Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
File: ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft (raw, json)
Hash identifier: Dzds2b8/gmygIQePqyDm5HNT7bTOwYrG2XyWH++CnrE=
Subject key identifier: A3:F9:B3:4A:1C:BA:6C:B3:12:60:0D:D7:3D:D8:4E:29:C2:10:33:B6
Authority key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
Certificate issuer: /CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Certificate serial: 019D98862BB39DBAB601460E1488614A7F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
Manifest number: 060F
Signing time: Thu 16 Apr 2026 23:00:22 +0000
Manifest this update: Thu 16 Apr 2026 23:00:22 +0000
Manifest next update: Fri 17 Apr 2026 23:00:22 +0000
Files and hashes: 1: WdcwwVvHHM9XNKKDiv408pGW0_s.roa (hash: 8+/x9c3F4SvSIKBaDBTfqOk6wDn1R73L7fhpNgptXLw=)
2: ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl (hash: Il01BrROPMPPtsb0RgbXsQX9KdJ4nG6aQ5VnLeDJig4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:2b:b3:9d:ba:b6:01:46:0e:14:88:61:4a:7f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Validity
Not Before: Apr 16 23:00:22 2026 GMT
Not After : Apr 17 23:00:22 2026 GMT
Subject: CN=a3f9b34a1cba6cb312600dd73dd84e29c21033b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:88:38:02:6c:a6:9a:6f:fa:00:e5:15:5e:
5d:64:54:5a:5c:3f:39:15:66:46:5e:ef:c2:bd:2b:
f9:4f:52:e6:ac:7a:91:a1:64:43:6a:31:90:2a:b3:
f8:1a:e4:78:39:8f:c4:1b:b8:7b:b6:cc:a4:af:e2:
2e:c5:f4:8f:cd:f6:68:b6:a7:f0:f8:d4:de:75:62:
a6:3b:d6:ed:81:10:bb:74:b8:01:83:ef:4b:78:0b:
48:d9:53:bb:df:c4:af:d0:35:70:b5:60:c4:0b:e8:
8e:89:75:5a:f0:b8:6b:1d:05:d0:e5:57:6a:d8:a3:
34:26:c9:7e:75:b8:b1:ae:f7:89:ff:2d:89:6f:21:
91:21:0e:35:f9:91:24:a5:3a:44:34:14:d4:7c:86:
75:d5:f9:f6:4a:62:e5:37:dd:cd:1a:ef:61:6e:11:
78:d3:7f:6e:57:4c:7f:81:13:17:bf:25:2d:c9:0c:
8f:2f:e9:ee:e1:cb:84:5d:21:11:d5:01:bb:c4:43:
98:df:1a:c4:d5:d9:e0:3d:0f:d4:68:56:92:cd:c0:
5f:2d:6a:7f:0f:17:07:1b:b5:29:fe:2c:91:64:d2:
ba:d8:f1:ec:1e:46:cd:a0:cd:b9:60:db:03:a7:b9:
37:a3:b8:a8:62:08:22:ba:c1:79:cc:09:36:db:30:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:B3:4A:1C:BA:6C:B3:12:60:0D:D7:3D:D8:4E:29:C2:10:33:B6
X509v3 Authority Key Identifier:
keyid:CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9e:49:7a:67:df:5b:3b:9f:58:f9:1a:3a:67:6e:1d:c8:c1:
d8:58:43:cc:9d:c6:75:a8:3e:6c:5d:ba:f0:c4:1c:49:89:46:
93:84:3c:e5:f2:2c:54:e9:a5:d4:c9:7d:db:7b:2d:41:09:f2:
b7:1b:6a:4b:0a:8b:ec:29:1a:b5:13:10:30:fd:0e:55:7c:32:
52:ae:2b:ce:3d:46:4f:b1:08:b5:76:0d:7b:57:04:6f:ce:13:
e8:67:bc:ec:09:92:67:45:74:e6:a2:48:08:b1:95:07:88:fb:
7a:26:37:86:b2:f0:8d:f8:cc:79:29:ee:64:67:87:8b:4b:df:
1e:8e:25:f8:61:be:6e:6c:d4:06:a7:16:7f:e9:b0:3c:94:68:
e8:6d:78:92:aa:cf:99:4d:23:f2:5c:fe:61:39:b4:f0:33:80:
11:90:02:57:9d:ac:7f:88:c9:ab:40:a4:1f:7e:a5:d1:2f:79:
00:f8:77:be:8b:03:15:66:9b:5b:1d:c5:bc:fb:7d:c4:83:4c:
4c:17:3f:16:c2:c5:9f:ec:3b:31:c4:78:aa:4a:f4:c4:d4:b1:
05:90:81:39:e8:27:9a:fb:c8:14:d4:5b:b5:48:ac:1b:f5:c8:
bb:0a:66:84:03:14:2d:29:95:39:01:d8:bf:de:3f:19:b5:a5:
f0:6c:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:59 2026 by rpki-client