Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: bdsrvSHEXg02jCu7NgAC9PoNHgbJ4oBmdBvHMO8uInI=
Subject key identifier: 3E:49:4B:CC:92:6C:A2:FC:2D:86:B5:F2:96:0B:05:3F:2F:2C:61:F4
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 019D2703D4A5C1D8FE1CC02A43D128D4B7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:00:55 +0000
Manifest this update: Wed 25 Mar 2026 22:00:55 +0000
Manifest next update: Thu 26 Mar 2026 22:00:55 +0000
Files and hashes: 1: duVPwRuDqX3QDkaKIyT4P6ztbz4.roa (hash: kMA3LqVtrh17srYO2maurS2CA2PcrI4sa4rbcd9ehyQ=)
2: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: Npa5Wu9gvMYWpv/RicdOEh8TxMyc6PIhDjfu/B2u/bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d4:a5:c1:d8:fe:1c:c0:2a:43:d1:28:d4:b7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Mar 25 22:00:55 2026 GMT
Not After : Mar 26 22:00:55 2026 GMT
Subject: CN=3e494bcc926ca2fc2d86b5f2960b053f2f2c61f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:0e:b1:6a:a4:6e:26:d1:17:51:f6:c2:6a:
77:79:ac:78:6f:e4:3d:ec:84:24:d4:84:ef:fa:5c:
e5:af:7c:2f:07:3c:c7:1f:7c:0d:81:7f:12:b2:a5:
68:b5:d8:2b:d4:b4:b2:fa:1e:1a:84:2a:a5:7a:c6:
db:ef:dc:6c:d2:d4:d5:fc:c2:13:a7:67:76:4b:e0:
c4:2f:fa:4d:68:f5:c1:39:08:e7:a4:d2:d8:fd:2b:
d1:e7:00:a1:36:e2:cb:7d:0c:34:58:df:d1:93:74:
e0:38:58:cf:c3:ca:86:a7:41:88:86:ab:38:c3:17:
01:b5:df:51:13:f4:8b:6a:3f:21:53:a8:f9:70:a3:
e9:3d:b1:ad:78:59:81:a8:6a:90:bc:af:73:ba:a0:
4c:1e:1e:c1:00:1e:78:90:0e:17:5a:eb:ba:c5:fd:
f4:08:f3:b0:b9:23:82:2d:2d:27:ed:88:06:b3:6a:
b4:47:fc:2c:df:e1:83:c1:da:02:d2:63:48:9e:21:
44:12:f9:83:b6:6d:5a:86:6e:a2:a6:84:80:c8:da:
51:f6:3b:f5:b7:ac:dd:63:f0:38:0b:73:66:4b:79:
78:cf:af:0d:36:86:58:21:ed:8f:32:a9:d3:0f:c0:
18:2b:8e:de:5d:60:a9:05:bc:b4:68:78:3f:73:51:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:49:4B:CC:92:6C:A2:FC:2D:86:B5:F2:96:0B:05:3F:2F:2C:61:F4
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:05:e7:8c:96:06:8d:8d:37:92:7e:32:f4:54:61:cb:4c:88:
61:92:e8:67:ea:40:04:69:b3:d8:c1:c8:45:50:ce:10:5b:c3:
ef:20:52:3c:55:9c:a7:07:ea:ff:92:d2:1b:f5:62:c4:a2:a0:
20:ad:71:5c:9f:27:08:37:44:02:c2:bf:f0:b2:62:f1:84:89:
e4:ec:f9:27:86:9e:8c:74:db:27:ea:96:89:2e:0a:15:c9:84:
6f:73:94:63:b5:b4:68:19:b5:bb:cc:ba:64:e2:c9:ce:51:29:
db:c2:bd:6d:1e:13:1c:82:ae:b9:09:fb:2c:7f:e6:19:b3:80:
91:80:39:2f:2e:36:3b:39:6b:39:13:07:a2:f3:11:fe:db:71:
f7:1e:67:ae:90:e8:c1:3d:fc:ed:02:b0:2b:b1:64:c8:fd:51:
3b:3b:ef:f1:19:6d:44:32:7e:6f:1a:af:8b:24:80:3a:1d:a7:
10:89:26:03:f3:0d:5b:ac:19:a9:33:4e:38:59:7b:f1:5a:ce:
77:79:fb:8a:a1:6b:e2:43:03:fa:7c:56:8a:e7:a3:65:96:eb:
c5:51:52:56:76:03:2d:da:fc:e5:d3:37:ed:3b:15:fa:1a:48:
b1:8c:e1:84:19:d1:58:60:69:8c:39:02:17:be:a6:53:79:b1:
79:b7:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:24 2026 by rpki-client