Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
File: YAJlJf1EpPx1siRPgNAiY09fdjU.mft (raw, json)
Hash identifier: Oft/eG5V/nZKdWBHAjVLgtlJhcI9/aNBv7ABDYC3B8o=
Subject key identifier: 64:01:D6:D7:30:23:95:79:FE:48:9F:AF:60:58:29:C0:F0:53:97:35
Authority key identifier: 60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
Certificate issuer: /CN=60026525fd44a4fc75b2244f80d022634f5f7635
Certificate serial: 019D281641FDC30BF83C252ADADAE777DD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
Manifest number: 027F
Signing time: Thu 26 Mar 2026 03:00:40 +0000
Manifest this update: Thu 26 Mar 2026 03:00:40 +0000
Manifest next update: Fri 27 Mar 2026 03:00:40 +0000
Files and hashes: 1: 1sBpsAgGmSmkI2DNNDGh5oQcGy8.roa (hash: hMp3WaNL7UAirQa4ZKu/uxZXkQM56eznsw/jc56uSx4=)
2: YAJlJf1EpPx1siRPgNAiY09fdjU.crl (hash: vgZ61hoWRFrWh/Ek2bIvBkdA3r9WOBQLDNrjVA1yeYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:41:fd:c3:0b:f8:3c:25:2a:da:da:e7:77:dd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60026525fd44a4fc75b2244f80d022634f5f7635
Validity
Not Before: Mar 26 03:00:40 2026 GMT
Not After : Mar 27 03:00:40 2026 GMT
Subject: CN=6401d6d730239579fe489faf605829c0f0539735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:7e:da:3c:6d:f2:ba:b4:ab:fb:57:50:ba:
d4:ad:af:b7:12:43:eb:4e:cb:51:00:1f:e5:6a:b6:
53:06:a0:70:70:b8:fa:5a:58:e1:23:79:78:9e:c4:
74:7d:6c:90:ad:31:07:09:d7:eb:a6:70:18:a0:02:
1e:a0:b7:07:6c:2e:95:72:71:96:4e:47:aa:3d:b0:
dc:1d:fa:48:d1:f0:f4:d7:ac:a7:d9:14:d8:ed:51:
56:17:93:50:a0:fe:2a:55:85:ef:55:e5:03:37:20:
80:34:fc:5e:e4:49:5b:c2:69:10:14:df:bf:f3:67:
27:a5:a7:3b:e7:f2:17:a0:f8:f3:a7:ec:ec:6f:b0:
50:ac:7b:d7:9c:6e:41:2e:a5:89:f7:16:45:02:7c:
4f:d1:97:20:8d:38:63:80:84:52:f9:04:8c:be:80:
97:ea:a2:0c:55:0a:e8:81:3d:ed:8b:55:f3:25:fa:
70:d6:9a:6d:0b:1b:3f:57:bb:3c:c9:aa:10:dd:da:
fd:5e:e5:84:82:96:d1:19:93:a9:43:52:69:3d:6c:
cc:a6:32:56:80:bd:0c:dd:dd:85:46:0c:60:e5:51:
05:b4:c3:3b:86:f1:5f:f1:c7:55:cb:27:dc:ed:a9:
a7:b8:13:cb:d3:15:87:f0:d5:a7:13:dc:8d:19:0c:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:D6:D7:30:23:95:79:FE:48:9F:AF:60:58:29:C0:F0:53:97:35
X509v3 Authority Key Identifier:
keyid:60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:80:a3:4e:b9:b8:7d:ce:79:90:ec:8a:99:6e:d4:a9:ea:ae:
28:01:5a:30:33:8d:93:fc:0f:ea:74:61:4a:26:37:fa:c4:da:
9c:23:c6:d1:c7:ae:48:15:28:ac:ff:7e:c0:b9:0f:b2:26:82:
f7:ab:85:49:f4:3f:ae:10:1e:c7:4c:0e:75:e8:cc:5a:db:ae:
d5:64:ec:da:9d:e7:1f:c3:d5:f0:8b:03:6c:75:22:43:55:9f:
2e:9b:ac:5f:a9:82:1c:07:60:60:3f:a0:3f:b6:12:61:63:ad:
df:c9:59:40:5b:e4:b5:f7:66:ad:9b:70:c6:7d:5a:93:bc:da:
56:fa:4b:be:f0:df:46:b1:1c:b0:50:2d:b3:e5:2a:62:45:7f:
84:44:eb:6a:f8:c0:63:3d:a2:b0:8f:9b:14:6d:e7:24:06:92:
e1:0a:58:11:70:63:f5:c2:18:f9:19:c2:45:1e:aa:47:e7:63:
93:21:6d:eb:24:3d:58:f6:db:3c:aa:f5:9e:c9:96:61:7a:01:
dd:89:b5:f1:d0:66:23:0a:b2:2b:ed:51:51:c1:7e:70:21:cc:
a6:31:c0:35:23:52:eb:89:6d:33:ed:50:da:e6:62:4d:ce:0a:
6f:92:c9:49:a6:7d:14:70:56:98:6a:1c:d7:cf:c5:c4:27:0f:
3d:ce:e7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:11 2026 by rpki-client