Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
File: ywyjSKyJHDNtjHlFpb1bMyXrXws.mft (raw, json)
Hash identifier: gfTXDCDMqBlKJKAJ/iUViCx3jrsai8oj6C2slA2r70Y=
Subject key identifier: 70:E6:3B:2C:8D:55:CF:5D:2B:7F:C9:1D:AB:5D:36:7C:61:38:50:D9
Authority key identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
Certificate issuer: /CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Certificate serial: 019D254C78A386DFE518192237D7F4C5CC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
Manifest number: 0754
Signing time: Wed 25 Mar 2026 14:01:01 +0000
Manifest this update: Wed 25 Mar 2026 14:01:01 +0000
Manifest next update: Thu 26 Mar 2026 14:01:01 +0000
Files and hashes: 1: 1-Y3ijndscKqraUdYHPlGlvPiaww.roa (hash: xxGKvHWQXGb9FbfED6D0G6e4DrQ9E36ESQZN/cdfGxs=)
2: Xh_VSPJKOjJ808dZZ9cjw-Qe3R8.roa (hash: zFLbAkvTVFDLeRppM8t2hdy6uhNcDWH0+KfQkEKnBWc=)
3: h1rJ_5IwT6r9srNzb0xH-naB6tI.roa (hash: 1/JRSZ3nsnOwZgC6F3kqzm5Oq+Y/WO+2ye58dNCreY4=)
4: ywyjSKyJHDNtjHlFpb1bMyXrXws.crl (hash: 40OKQLSwt2kNshXkHvTr7kBAsY5BhNBrF+iFoVH0Xf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:78:a3:86:df:e5:18:19:22:37:d7:f4:c5:cc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Validity
Not Before: Mar 25 14:01:01 2026 GMT
Not After : Mar 26 14:01:01 2026 GMT
Subject: CN=70e63b2c8d55cf5d2b7fc91dab5d367c613850d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:8c:d3:fe:0d:88:c6:1c:b5:30:63:3d:39:
e3:10:9c:2d:2d:17:46:15:6a:2f:35:f3:0c:a2:40:
18:fe:de:3d:94:32:19:ce:5f:0b:6e:2f:fd:4d:e1:
54:27:6f:29:9c:33:6b:68:36:fb:3f:28:c4:a1:2d:
30:d3:e2:14:af:e3:67:a7:27:f8:78:3b:6d:9e:59:
fe:38:ed:7b:b6:3e:b8:4d:6c:2b:bc:ea:f8:a8:d8:
51:2f:9f:1c:79:08:c0:f4:17:f8:15:c1:5f:18:5c:
22:09:fa:bc:0b:57:cf:da:ec:df:e4:fe:ac:35:5f:
f7:fb:01:4c:69:58:6e:be:69:9b:7c:59:de:06:66:
fc:9e:69:35:c5:c7:81:5a:19:eb:a7:22:a3:68:8d:
5e:dd:37:8a:63:45:65:70:73:3b:98:a3:75:de:f2:
9c:13:c7:3f:ec:55:0f:90:84:31:0f:df:50:6c:b6:
41:1d:00:1e:1b:5e:2e:fa:bd:3e:e7:47:07:10:e8:
ac:54:f2:df:bb:5e:1a:da:3a:cd:1b:9b:8d:ea:79:
d7:3c:5e:9f:62:52:1d:7a:5d:25:70:e9:4c:91:ef:
ee:c2:1f:d7:52:ea:f1:c7:7c:38:08:ae:65:3a:bf:
6a:09:2a:71:5a:0e:a4:f9:14:0f:64:f1:b0:09:0b:
58:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E6:3B:2C:8D:55:CF:5D:2B:7F:C9:1D:AB:5D:36:7C:61:38:50:D9
X509v3 Authority Key Identifier:
keyid:CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c9:32:4b:8d:05:a1:a1:40:8b:6c:6e:c0:d2:66:d9:ba:43:
87:81:a0:40:59:e8:cc:70:e8:9c:0a:9e:90:55:f6:ea:cd:a9:
c7:7f:c6:d4:91:dc:80:f3:c5:37:d9:9e:05:8a:95:f1:45:eb:
19:c6:50:f8:06:39:92:1a:b5:87:60:a9:98:22:71:7f:bf:55:
5b:c4:d0:bf:ba:07:3e:80:c4:1f:d7:95:e4:fa:ab:23:25:ac:
6d:63:75:b0:9f:49:57:33:ba:47:bf:e0:1b:41:97:9d:ab:e5:
49:95:6f:d0:12:78:20:22:1a:28:6a:78:6f:76:74:16:cc:85:
cf:be:d5:2b:cf:c4:3c:60:7e:d0:24:92:44:a5:83:28:14:a7:
8a:b1:80:8b:c4:82:c0:9b:a9:5b:02:78:2d:cc:63:2f:c5:41:
91:78:93:bb:4f:fb:54:30:63:ad:9a:7c:e7:f7:6f:18:4b:69:
ef:e4:65:1a:43:e1:36:51:35:a9:39:4e:82:1c:4a:35:a0:18:
f9:19:3c:ba:cb:dd:9d:e9:ce:3c:c0:4a:6f:ed:3a:a4:ac:1f:
7d:d9:4d:57:c9:f3:66:f8:12:ef:b3:45:63:3b:3f:24:06:38:
61:99:00:18:d0:3e:c0:af:07:d4:54:cf:66:4c:b3:05:e7:25:
36:24:9f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:41 2026 by rpki-client