Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
File: yQDvPdXdG-FdCLuTy91jtKyGDms.mft (raw, json)
Hash identifier: RYmAcRslEU41W6mf/XRiorb8QqyzphbdyTRk4mBOJYY=
Subject key identifier: 48:7B:67:80:54:FA:89:01:59:C6:0F:07:B1:6C:2E:F5:93:7A:4A:BC
Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Certificate serial: 019CA9EACBAB3E81F632280EB6E9D8EB649E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
Manifest number: 12B6
Signing time: Sun 01 Mar 2026 15:01:02 +0000
Manifest this update: Sun 01 Mar 2026 15:01:02 +0000
Manifest next update: Mon 02 Mar 2026 15:01:02 +0000
Files and hashes: 1: 49DXB44yIji8t0Vtkb2JOEt-9YU.roa (hash: Q0egqvB13KLmhzjLlUFrH7e6woM10xcOj+hIzVjBTDA=)
2: yQDvPdXdG-FdCLuTy91jtKyGDms.crl (hash: xTP1Q3gIZDNu/oa/0XVKK1oxPcktQ37w/DJRHUOuAw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:cb:ab:3e:81:f6:32:28:0e:b6:e9:d8:eb:64:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Validity
Not Before: Mar 1 15:01:02 2026 GMT
Not After : Mar 2 15:01:02 2026 GMT
Subject: CN=487b678054fa890159c60f07b16c2ef5937a4abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:90:b3:74:16:16:24:bc:62:50:2b:91:0f:
bf:35:91:04:2a:5a:31:46:bf:a0:f1:6d:57:77:e5:
c5:f6:e9:fa:50:61:10:7f:54:7f:33:05:b6:6e:0d:
a9:41:87:37:59:ef:96:41:be:2d:3a:58:8a:81:a3:
2b:60:eb:eb:78:03:f1:a7:45:0b:a3:db:cc:3f:5d:
01:f3:2b:54:a5:36:5d:38:69:d8:a1:9b:74:99:fe:
1f:55:6a:84:fb:71:c6:89:3f:93:1b:d4:5c:7f:38:
e1:46:cb:80:e2:b3:63:9e:ca:6e:1d:8c:ef:e3:7e:
bd:e2:3a:3c:37:0c:82:e4:9c:0c:27:94:fc:2f:2d:
16:c1:69:fe:ed:bf:74:a0:6b:d9:cd:bd:91:e7:fd:
a6:87:a5:b7:13:34:13:16:ec:60:7d:d7:4a:4e:d0:
ae:d9:38:45:ea:22:42:35:0c:39:49:76:a6:75:aa:
c8:6b:a4:7c:2e:df:d3:13:ea:72:0a:ff:cf:1b:8e:
05:e7:39:24:3f:f7:66:6a:ae:df:04:bb:a7:bf:9b:
eb:6f:5b:ef:6f:23:ee:64:5b:bf:a0:7d:86:87:73:
cd:d8:a3:82:94:5a:16:1d:b5:7f:c4:a3:69:db:e0:
de:f0:3f:f0:05:d3:39:21:58:b8:44:3c:83:bc:30:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7B:67:80:54:FA:89:01:59:C6:0F:07:B1:6C:2E:F5:93:7A:4A:BC
X509v3 Authority Key Identifier:
keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0f:65:8e:6f:7a:c8:bb:5f:1c:53:77:6c:5c:c2:b8:18:e5:
69:1b:df:e3:0e:de:d1:a8:4f:98:c9:33:9f:f1:79:89:7a:93:
84:54:2a:fc:bf:6a:4e:fd:f2:28:1f:31:42:2c:c4:92:ae:63:
0a:3d:bf:08:21:28:09:f6:c4:9d:9e:2f:01:b7:d1:3d:9c:da:
6c:83:ba:b0:0a:14:fb:54:26:df:38:03:38:0f:dd:bf:b0:18:
f8:64:45:ba:e7:d5:5f:90:3e:16:66:a3:38:b3:1a:45:71:a7:
81:bd:15:18:49:f4:05:32:e7:dd:41:19:6e:f5:51:94:05:27:
ee:99:f9:69:04:f9:e4:33:21:1f:46:85:b2:16:4e:6e:b3:25:
34:a1:18:0d:ee:9f:e7:44:8a:a6:13:5b:76:7a:04:da:dc:5c:
28:c1:af:de:ac:89:a4:2d:4e:81:5b:d3:de:7b:9b:95:bc:1e:
bd:0a:72:0d:91:1c:f8:cb:c9:7a:2b:be:6b:b2:23:cb:eb:8d:
21:e4:68:6a:30:1e:32:5a:d9:39:9f:6c:76:d8:75:1c:4f:cb:
b6:a1:ac:69:cd:4d:de:02:01:c3:c6:be:0e:01:2f:a3:f4:71:
85:60:ac:69:7a:f1:ed:72:8c:59:f2:b9:f9:27:cc:b6:ac:22:
ab:5b:55:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:29 2026 by rpki-client