Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: RZUdkcquJCVTAxF1ClsUdwXh1OxzbuSgDnhXAX8uzMM=
Subject key identifier: B7:EE:96:15:EB:D8:F5:F8:A0:94:74:5D:B9:20:01:2B:26:85:94:95
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 019D265EF0661766A4EF697B5A7DB9D053BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 153D
Signing time: Wed 25 Mar 2026 19:00:49 +0000
Manifest this update: Wed 25 Mar 2026 19:00:49 +0000
Manifest next update: Thu 26 Mar 2026 19:00:49 +0000
Files and hashes: 1: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: foMaezzystqSvl5YXV4yZC7OI1rUzMsNCf0T8/u6M9o=)
2: r07b59Kbc0tU4fUroKjDGDeksk4.roa (hash: VbjM5vBRkz4uK7ac3fSu6tjCMa1PBV229HM3K4xTekY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f0:66:17:66:a4:ef:69:7b:5a:7d:b9:d0:53:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Mar 25 19:00:49 2026 GMT
Not After : Mar 26 19:00:49 2026 GMT
Subject: CN=b7ee9615ebd8f5f8a094745db920012b26859495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:61:aa:00:3b:91:d3:28:97:68:4c:1b:98:
7f:55:77:d4:cd:7c:a9:a7:d8:fa:f9:dc:78:68:9e:
65:6f:45:4c:16:7e:de:75:5d:d3:b4:53:0f:4a:eb:
49:06:51:29:0e:6c:45:82:45:13:1f:32:ef:f6:8e:
ff:49:b8:8a:38:48:48:58:43:d3:38:05:7a:54:61:
b3:19:d5:a7:a8:34:d6:0b:7b:03:14:1f:13:49:d3:
cf:82:24:ea:42:79:47:0f:bb:f9:d2:7e:7e:b6:51:
b2:59:cc:88:5b:f5:08:1d:d3:9c:54:2d:64:d4:06:
0d:2e:1d:ad:7a:46:86:73:2f:3b:9d:10:e5:e4:8e:
97:82:90:f9:b8:5f:51:36:b9:09:b3:95:e3:64:1b:
8f:d7:52:9c:02:05:fb:b3:4e:33:dc:7f:d1:7d:1e:
95:bd:39:55:4d:45:45:50:11:d5:46:06:f8:37:c5:
d1:3a:48:b9:7a:b8:76:21:e2:78:3a:57:0b:0f:43:
e3:ac:50:15:fc:bb:25:72:4b:c8:25:2a:dd:5a:4e:
17:4e:bc:c9:f6:26:8f:06:be:ea:57:fd:1d:79:94:
8b:e7:1c:ae:12:3d:cd:d6:f1:64:99:6e:c2:2d:d9:
74:99:0b:50:f0:8d:de:ed:76:63:70:19:1a:a0:ee:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EE:96:15:EB:D8:F5:F8:A0:94:74:5D:B9:20:01:2B:26:85:94:95
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:52:23:7f:5e:15:1d:8a:3c:b3:4b:21:c9:1a:a3:66:d8:87:
66:47:b6:b9:bc:cf:10:d5:b3:7b:5f:d3:5c:5d:77:72:7f:93:
41:95:79:59:93:bb:86:a4:e6:0f:e1:fd:e7:b5:44:be:12:99:
4e:03:42:ef:e5:d9:83:ae:c7:c7:23:84:21:ee:73:1e:72:48:
46:5f:84:74:80:cc:5c:e6:96:0f:b6:12:30:e0:41:f1:dc:ba:
49:57:da:c3:da:66:d8:2a:31:27:61:f1:28:58:a1:0e:55:ba:
f0:8c:41:4e:39:af:e0:fc:72:0a:b7:4c:10:57:c8:2c:6f:14:
12:4b:76:3a:9f:37:23:07:d4:bd:f7:81:50:89:34:be:8f:b1:
ee:0f:31:65:6a:de:fd:8b:43:03:c2:ca:96:10:7f:ff:4f:db:
6e:4d:1b:77:9c:bd:6f:8b:b8:c0:dd:65:33:d8:eb:b8:e9:13:
57:0f:bd:65:80:18:db:c2:75:00:63:f2:1b:03:4a:25:1e:8d:
91:32:a9:e4:1b:8d:50:f0:df:20:1b:b7:17:ef:ca:29:0c:48:
27:f3:87:d0:ea:28:bf:c3:35:0c:d7:10:db:e9:2d:40:19:a7:
a4:c1:b2:7e:ec:6c:5b:38:a9:a4:21:c1:14:16:99:90:c9:35:
34:4a:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:44 2026 by rpki-client