Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: tkzjtE0/4PaEOBHHYVg0GDE80bUFaV7Y+jrasSsENEs=
Subject key identifier: 5C:8E:EA:F0:11:EB:4B:FF:E0:61:D5:98:C1:97:46:CD:E0:96:89:F7
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 019D25F15B512CDFBDE983224FF6973D1A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 06BC
Signing time: Wed 25 Mar 2026 17:01:07 +0000
Manifest this update: Wed 25 Mar 2026 17:01:07 +0000
Manifest next update: Thu 26 Mar 2026 17:01:07 +0000
Files and hashes: 1: B_cUWMvkDrWwNevq-NhH06J8ywg.roa (hash: ki78ojsdQ+VGD7Du9CRQIEWSZOZHzzvnZ4p2T4RU1zU=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: 1XXtWYRo7kBA5o18gO67y2Eag4SpVHhXwDUFhmpNDTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:5b:51:2c:df:bd:e9:83:22:4f:f6:97:3d:1a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Mar 25 17:01:07 2026 GMT
Not After : Mar 26 17:01:07 2026 GMT
Subject: CN=5c8eeaf011eb4bffe061d598c19746cde09689f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:3d:41:5d:c9:6d:ff:fb:3c:0c:90:fe:16:
88:62:d0:b4:48:3c:71:2a:39:79:fd:51:da:84:d5:
a3:b1:8a:f6:10:ad:36:7a:c2:f5:23:ca:71:84:a0:
7f:f2:c2:29:36:fd:89:44:48:7f:ed:d9:85:9e:33:
d1:24:9d:a6:63:ab:01:0b:40:b8:d6:44:cf:8d:93:
80:92:34:df:4c:c9:0f:94:05:3b:b8:b1:3a:9b:e0:
1e:e6:7c:0d:8d:f9:47:41:31:3f:dd:d4:eb:0a:fd:
2d:dc:98:50:06:01:dc:a8:de:dd:73:22:66:89:0d:
26:1e:af:b3:c5:f6:2c:f9:82:e4:ce:a3:9d:ab:8d:
21:44:df:61:45:5b:8d:25:b6:08:f1:51:f6:c4:1b:
3b:be:18:9e:96:d2:c3:fd:ea:ad:65:f0:0c:4d:01:
63:33:52:29:25:2c:9f:55:ec:33:ea:33:45:7c:4c:
c3:82:ca:6b:86:8a:79:3c:85:f0:f9:c2:38:56:44:
ba:61:3e:30:cc:91:2a:56:de:1e:97:c6:52:c6:4b:
80:29:e2:ea:4d:9a:e9:7f:54:cc:5d:84:6f:c4:6e:
49:b8:90:ba:8d:93:e8:a4:5a:d8:6e:19:63:96:61:
5f:e0:3d:7c:ca:8a:21:d5:a4:e5:61:13:30:f9:6d:
f8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8E:EA:F0:11:EB:4B:FF:E0:61:D5:98:C1:97:46:CD:E0:96:89:F7
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:2f:95:d8:4d:27:4b:76:20:67:a3:61:ed:83:4c:db:2e:9b:
a2:d8:7f:d9:dc:e0:b8:ed:e5:c9:4c:02:19:92:96:24:32:43:
b7:a6:51:2d:81:66:0e:fc:80:c0:5a:5e:c9:fb:53:3c:5c:6d:
44:9f:ce:27:d0:e6:16:95:81:a6:db:78:3d:bd:c5:a3:2a:c9:
3c:a9:53:02:80:b7:3c:31:cc:f1:3d:0d:9e:b3:d6:a3:95:86:
c7:96:01:4b:db:40:f5:ee:ca:86:3e:43:8e:6b:ab:e6:6a:af:
97:c8:6c:5e:41:b5:de:69:d1:bd:cc:43:fb:83:45:3f:c8:ef:
ad:3e:79:23:8c:39:50:08:80:46:7c:25:d9:af:00:01:a0:a5:
d1:d6:c3:4c:bc:bc:83:3d:ca:cc:fe:ff:25:fa:6a:8c:b6:fc:
cc:ee:10:75:4d:56:97:6d:7f:8a:fd:ee:03:48:a7:db:23:3c:
e2:ef:26:ac:9f:d5:e5:c0:2a:9e:86:eb:55:12:e4:0e:8b:44:
89:c7:18:7c:b0:ad:7e:70:18:d1:8c:50:66:e8:9c:a8:70:cb:
c3:da:85:7e:53:47:6b:a8:00:94:29:15:3a:85:28:b5:62:8c:
36:ac:ee:f0:b3:5d:8a:26:48:5a:99:e2:e4:21:d7:c8:de:fd:
cc:b9:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:51 2026 by rpki-client