Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: JRhhu3JGcZ2zqYlLUmAnZwTtcECnFITzsoddEOGqYMg=
Subject key identifier: 3A:9A:1A:40:C4:C5:92:FF:0E:B6:AD:A1:D9:3D:DE:C0:66:E7:E2:03
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 019D2AA9E23CB327B9190EA44B0C66E5B95D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 0D13
Signing time: Thu 26 Mar 2026 15:01:09 +0000
Manifest this update: Thu 26 Mar 2026 15:01:09 +0000
Manifest next update: Fri 27 Mar 2026 15:01:09 +0000
Files and hashes: 1: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: o3Xhr3QptZL1+XqKJ3FbV5TWY7Srm6by+6ZpFFmAJ2E=)
2: kGLxA9onzrf8JLssDr-KbBw0Iso.roa (hash: iCYCJqbAYcmF46KnTkB1atw07n5B8BjwCirxzmxkzlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:e2:3c:b3:27:b9:19:0e:a4:4b:0c:66:e5:b9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Mar 26 15:01:09 2026 GMT
Not After : Mar 27 15:01:09 2026 GMT
Subject: CN=3a9a1a40c4c592ff0eb6ada1d93ddec066e7e203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:94:7e:75:0d:88:99:50:ee:8c:d4:1e:46:
9a:8e:43:69:f8:dc:64:ac:84:7d:21:88:a5:47:60:
36:c6:bb:ea:d6:e8:57:46:2a:64:16:6c:c2:ac:36:
15:9e:14:5f:6d:46:5b:f6:a6:1b:92:b5:c8:3d:82:
21:6e:6b:25:6c:8d:1f:45:44:5c:b7:dc:fc:a9:23:
94:71:7c:ba:36:33:41:78:11:4f:ad:0e:b5:e9:45:
93:65:2f:6a:06:87:92:95:54:77:e9:66:9d:50:b4:
2b:a4:77:c0:4e:9f:10:c6:0e:45:04:c8:d9:3a:6f:
47:a1:25:c5:79:6c:5f:8a:52:c8:b3:87:d8:f7:e1:
81:4e:d6:79:56:2b:d6:dc:71:f4:58:fe:67:07:98:
e7:33:88:6b:85:bc:db:bb:45:a5:1f:36:d7:64:35:
2f:2e:9c:b0:7f:8d:fd:11:2a:a2:22:5b:c5:6c:88:
79:36:c3:36:d6:ee:cc:98:9e:02:4b:31:d7:9a:9e:
92:c0:1f:00:79:62:47:d2:50:be:8a:48:54:dc:18:
f2:94:cd:54:9f:91:ca:5e:ed:6a:12:fd:4d:56:5c:
34:d4:3b:a9:dd:43:d9:d7:38:e2:72:09:2e:1f:4e:
9f:bd:d9:20:33:bd:b0:88:a6:f4:05:f8:07:d2:09:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9A:1A:40:C4:C5:92:FF:0E:B6:AD:A1:D9:3D:DE:C0:66:E7:E2:03
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:39:6c:55:96:b6:ec:d4:4f:5b:6a:ad:12:55:e9:d9:ff:d9:
51:3b:e8:67:bf:69:4e:ab:0a:d4:58:89:72:13:31:fd:4b:27:
34:6e:1c:2d:7d:e9:99:05:13:93:62:56:33:65:1a:52:05:be:
22:76:ad:79:0e:96:e6:a8:78:f9:45:44:d7:53:9a:33:16:79:
e9:e4:cc:d0:17:ea:d8:cd:00:8c:e3:c8:f7:76:0a:ea:6b:84:
55:9a:7a:55:ae:36:96:09:bf:35:28:a7:ec:97:da:c2:fa:9a:
c1:e7:b5:ed:64:17:35:01:16:62:3a:9c:f5:01:c5:16:7c:a0:
41:45:f8:33:02:dc:06:71:93:aa:95:bd:74:86:78:20:4c:65:
7c:de:d6:36:16:6a:50:6d:ea:af:8d:ff:9a:3d:cc:8f:93:a5:
cf:e0:b1:24:00:73:71:1f:a0:f3:12:09:39:c7:e8:32:e2:69:
75:2b:1b:ab:fd:10:4c:f9:03:14:2d:40:03:83:17:ad:03:bb:
35:48:03:16:0a:6e:83:2d:3f:38:18:c6:e6:e5:e3:e6:d3:86:
40:ae:3e:d8:38:af:43:f5:ae:0b:0c:f1:e3:f9:7e:cb:7f:04:
75:44:ba:72:6a:75:a2:f4:b2:64:29:9d:d2:1f:9a:91:5b:df:
ad:ec:3e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:32:12 2026 by rpki-client