Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
File: yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json)
Hash identifier: fmle1o4zb9yY4PpUWbeElNVZpUB86l6GhFmOeisd+1E=
Subject key identifier: 5A:CB:60:8C:CC:E5:6B:E9:17:A7:36:DE:77:BF:7E:63:46:65:0E:3A
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 019D2771ED2DE35E5F3D2C154BCE18CD19D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
Manifest number: 186F
Signing time: Thu 26 Mar 2026 00:01:10 +0000
Manifest this update: Thu 26 Mar 2026 00:01:10 +0000
Manifest next update: Fri 27 Mar 2026 00:01:10 +0000
Files and hashes: 1: Bv3dTcxKi6DR1Gu5OdJV37yth8s.roa (hash: DKEmCC9kN5nknxLmAp5xgLUSVdPR+QR7ELMugI9SFVs=)
2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: RXLDiVZCVYj/d8lP4c0E8+dWL1x1OX2ZMYFNZJsOZ0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ed:2d:e3:5e:5f:3d:2c:15:4b:ce:18:cd:19:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Mar 26 00:01:10 2026 GMT
Not After : Mar 27 00:01:10 2026 GMT
Subject: CN=5acb608ccce56be917a736de77bf7e6346650e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:93:e9:6f:57:71:81:a4:cc:07:e2:5e:17:
1a:a8:fe:52:e8:48:5e:47:2f:33:f8:d6:4a:7a:c4:
08:c7:cb:7e:5c:21:ad:72:f9:60:af:3f:c5:98:f5:
f1:41:9c:16:23:1e:7d:29:e0:f7:cb:b0:6e:42:ef:
31:c4:19:3f:7a:19:19:b1:49:e2:aa:e9:2f:c1:48:
c6:47:73:62:dc:ab:28:b1:2c:26:e1:d8:17:5d:da:
bc:3d:3e:4e:2c:ff:93:a8:87:c7:27:9e:b4:22:25:
d0:89:de:e0:7f:f5:81:79:8d:01:bc:ce:8f:46:e9:
b2:de:7b:4c:f8:1b:5f:9c:e8:2d:68:6f:37:7c:41:
2a:a1:75:9b:6b:49:1b:7c:0c:e9:76:62:0c:5b:1b:
c9:fd:ab:f7:79:4c:07:35:72:d2:59:b2:bb:c2:ab:
1b:59:3b:96:5b:90:04:a5:bb:22:df:50:65:1c:57:
6b:4a:52:38:36:63:89:e7:19:bf:7b:e5:f1:ea:a1:
32:e9:fc:11:63:b4:ac:5a:cc:5d:16:e6:3c:c6:26:
08:15:76:2b:c1:28:bb:84:20:f3:77:6e:53:a6:69:
b8:64:2b:79:89:18:6c:d8:10:c2:de:f8:4a:aa:e2:
fe:df:14:c1:bf:27:3e:0c:e1:6c:15:91:65:b9:3c:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:60:8C:CC:E5:6B:E9:17:A7:36:DE:77:BF:7E:63:46:65:0E:3A
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:07:28:dc:43:73:c2:b1:c4:87:ef:c1:8f:b0:5b:c1:b8:d0:
02:11:ba:7a:92:66:2d:ac:62:e4:e2:11:71:9d:6e:53:1c:e2:
cc:64:62:2b:73:19:40:ae:f0:46:f0:9b:c5:34:b8:76:55:4f:
b7:13:0c:82:87:c5:1b:0e:2b:82:1d:01:fb:41:c1:65:5e:a0:
1c:09:26:7b:a1:3c:55:e9:9b:0a:a0:14:c8:43:79:14:c4:e2:
e9:f0:f8:16:ef:71:eb:17:c9:55:96:01:34:ff:38:43:5a:4e:
91:f0:a5:2a:19:a6:12:71:1f:9a:b4:16:03:78:bf:6b:60:e8:
54:65:9d:f8:da:e4:aa:0c:73:95:a9:8c:49:a5:94:c8:a6:3b:
e7:cb:14:3b:9d:20:66:49:af:c4:62:51:53:3b:74:29:29:dc:
94:bf:d4:a9:0c:d6:b5:ed:31:74:7a:ac:6f:46:ed:cc:ed:7e:
ab:f7:88:1e:11:38:5d:ab:0f:4f:4e:87:15:85:6d:48:b7:21:
33:2d:f8:9f:1c:42:fb:1c:a8:ae:0c:5a:22:6a:44:6c:fe:2b:
04:8e:48:f5:b0:79:44:d7:4b:de:e0:56:b4:f6:b0:f1:f8:31:
b8:1c:01:b8:0f:ce:64:64:c6:3d:d1:e6:db:c9:f1:c6:fc:5d:
87:7e:20:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:33 2026 by rpki-client