38:1f:25:10:b3:63:
69:d7:88:94:46:24:49:cb:1f:49:5c:2f:da:06:8d:de:27:4e:
74:80:24:5a:1c:77:f9:f9:8c:4c:15:eb:52:ab:51:c7:2d:36:
a3:f3:1a:cd:ab:27:60:82:b0:59:86:21:21:47:47:28:1b:6d:
b1:77:b4:d6:7e:fd:b3:f3:01:3c:97:ab:ca:a1:6d:54:b7:96:
e4:63:22:22:41:64:a5:89:0c:80:97:51:61:93:b6:df:ca:4d:
d7:f7:7a:23:de:dd:4b:d9:03:36:fa:ef:a1:a5:21:95:17:db:
3b:0e:86:0c:db:93:f2:81:56:b2:c5:cf:ee:48:a5:23:2d:75:
d6:be:86:f4:33:7b:50:8f:3e:76:8a:ee:4e:ed:13:90:15:56:
86:3e:b9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:58 2026 by rpki-client