Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: X8Jyj2LY62au0/OmjmMOFCYl3ktspY07Gv8sMUkblHI=
Subject key identifier: 56:1C:42:10:0C:2D:83:B9:14:70:D1:FF:90:E3:87:66:E7:9E:A5:81
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 019D296169F54F500FBB29D6476070CFCFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 08EE
Signing time: Thu 26 Mar 2026 09:02:23 +0000
Manifest this update: Thu 26 Mar 2026 09:02:23 +0000
Manifest next update: Fri 27 Mar 2026 09:02:23 +0000
Files and hashes: 1: 1-oc31O5yGfJm_mzZWVg8lkL2Wxc.roa (hash: Zj2r9ATg5ynR2EMFecfZew5Um/8F+DW2YUnerFrqrJY=)
2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: osxKhDj+vkOuknTCbVhZ4/7tM1xJU6umc8LlYyBqeZs=)
3: _3UUxWfdIKjZ94RP_R__5_MA69o.roa (hash: xEub+d4iGHet4J1D7KwTY4kCPRXkdFvIc+V+yAPzmjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:69:f5:4f:50:0f:bb:29:d6:47:60:70:cf:cf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Mar 26 09:02:23 2026 GMT
Not After : Mar 27 09:02:23 2026 GMT
Subject: CN=561c42100c2d83b91470d1ff90e38766e79ea581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:c8:4c:38:83:be:b1:d6:31:33:24:d6:72:
ce:b7:d5:b3:46:45:bd:1f:42:36:88:6e:d1:16:5a:
bd:ed:01:9e:65:11:cb:2e:30:52:a9:1e:c3:45:2a:
e4:93:cc:0d:1b:76:2b:9a:8a:72:e4:03:1e:17:be:
e7:fd:a7:cb:ac:af:98:12:2a:48:cc:ea:34:b7:12:
7d:50:b9:48:70:08:1a:e4:1a:33:c4:4e:dd:82:73:
b4:20:ab:10:62:7e:ba:09:51:20:ea:a4:69:ac:7c:
85:d5:8c:87:af:f2:91:e9:35:85:a5:e0:4f:a0:f4:
01:08:b6:e3:60:f7:8f:db:e4:45:bc:0f:81:86:23:
fa:ed:a5:e0:7f:4e:4c:23:39:9b:75:74:2e:7f:a2:
50:bc:c6:3e:94:6d:4a:47:84:1a:ef:67:38:78:67:
77:88:6d:bf:42:99:57:9a:36:91:14:c2:4f:23:8c:
a6:85:2d:56:ef:60:71:5e:f4:7e:ce:76:d2:8a:ea:
40:45:12:5f:e0:d5:ea:8a:e6:16:a4:b4:3c:5a:39:
3e:e3:d8:27:5a:18:6b:66:d0:8e:4e:f7:97:45:70:
71:f3:a3:12:02:5c:fd:75:4d:ee:d1:6f:7c:94:40:
9a:af:da:f0:70:b2:e8:72:69:07:b6:73:24:31:73:
fe:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1C:42:10:0C:2D:83:B9:14:70:D1:FF:90:E3:87:66:E7:9E:A5:81
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cc:76:9d:52:6b:a4:fa:cc:e0:9e:94:29:32:88:42:ce:68:
ce:c9:34:4d:62:da:88:97:34:47:97:d6:55:9a:9c:c1:a0:55:
fe:44:1f:68:09:db:2f:b8:6d:bb:d0:19:ea:54:b7:4a:4c:e3:
87:0b:92:40:05:f4:e1:3f:11:c9:40:fd:64:fb:b6:5a:c4:8d:
d5:55:4e:ae:55:ab:89:5a:ff:26:a8:67:58:4c:d8:72:ed:2b:
c0:d8:8a:67:55:00:73:83:45:eb:df:6e:cc:ef:ca:00:14:b6:
22:9f:66:81:65:1d:96:ba:d2:8f:08:e4:c3:f9:3d:22:c8:88:
3b:4e:50:68:18:99:6d:5d:7d:68:8d:cb:73:32:a4:c4:3f:e6:
e1:12:ec:39:67:2d:22:ff:63:01:19:d9:f5:6f:72:75:2d:70:
a1:9d:90:c1:34:b1:f8:0f:5a:d3:b5:f8:47:36:58:d8:9e:e7:
e5:35:1f:9f:6a:5f:c7:48:33:52:5e:b9:58:be:1e:6e:69:1c:
85:5e:4d:d3:bd:c3:e6:2c:3e:05:20:83:6a:86:12:5b:94:c5:
8e:ad:15:f9:a4:87:a9:60:11:10:76:60:31:7f:2e:57:1f:6c:
3a:20:87:fe:a3:40:7a:e0:a2:21:89:1e:49:e0:fc:36:54:c5:
0e:7f:2d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:46 2026 by rpki-client