Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: pnFqpeu9/4QUymtZ8Jg4DPpqRoO7GbQ4513I++fzCLY=
Subject key identifier: 09:A5:6B:D4:4A:34:C0:BE:9E:D6:71:E0:64:E5:69:9B:F3:06:A3:60
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 019D2704DA88262B4C2AAD5455D3FF46DD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 0932
Signing time: Wed 25 Mar 2026 22:02:02 +0000
Manifest this update: Wed 25 Mar 2026 22:02:02 +0000
Manifest next update: Thu 26 Mar 2026 22:02:02 +0000
Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=)
2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: WTP7Yn83CLiZ7Nbs2M6tH3HbJF/r6dpEHdGoQEf8DOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:da:88:26:2b:4c:2a:ad:54:55:d3:ff:46:dd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Mar 25 22:02:02 2026 GMT
Not After : Mar 26 22:02:02 2026 GMT
Subject: CN=09a56bd44a34c0be9ed671e064e5699bf306a360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:53:06:5e:45:19:e4:96:9f:f3:7d:f1:fb:
55:54:4d:36:e4:aa:e8:20:3d:99:1c:a3:b5:7e:34:
30:a2:97:0d:4a:24:e9:cf:cf:10:78:e6:c1:70:d4:
d3:1c:f4:8b:e4:4a:cd:b3:d9:ee:85:eb:2f:f6:51:
61:86:ce:7e:8e:cc:37:27:4e:8a:79:e2:5d:4d:c6:
e8:94:98:6d:1d:7d:d8:51:2e:f1:43:cf:10:38:9f:
77:11:bc:08:27:bf:74:02:a4:57:1a:9f:a1:01:6c:
72:1e:3b:66:13:ba:5f:1c:38:37:f8:08:6d:20:ea:
ae:f6:09:2e:bb:61:ce:37:f1:d9:c2:ef:b4:3d:04:
c9:1b:64:25:2f:30:2a:43:ac:1b:42:b7:bb:9e:79:
65:52:14:6d:d7:40:08:e2:c9:3f:85:82:00:42:13:
60:43:e6:48:8e:f5:0c:75:f8:b0:4c:8c:be:6d:ee:
be:10:c0:b8:85:41:3f:f3:0c:76:da:1d:24:3a:c0:
60:3e:9e:26:e6:ed:f1:b0:bb:59:df:a0:a9:a2:cb:
6c:d6:85:e1:59:a9:6a:e7:ed:8b:08:56:f7:60:08:
af:8d:47:ec:74:fa:92:78:c9:2f:b9:2a:72:42:96:
19:ca:26:b4:4e:57:98:84:b2:b8:7a:2f:24:ca:b3:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A5:6B:D4:4A:34:C0:BE:9E:D6:71:E0:64:E5:69:9B:F3:06:A3:60
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:91:b3:1b:39:aa:a2:37:ae:e3:60:49:b0:a8:d7:44:06:e7:
7c:88:7c:ee:8f:18:e0:67:23:a0:d9:fe:3f:fe:9f:90:f0:f9:
1c:b0:d5:21:49:75:9e:72:b3:56:1c:ec:f6:1c:b7:12:1d:c6:
5a:e1:8a:0e:e9:01:0f:20:cf:e4:69:75:a3:e2:3e:ae:1d:dc:
d7:0b:4c:d1:bf:30:52:48:eb:d8:f6:48:ee:4c:ad:e8:43:e7:
fc:19:b0:cc:75:17:6c:c5:a9:35:10:c4:4e:f3:12:b6:25:1e:
03:c2:d9:b1:a1:9f:b4:33:a3:3d:8b:f4:fc:f3:35:93:22:33:
15:70:ba:ba:ca:11:c7:b6:18:b5:9b:01:44:0c:20:91:5f:e8:
87:85:e1:0f:f6:a2:39:5e:b6:3c:48:78:94:71:ec:84:6a:01:
fc:c5:d8:a7:e7:38:87:b5:04:87:be:22:c5:c3:a1:42:36:f6:
90:45:de:00:8e:a1:ea:cc:84:bc:bc:99:7b:7c:5e:fb:44:f5:
a9:e8:d4:ce:09:a5:47:9e:e7:35:9a:72:af:cc:47:db:b5:a6:
2c:d7:e9:91:8f:60:a7:e3:f5:7c:ab:b7:2e:d2:7f:2c:6d:b0:
02:18:74:a6:72:5c:fc:8a:7a:d0:9a:7a:de:c4:90:bf:53:a3:
49:85:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:51:35 2026 by rpki-client