Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
File: yq46VN0DiVaD7tvDedHg27Brm9s.mft (raw, json)
Hash identifier: y/ViPF+Yu5BiPdbVWvEi7IMiwVqRflBmYwbOVq+t4FM=
Subject key identifier: 9A:5F:67:14:8D:54:D9:13:F4:49:B1:DE:81:69:1A:C5:F5:9E:E8:DC
Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
Certificate issuer: /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Certificate serial: 019D2AE03FFA07396A4CAF5C5B0D2BA5AD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
Manifest number: 0315
Signing time: Thu 26 Mar 2026 16:00:32 +0000
Manifest this update: Thu 26 Mar 2026 16:00:32 +0000
Manifest next update: Fri 27 Mar 2026 16:00:32 +0000
Files and hashes: 1: DOL6_bM0cayFn6lDHZcPsYXxrCI.roa (hash: SL51iqqDzym7zDZje/TntRQN14HmuoWDKSbYF6rNrYk=)
2: yq46VN0DiVaD7tvDedHg27Brm9s.crl (hash: ywsG+V37jrWnc0CD3WBjsZws5LSQhTmCf40tYOhpiXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:3f:fa:07:39:6a:4c:af:5c:5b:0d:2b:a5:ad:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Validity
Not Before: Mar 26 16:00:32 2026 GMT
Not After : Mar 27 16:00:32 2026 GMT
Subject: CN=9a5f67148d54d913f449b1de81691ac5f59ee8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:2f:66:c6:14:c4:72:08:89:21:e1:04:14:
90:d7:ae:0f:6b:5a:dc:8f:00:ca:eb:f3:d4:40:41:
93:5b:03:d3:7a:85:e0:f5:a0:91:31:57:b4:cc:2d:
56:04:f3:04:3b:70:ca:56:b2:49:9a:68:5f:35:1c:
12:d9:1d:fd:88:5d:76:05:b1:e0:1c:5e:e2:2f:14:
84:96:ca:ce:0b:28:98:67:7c:49:ad:f2:46:95:84:
a6:ea:0a:13:1f:05:01:4f:76:a9:f3:47:c5:33:fa:
4e:60:3d:10:3b:3d:37:f2:39:c8:69:5b:ca:ec:00:
42:f6:d1:ce:1a:b8:e6:6d:f9:a9:1e:74:6d:da:97:
3f:b9:5f:69:52:4a:3f:dc:fe:aa:fd:90:3c:93:37:
1f:7f:95:09:77:4b:10:bd:33:47:08:c4:27:1c:2a:
8e:6a:d7:bc:e5:be:d0:21:50:81:2b:98:b0:a4:cd:
59:b2:ad:b0:d5:fb:70:00:4d:e4:d5:7c:e9:e3:30:
9f:3b:0c:c5:57:18:5e:a5:87:3f:6b:cc:f2:24:64:
63:87:fd:01:eb:b2:63:31:2d:8e:9a:09:77:3a:74:
91:d5:6d:24:13:0a:24:7d:97:f8:6e:9c:8b:54:0a:
5e:d8:59:16:54:17:d1:d8:af:79:ff:73:c4:2d:6b:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5F:67:14:8D:54:D9:13:F4:49:B1:DE:81:69:1A:C5:F5:9E:E8:DC
X509v3 Authority Key Identifier:
keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:81:0b:fe:24:c6:72:b5:68:9b:8f:99:51:4b:e2:4b:43:8c:
31:c6:59:5b:85:ec:63:ee:b9:6c:6c:e3:e1:9a:f0:12:95:1c:
77:83:3e:0c:76:42:cb:3c:1e:36:93:30:60:52:18:25:2b:3b:
a5:6c:32:91:81:87:cc:23:b8:61:b2:2d:2c:2e:7a:8a:61:44:
13:a1:de:cc:d9:0f:a3:e1:ee:2d:80:50:d2:d1:a4:02:9a:59:
eb:a8:2a:3f:a5:a7:5a:cd:8f:6d:74:ba:dd:f0:6d:b6:be:f4:
7a:45:0a:35:69:c0:8f:46:9d:13:f1:b6:77:2d:92:38:cb:ad:
0f:83:9f:d4:96:04:d3:da:0c:dd:2e:20:61:4a:ff:74:86:5d:
e5:cf:26:7d:c8:5a:a3:fd:d0:94:59:c5:3a:b2:48:4b:f0:6e:
85:cf:f0:09:c8:03:59:7e:b0:71:27:f1:28:55:ef:9a:44:1a:
7b:f0:6b:ee:40:91:17:2a:5c:15:9e:01:82:cc:84:32:ec:f5:
b7:53:55:44:5e:0e:f2:ec:d5:62:f5:42:27:a3:1d:90:f8:26:
00:6c:c6:41:f9:9f:3b:cc:17:a7:ed:2c:1d:dd:af:9f:60:84:
9b:b1:f3:15:13:40:9a:80:8a:f8:b1:53:fa:ec:9b:04:59:cd:
94:e6:b0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:48 2026 by rpki-client