Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
File: yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json)
Hash identifier: rkIuA0C6LpfAVm03VdKYEEdUwty9F9AslDaWIsIONIU=
Subject key identifier: 9F:C3:C6:C0:9B:F4:32:6B:19:B1:E1:E3:EF:50:3F:E5:5F:5B:2C:63
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 019D29294FE81D1DC6ABB20C5DEF0A6922FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
Manifest number: 1199
Signing time: Thu 26 Mar 2026 08:01:06 +0000
Manifest this update: Thu 26 Mar 2026 08:01:06 +0000
Manifest next update: Fri 27 Mar 2026 08:01:06 +0000
Files and hashes: 1: EqMzjpZI_PA25pj2HGjF-sxEQuw.roa (hash: Q+Tx0hJ38g+PHWlMRUIi6h6t6P6zwUEAYvtkrEbFArY=)
2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: k9P/9/cB/THG4GtcgtOltAcPr7ojEK8nKJMevLVD6Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:4f:e8:1d:1d:c6:ab:b2:0c:5d:ef:0a:69:22:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Mar 26 08:01:06 2026 GMT
Not After : Mar 27 08:01:06 2026 GMT
Subject: CN=9fc3c6c09bf4326b19b1e1e3ef503fe55f5b2c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:46:1a:7c:1e:16:38:4b:66:c2:3f:f2:ad:
4e:5b:7d:0d:05:3a:56:ab:37:84:37:b9:7e:14:40:
45:12:c4:fe:53:6d:b7:8e:de:9e:60:35:1a:b8:a1:
cb:91:1a:23:b3:7f:81:60:cf:4a:ad:0d:17:3b:47:
9b:95:18:e3:3a:a5:91:df:3c:fb:37:67:42:ca:34:
ad:ab:36:e8:bc:64:78:36:dd:ab:c1:b6:b8:ec:14:
3a:40:b7:17:6c:01:11:85:60:01:f8:bf:eb:f8:5f:
02:b4:ba:37:68:b6:d7:66:83:e5:5a:a9:2b:46:85:
68:b8:66:9b:a5:f8:da:33:3f:a5:a3:89:f6:34:d3:
b8:22:e1:1a:7f:6c:d3:f2:ee:4d:9a:47:52:20:a0:
3e:f1:d4:0c:34:b8:4c:dc:9b:f0:fe:c2:6f:25:bb:
5e:6b:01:36:1d:1d:eb:a6:cf:d3:1a:59:b9:fa:66:
94:a0:ca:5e:06:6f:5c:a2:47:fd:c0:f6:e3:a0:c0:
89:c0:ca:2a:79:1e:6b:44:3c:98:fc:b2:70:1d:15:
22:47:67:ec:41:01:18:95:89:1a:2c:59:98:67:f2:
cb:bd:0c:11:aa:6f:a1:74:fc:39:63:f9:95:ad:c2:
f4:24:77:74:81:54:74:83:43:5d:f1:e0:b7:65:bd:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C3:C6:C0:9B:F4:32:6B:19:B1:E1:E3:EF:50:3F:E5:5F:5B:2C:63
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c3:0e:f3:9b:88:e1:a1:c3:3d:15:e6:8b:4b:3c:4c:15:8e:
df:80:41:0b:83:8a:10:16:49:b5:37:cb:86:ce:c8:b6:c2:33:
04:3d:af:0d:ca:94:29:c8:08:76:5e:7f:b1:4b:e7:96:39:6b:
c1:bd:56:96:bf:8a:e3:ce:86:49:cd:f2:89:c4:3b:a7:38:66:
ed:43:bb:19:51:cc:f9:40:f9:44:7d:e3:d3:71:e7:1a:9d:14:
ea:de:29:d7:dc:e9:62:31:0b:31:61:d4:c9:2e:62:74:c8:e9:
25:12:d9:e6:52:31:20:9a:41:47:b8:36:ac:d7:45:6b:92:c7:
46:63:a8:43:d3:7a:58:03:23:3e:10:e5:6e:a2:48:e9:68:ce:
4b:4c:9a:de:ab:31:a2:3a:ea:e0:04:43:c5:9a:ac:8b:08:76:
b7:d4:7c:fa:1c:72:d3:2c:6b:ae:66:a1:cf:03:e7:fd:31:20:
95:c4:16:ff:97:55:1f:e6:41:b3:65:df:0a:c1:67:bc:60:f6:
24:4a:59:97:c4:95:49:9e:21:db:77:7b:0c:dc:ab:07:2f:46:
ab:5a:4a:8e:0e:3c:02:d6:f9:88:c2:21:0f:2d:21:c0:8a:3f:
9e:93:61:6f:a3:8a:03:7c:ac:63:9c:f2:4e:25:59:a8:12:f0:
d4:3b:5f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:30 2026 by rpki-client