Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: BvefZ9zzn4OPeLrqnan4EiRIMtDbmRf/Ubrv35wtGvc=
Subject key identifier: 9D:D5:DD:DD:9F:62:F9:EA:F7:70:8E:51:57:6E:3E:42:5F:89:97:4C
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 019D258393F96315C9E344CB00DC4C2F4E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 0506
Signing time: Wed 25 Mar 2026 15:01:13 +0000
Manifest this update: Wed 25 Mar 2026 15:01:13 +0000
Manifest next update: Thu 26 Mar 2026 15:01:13 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: K1c0jdzpc/dl3vH96JcCKR6ahGkBSg9Ng2OtX7XSr10=)
2: yjWJBP_-NJfhexDZzlwqedaPyY4.roa (hash: SkEjGblzIkRFnt59eOfa2NG/dhlC1N31bem5GR7D9p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:93:f9:63:15:c9:e3:44:cb:00:dc:4c:2f:4e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Mar 25 15:01:13 2026 GMT
Not After : Mar 26 15:01:13 2026 GMT
Subject: CN=9dd5dddd9f62f9eaf7708e51576e3e425f89974c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:51:fb:9f:06:07:a3:16:0c:8b:7c:37:45:
13:1e:0e:7c:7e:74:9f:cd:47:24:7b:41:9a:6f:46:
a8:93:3e:5e:77:2c:8c:6f:ce:b1:9e:1e:cf:95:dd:
2e:3e:10:08:e8:a6:fe:bf:c5:2a:de:ec:08:63:b9:
0d:29:bd:64:b3:ec:84:88:82:87:89:71:55:b2:c4:
1b:ab:d0:39:e2:78:33:eb:b9:8b:ef:59:f1:e3:f8:
b2:c4:75:e5:71:1b:7e:2c:76:18:2d:cd:69:ab:20:
65:e8:d2:52:95:65:17:54:ba:06:04:b0:ea:6b:0b:
e1:b0:62:eb:d9:e9:7a:53:80:4c:04:7f:f1:f5:e8:
f4:84:72:ee:09:df:20:75:2f:a6:33:db:0f:aa:bf:
c7:9f:61:37:ea:a0:ff:e3:99:f5:3b:71:a7:4e:ee:
72:14:7c:36:b2:c2:95:60:60:66:d7:53:0a:27:1d:
8c:c7:c1:20:9e:04:5d:47:8c:b4:6c:0b:d0:6a:e8:
1a:9f:15:bc:1a:72:f7:0d:11:3a:c6:33:67:16:d3:
f7:11:89:05:31:52:1d:d0:15:ab:21:9e:99:5d:7e:
33:36:d1:84:cd:66:30:4a:14:d5:5b:43:d6:a8:3a:
71:23:a8:a0:c6:c4:b4:79:0f:b2:57:82:4d:fb:fc:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D5:DD:DD:9F:62:F9:EA:F7:70:8E:51:57:6E:3E:42:5F:89:97:4C
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cc:05:25:fe:f2:fe:2b:a6:fb:56:42:38:6f:6b:2f:95:f2:
71:fd:c3:54:fc:d0:10:ff:e8:f4:cd:83:07:37:62:8d:d5:ff:
d6:a6:2a:d7:20:0e:52:ec:91:49:f9:45:f8:d0:e3:28:bc:75:
c1:de:89:86:a1:13:3d:2d:40:31:5f:12:c0:a6:1e:a6:7d:74:
5e:d1:1c:5e:1d:94:98:f9:ad:61:d2:7c:50:7d:a6:b9:a5:b9:
82:c4:66:d1:65:79:b5:2f:84:6c:96:f5:b6:72:f4:96:9b:1d:
db:d3:75:a2:db:69:66:36:90:a2:9c:19:b0:4a:85:35:99:2f:
d0:50:12:e0:93:05:c6:9c:ad:81:0a:55:6b:47:f8:b7:4b:32:
ac:85:f1:69:90:60:0f:ba:46:a8:9c:e7:28:c9:de:b4:3f:7a:
5e:a6:2f:ae:68:24:ca:75:ad:a8:56:5a:76:2b:00:db:8b:bf:
f8:fb:85:3a:95:5a:8e:64:93:3b:39:bd:5b:cf:da:d3:43:37:
f4:75:a3:d7:c7:d6:b3:c5:ab:5b:5b:08:9f:e2:81:94:69:5b:
3a:5a:19:4b:5b:67:c6:e1:14:25:b5:bc:fd:47:27:c4:92:b0:
d0:b7:c4:95:da:dc:64:7a:7b:b6:93:3e:75:22:94:04:6b:9d:
37:99:de:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:20:30 2026 by rpki-client