Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: MkbfSzmeRMth/ewPXsH8y2o9YmWThhzeW/LVHBL69YE=
Subject key identifier: D1:AC:AA:3F:FE:57:CF:ED:64:A9:07:12:7A:EB:43:55:D5:36:28:E5
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 019D273B3610D7D60A2DA64B0A2D2B71B528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 07D5
Signing time: Wed 25 Mar 2026 23:01:24 +0000
Manifest this update: Wed 25 Mar 2026 23:01:24 +0000
Manifest next update: Thu 26 Mar 2026 23:01:24 +0000
Files and hashes: 1: 7eP7TwNaRBKXgHVXQPj9yKJaIEQ.roa (hash: ilu1OaDtcIPxYeaNVeuS9YaTFPbuPd9sYiHNRmOaCMs=)
2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: ZyWgsXmL9J6UMjW6uva9GkTaI4f/VkqYTt34AjWuqQo=)
3: t6QTeO_UUKyvQ6rnuFTVQVtV-d8.roa (hash: lkQHddLK92kTmS7mRA5Mrvzd/PdOAJ8/DAOJGdqwGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:36:10:d7:d6:0a:2d:a6:4b:0a:2d:2b:71:b5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Mar 25 23:01:24 2026 GMT
Not After : Mar 26 23:01:24 2026 GMT
Subject: CN=d1acaa3ffe57cfed64a907127aeb4355d53628e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:1e:0a:e7:bf:75:a7:9a:50:fa:cf:e7:8d:
75:18:5d:ee:2b:d0:97:a1:e0:97:87:2b:b3:8d:83:
32:c8:85:91:00:06:2e:85:c0:39:80:a8:51:81:40:
28:c5:6f:a4:c4:b5:18:c0:1b:67:2a:23:d4:8a:88:
cf:63:7e:45:37:eb:5d:bd:50:65:f6:00:de:86:b9:
52:24:72:5d:09:24:94:a3:15:73:3d:8d:61:fe:70:
44:bf:d6:73:9d:f0:d2:41:77:ff:06:c6:36:4f:e4:
55:f1:20:f5:3d:72:63:21:5a:41:79:85:cd:22:46:
2a:3c:80:3f:5e:00:0e:56:58:0f:b1:20:95:84:8c:
4b:18:6e:6d:9b:b8:a7:99:b7:5d:0f:ba:87:1b:7e:
f0:d3:3b:a2:83:18:1e:d3:01:71:f8:47:9f:a7:ad:
26:58:98:ef:4b:cb:82:4d:be:c9:30:d9:32:b5:28:
80:29:f9:aa:bb:9e:ed:4b:9c:e2:92:af:29:8c:f1:
87:28:58:c6:12:5c:c4:83:a3:9b:b4:fc:f6:9b:e6:
d7:cb:0d:8f:6b:81:67:fe:9a:e8:d1:e0:a9:47:7d:
76:9b:d0:60:bd:1a:57:81:a6:d3:02:6b:b5:03:ea:
ec:02:56:96:47:d5:8e:fe:52:19:5a:bf:ea:e4:c6:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AC:AA:3F:FE:57:CF:ED:64:A9:07:12:7A:EB:43:55:D5:36:28:E5
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:54:13:42:63:17:ed:c5:64:73:0a:aa:78:99:eb:d8:88:42:
90:bc:e1:bc:8c:d7:f3:61:91:63:6b:30:a2:77:0d:fa:e4:e8:
20:ce:6f:fd:b9:46:03:cc:2a:a8:7f:39:51:c2:ca:d2:eb:4c:
d3:e2:fa:3c:ed:69:f9:81:73:8e:d3:ff:cd:f9:fe:e0:e9:32:
95:08:44:56:d3:12:fa:f2:e6:ee:1a:24:98:1a:ea:bb:e7:cd:
13:82:4b:0a:45:57:b5:3e:4c:bb:c4:24:b9:83:00:a1:79:1d:
07:7a:b3:7a:e3:1b:83:dd:37:0c:f7:96:80:c2:ef:d2:0c:83:
3b:fe:ba:0c:dd:ba:4f:20:1a:50:76:59:92:cf:7b:8a:fc:34:
ed:c7:85:d3:a9:bb:7e:c2:b9:e5:51:52:cb:8b:cd:e8:4e:95:
7e:4e:4e:01:1d:f2:e3:79:a0:07:c1:34:53:25:08:2d:ab:1a:
a1:74:9c:bd:21:69:cb:b0:41:50:00:ff:e4:9e:4c:7f:5c:67:
4d:e6:70:41:da:02:c3:f7:09:bd:f0:89:44:a2:eb:6a:63:75:
f9:6e:49:8a:79:17:7a:e2:b4:02:f6:ca:36:93:a0:f1:36:7e:
88:0b:c7:eb:1b:51:ae:b5:7b:f6:f3:5f:fe:e7:3b:b1:da:8e:
40:f8:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:48 2026 by rpki-client