Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
File: YAc2XgzzDKj86YxiZg0YapebyVk.mft (raw, json)
Hash identifier: pI7eTc+oDUEy/s1AfZlpWkOOb55GWD7JzF+jO3WXOOI=
Subject key identifier: 3B:C9:BB:E6:0F:A4:35:2B:3C:92:BC:FA:34:C2:E4:F7:10:19:7E:7A
Authority key identifier: 60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
Certificate issuer: /CN=6007365e0cf30ca8fce98c62660d186a979bc959
Certificate serial: 019D2772E9358172592C85A9F42D7DBD3ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
Manifest number: 0BE4
Signing time: Thu 26 Mar 2026 00:02:15 +0000
Manifest this update: Thu 26 Mar 2026 00:02:15 +0000
Manifest next update: Fri 27 Mar 2026 00:02:15 +0000
Files and hashes: 1: VhcZAOMO7N09LPQIiVy-ZSyhJt8.roa (hash: YOyQI4AeCxujnK36EwQ68GRZtvK8FNB5/s4x1q9BUjk=)
2: YAc2XgzzDKj86YxiZg0YapebyVk.crl (hash: MjnFkhMRoS0f24r0BQFHKg2GkYOcuJWsPKiLtC0UI9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e9:35:81:72:59:2c:85:a9:f4:2d:7d:bd:3a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007365e0cf30ca8fce98c62660d186a979bc959
Validity
Not Before: Mar 26 00:02:15 2026 GMT
Not After : Mar 27 00:02:15 2026 GMT
Subject: CN=3bc9bbe60fa4352b3c92bcfa34c2e4f710197e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:78:ff:47:c8:b9:a0:50:65:73:38:34:ae:
38:c7:81:73:50:bf:cb:d9:e3:5c:fd:50:5d:46:af:
fb:35:3e:c9:c9:bb:37:2e:71:38:ee:89:b0:1f:38:
77:b6:75:4b:51:db:d8:1c:40:7d:8f:2d:8e:f2:95:
db:58:60:de:ff:4a:a2:10:83:ba:81:f7:d6:f8:7d:
7e:c8:85:08:f6:21:9b:90:cd:ee:e4:d2:a8:0b:ba:
9d:60:f1:b2:f8:9a:90:90:b8:b4:41:a9:61:d7:f3:
56:a7:14:0f:41:8e:c5:be:e3:30:0f:47:ad:9f:62:
5a:76:db:16:b3:f9:70:6c:7b:43:f6:b2:61:9a:de:
38:b3:38:68:36:3d:60:20:f2:3e:30:82:11:b3:3f:
ae:f9:a2:7b:0e:a2:5e:96:1e:21:25:4c:9a:3d:22:
27:02:07:ff:bd:5a:a3:fa:aa:37:61:a9:1a:31:6f:
3b:0f:72:8b:72:12:e5:06:c1:c8:27:27:2f:48:d1:
3c:f2:22:8d:5d:aa:df:db:aa:83:5c:d5:97:b7:5f:
86:7f:0b:81:05:20:ae:07:9c:86:65:49:62:e4:40:
bd:fe:f1:bc:e9:f8:c9:06:ac:78:e9:95:80:66:bb:
4e:52:b0:23:8a:97:5b:a9:48:e8:19:48:9e:c6:1b:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C9:BB:E6:0F:A4:35:2B:3C:92:BC:FA:34:C2:E4:F7:10:19:7E:7A
X509v3 Authority Key Identifier:
keyid:60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:e7:2a:2f:59:49:42:25:ea:9e:33:ea:58:98:9f:c5:bc:17:
f5:1c:1e:8c:65:7f:fc:d5:8c:fd:ab:fe:3a:d7:a1:9d:d4:fb:
dd:4d:fa:0d:9f:5d:da:40:a3:36:c1:e0:54:a8:90:f5:8f:0d:
64:b6:cb:3a:71:7c:e4:a6:57:28:e7:97:0c:c8:b0:f2:16:05:
97:f7:1c:49:1e:20:70:b2:af:03:a3:93:45:69:72:97:df:30:
42:27:d1:03:2b:1e:05:2e:18:57:da:33:77:cc:ac:36:42:a7:
30:af:00:20:f2:e4:3d:57:e3:8f:66:93:ab:7b:7c:94:10:cb:
59:a2:f8:34:78:a6:19:4d:2b:41:04:5f:f8:79:9e:26:fc:20:
86:af:11:b6:2a:35:ab:44:d5:af:91:b7:ad:75:dd:c6:f8:b4:
10:9e:e7:b4:42:c8:ed:ff:e3:4e:60:d7:a0:56:ea:ee:de:52:
d0:83:35:2a:c0:4d:c4:53:4c:80:15:25:a4:ec:51:56:83:ee:
7d:5b:44:da:2c:6d:81:4b:d8:d6:e6:c5:94:8a:8b:e9:8d:9f:
54:5b:38:18:ad:2b:72:b1:f1:19:eb:4b:bd:e2:9e:f5:57:98:
61:58:30:81:e3:c2:e2:7b:18:df:6b:70:eb:f1:29:e7:fb:17:
b6:85:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:09 2026 by rpki-client