Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: vB1xJqM96hJojBkk4vnldKSC2k1G+szO4wEoMxCyWes=
Subject key identifier: 10:E6:CA:8C:50:10:84:E7:23:14:CD:00:D8:71:3D:7B:06:6B:94:29
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 019CAC0FADEDB65ECC53FAF4517D3014F7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 089D
Signing time: Mon 02 Mar 2026 01:00:34 +0000
Manifest this update: Mon 02 Mar 2026 01:00:34 +0000
Manifest next update: Tue 03 Mar 2026 01:00:34 +0000
Files and hashes: 1: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: zKkVfnHi1X9RdzCn46u2HrY25aBmaqetMZhqW9JFphU=)
2: ykn6ra4wP0urmcyUyxV1FWZ2Kp0.roa (hash: IJ1D7ZuY9/uNKyGnyBgDEp0dSpIFh5mPiRSScoZkO+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ad:ed:b6:5e:cc:53:fa:f4:51:7d:30:14:f7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Mar 2 01:00:34 2026 GMT
Not After : Mar 3 01:00:34 2026 GMT
Subject: CN=10e6ca8c501084e72314cd00d8713d7b066b9429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b8:c5:67:46:32:0d:d0:76:b5:05:4a:a0:f0:
c9:7f:03:c9:45:60:6b:dd:25:b1:a8:38:b5:4f:18:
3b:a7:8b:ff:cb:b6:16:91:4e:83:04:92:cf:7c:8e:
7e:13:0e:dd:36:a2:7e:21:85:a1:9b:c7:4d:d1:57:
89:fa:16:8c:58:e9:2b:0f:52:b5:da:33:a6:d5:dc:
dc:f2:d6:5a:1e:75:f6:e8:99:b2:11:f5:8a:ba:1b:
b8:91:6e:35:ba:91:79:9c:b6:61:2b:b7:2e:a2:8d:
79:d0:1a:09:22:ef:f2:2b:4f:ee:4c:01:30:59:b6:
0a:d6:28:37:18:91:d8:7a:c4:1c:f1:5b:7f:6a:4d:
f6:fd:d3:da:0c:2c:58:71:ad:8a:fd:a8:02:66:55:
3f:1f:bb:c9:33:10:d4:d6:d4:45:b9:c1:79:8e:8a:
2a:14:a6:27:e8:57:0b:ac:75:5d:d6:0b:57:25:62:
2e:69:5c:ca:67:2f:fd:37:72:d1:c4:23:84:eb:46:
04:87:d3:fe:7d:13:b3:15:b5:d9:e8:36:12:5a:e2:
ef:54:f7:9c:58:23:07:80:70:28:a1:76:32:c2:fa:
64:e1:30:68:4e:64:b9:01:48:cf:19:6e:23:6c:e6:
e2:c6:68:f6:ad:3a:f0:b4:ee:48:28:b8:eb:aa:3c:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E6:CA:8C:50:10:84:E7:23:14:CD:00:D8:71:3D:7B:06:6B:94:29
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:eb:26:1c:cc:15:da:b1:27:b9:08:b9:3d:3c:2d:6d:1f:8d:
d3:8a:b1:77:03:8f:52:c0:4c:93:83:c7:cd:1b:23:1f:45:3a:
c9:5c:a3:7f:57:b3:28:b2:80:c1:65:a3:2c:88:78:74:0a:3e:
33:25:78:d3:5b:ad:16:af:a2:c7:eb:1c:4f:9e:4e:ac:c4:03:
b0:92:f4:1c:13:aa:40:eb:5e:db:d7:b3:da:c4:db:f0:de:ba:
c2:4a:12:cf:17:f6:92:00:e8:f9:9a:7b:e8:05:07:f2:dd:a9:
ea:f1:8e:1a:6f:17:44:2e:78:1d:ff:45:db:2d:db:8f:94:b2:
5b:9a:a0:a3:68:36:bc:f5:cc:a3:93:f4:76:ef:e8:c9:e4:46:
43:45:79:79:68:36:dc:fa:41:6f:e9:0d:10:76:b4:0b:eb:37:
b3:f8:fe:e1:90:c6:f9:fd:9b:80:21:6f:ad:03:be:3b:0f:ee:
81:08:96:18:eb:3f:58:be:e1:3f:22:81:f5:4b:56:24:12:93:
22:fe:50:26:a4:3d:13:5e:40:83:ac:c5:f4:61:f4:86:f6:49:
50:10:b7:68:e5:05:37:6e:4f:71:a6:70:64:f6:e1:81:d2:ff:
f9:86:dc:8c:97:55:c5:b8:84:64:28:2a:30:97:5e:96:f5:f2:
56:bc:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:21 2026 by rpki-client