Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier: PxfHV6e0P+uzm2a/sZAT3jMkglSOXgbRSXsmkXyuS3U=
Subject key identifier: B1:FB:E4:2F:B1:1D:D3:5A:66:FB:E3:00:B6:CE:E1:66:94:1B:5A:0E
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 019D273B1678DBA36E852B03F18FDF72E5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 23:01:16 +0000
Manifest this update: Wed 25 Mar 2026 23:01:16 +0000
Manifest next update: Thu 26 Mar 2026 23:01:16 +0000
Files and hashes: 1: 3I0ccbWDDm2AJ0Og3v2UYgTm0kU.roa (hash: vjrwzp/zqZBxc6wOSE5N6kztkRal6ScIrhGe+5Xi3bI=)
2: MEjN6NiBRUno6jMiVrI76qBgUXE.roa (hash: s2vQYXj0w7LOeK8L7upi2AL1yMhCtXme3TjzeGEM0n8=)
3: ZknLlp2vh9WJk0H7iXXLOw9c2pU.roa (hash: S6ynW8hTvcrSOBVEp2ULNqC2ZlGWhPVxKi1FBjbkc4c=)
4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: Ah1gBJLrLbDceU2QdH23ktGf8TR+AAC/wN+6AJSaPC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:16:78:db:a3:6e:85:2b:03:f1:8f:df:72:e5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Mar 25 23:01:16 2026 GMT
Not After : Mar 26 23:01:16 2026 GMT
Subject: CN=b1fbe42fb11dd35a66fbe300b6cee166941b5a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:ad:7e:f5:5f:a5:20:e9:13:35:ea:9a:05:
88:59:5b:4e:82:c7:39:16:dc:a1:96:f2:15:eb:86:
83:b0:31:38:03:b7:f2:1d:6c:80:b9:b3:3e:ac:19:
62:0b:08:ba:e4:55:2d:e5:46:de:31:c6:01:4a:eb:
d4:3f:bf:1a:81:1d:ce:ff:9a:ac:7f:9a:eb:37:ef:
a7:8c:58:4e:b8:62:05:06:d6:e1:42:a2:1a:4a:1a:
bb:83:51:3e:ef:78:f1:2f:44:bd:1e:d7:96:83:21:
6d:73:8a:18:f5:eb:3c:f2:40:51:0b:4c:a8:b9:db:
44:87:bb:66:51:89:21:8d:63:40:8b:f7:04:f1:a8:
d2:c0:22:43:7d:36:38:df:34:9c:dd:84:63:49:0a:
6d:79:31:b0:67:7f:66:24:40:fa:50:4c:8d:43:6e:
d6:96:e9:8f:f7:3f:fc:c3:f4:3a:43:3c:db:19:1e:
bf:dd:82:31:71:ef:21:9d:27:72:2e:d8:fe:b7:39:
24:ba:09:7c:8f:b9:ca:39:87:33:62:ba:1d:00:b7:
9a:51:19:1a:66:e5:e0:30:9b:3c:69:03:eb:4e:b9:
c6:b5:2c:10:a9:46:8e:85:3d:e1:8e:76:ba:7d:0e:
7b:d4:82:7c:f3:4e:9c:7d:02:ae:8b:bc:6b:40:09:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:E4:2F:B1:1D:D3:5A:66:FB:E3:00:B6:CE:E1:66:94:1B:5A:0E
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:46:6b:88:42:3e:8e:f8:12:4c:cf:37:af:a3:cd:67:1f:ac:
6a:9b:ae:9d:1e:4c:e3:01:2a:ef:33:f5:4c:ae:0d:fb:d5:47:
d8:81:e2:3b:99:2d:cc:d9:88:d7:27:a6:b5:3f:00:ac:49:d8:
5d:30:c1:9e:7b:46:b2:b0:e7:00:f5:b6:60:17:47:dd:c6:1d:
e6:e7:1f:84:d6:e9:bc:5a:22:23:72:5e:e1:57:36:b9:1b:fa:
0a:cf:aa:f8:08:b3:77:3c:28:86:ec:d0:08:ad:a1:c7:a1:2d:
a2:48:e3:22:b6:f5:c0:82:c7:03:53:c5:51:a0:cb:33:81:b8:
52:71:e6:83:59:80:d0:5c:8d:f2:64:82:6f:e4:cf:dc:ee:fc:
f7:bf:a1:2b:13:ad:b7:5b:07:d8:f5:1a:f0:31:cb:49:71:b2:
d4:e4:ba:43:36:51:82:e3:1f:8c:b5:73:d7:bf:f5:d5:79:12:
ab:e2:42:f7:08:7c:52:b4:8c:27:a1:a1:86:f7:0e:07:db:2c:
c8:ab:c9:51:02:f9:43:f6:0a:62:0c:1c:f6:a9:d3:5e:9c:c1:
12:de:29:2b:be:d9:9a:86:b7:40:97:d3:56:2e:a9:81:ed:5b:
6e:2c:10:d7:b6:81:2b:a9:d1:50:3d:fb:2f:bf:e5:9e:26:88:
f5:d4:ce:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:46 2026 by rpki-client