Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: mvpb7sDpL0p5tPObQvWIuhMEfoUK8h2XGxdo9WU0jmo=
Subject key identifier: 07:8A:D2:86:B6:AA:0D:8F:38:32:0E:90:E6:82:7D:74:26:E3:41:A1
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 019CAA8F6669DD1BF681DDF89702B71463E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 1365
Signing time: Sun 01 Mar 2026 18:00:50 +0000
Manifest this update: Sun 01 Mar 2026 18:00:50 +0000
Manifest next update: Mon 02 Mar 2026 18:00:50 +0000
Files and hashes: 1: VYZ5Fgld7RXGEOrVqR8rQ1goxUQ.roa (hash: cLhaanJStsJrz0IULm7aO3Ok7sBDzVaf9JM7x28CLYM=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: zJnEN80bhBNMS1itmu1I9148GmrWMAmRicQzLy5CxP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:66:69:dd:1b:f6:81:dd:f8:97:02:b7:14:63:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Mar 1 18:00:50 2026 GMT
Not After : Mar 2 18:00:50 2026 GMT
Subject: CN=078ad286b6aa0d8f38320e90e6827d7426e341a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:2a:1b:e9:5b:d4:b6:fe:fe:d3:9c:3f:38:
01:fc:39:19:21:54:88:cb:25:ff:79:05:81:ec:44:
7b:10:ec:3c:7b:75:93:92:a4:4c:3f:ef:f0:18:0a:
6a:7b:22:95:39:ad:a9:c2:f7:cc:f4:b7:d6:4e:a7:
56:08:a9:35:34:6c:3a:08:4d:8a:73:82:74:88:89:
3d:e0:d3:36:16:ec:5a:17:c0:82:75:ed:24:46:3e:
a5:3a:60:e2:4b:a7:9a:b8:95:e3:e1:06:72:05:ca:
07:38:48:ee:97:9d:d6:7f:e0:09:28:33:3f:25:5a:
e6:79:c0:e3:d4:77:a1:f4:40:c8:e0:95:15:20:8a:
54:7f:10:45:71:60:9b:f4:5e:f7:af:6d:cf:05:e3:
72:af:5c:4c:29:41:ab:06:75:a6:b7:a6:af:00:89:
0a:c8:11:94:a6:64:0a:1b:a8:ef:5d:ae:37:59:01:
88:a5:c1:6e:45:50:51:a9:2e:48:9d:8c:24:97:98:
e3:d9:ce:c0:a6:3f:66:d6:81:39:c8:8e:67:2c:9d:
0a:99:7d:3f:a3:1e:73:85:9e:e9:9b:cd:29:c9:0d:
94:c3:4f:b3:44:41:8a:4f:c8:47:95:17:00:8b:96:
e2:53:d0:31:17:68:c7:fc:2b:dc:b8:85:44:9b:fc:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8A:D2:86:B6:AA:0D:8F:38:32:0E:90:E6:82:7D:74:26:E3:41:A1
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ec:da:12:40:de:f7:bb:c5:82:9a:79:28:e0:0c:29:f9:ee:
31:ee:9c:c2:05:d8:93:10:ba:04:6f:64:e8:b8:b0:c1:fe:00:
2c:2b:15:bc:f8:82:0f:28:74:1b:ff:34:3d:47:b9:75:6e:a0:
34:00:8a:09:71:8e:06:0d:ce:b4:0c:f5:fd:fd:60:49:ac:88:
7c:1c:19:55:b6:72:fb:ad:7d:f7:6f:21:c0:93:aa:7a:94:d1:
c7:cd:4f:99:81:be:25:b4:ac:47:ae:6a:52:16:5c:a1:d8:65:
08:16:47:99:bd:f7:2f:a3:2c:f4:32:16:8c:15:6c:ff:c6:32:
e0:b6:f7:d1:0a:4a:eb:4b:cb:f1:57:c6:7b:96:90:8e:a8:e5:
c5:7b:e3:c5:ba:2c:cc:6d:1f:1d:7a:a9:6e:ff:15:af:05:f2:
40:42:80:2d:52:e0:9b:b1:0e:c9:1a:85:34:bb:e3:1e:1e:04:
12:92:01:e2:0b:60:c4:30:ba:08:73:3e:39:41:5a:c7:01:3c:
91:27:24:20:77:ac:3c:78:0e:44:e1:3a:c8:4f:31:44:1b:30:
10:36:1b:01:40:5e:48:b1:6d:5a:d2:9f:33:21:f2:16:a3:90:
70:a9:b9:b0:4e:04:d8:fd:1c:62:ba:4d:7a:b6:c5:b6:34:f8:
5d:fa:60:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:36 2026 by rpki-client