Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: 6mYZmf3Olc+EgK2d25Jk/JgH+0Rdfqdnh0Z1CuYm0yA=
Subject key identifier: C7:67:8B:02:0E:88:FD:60:52:59:51:81:2F:CF:B4:19:10:54:DB:70
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 019CAD9016E2F34E1624867F3F00EDD77245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 0697
Signing time: Mon 02 Mar 2026 08:00:27 +0000
Manifest this update: Mon 02 Mar 2026 08:00:27 +0000
Manifest next update: Tue 03 Mar 2026 08:00:27 +0000
Files and hashes: 1: HrcUui0miVrUYtzzMrX-U9gOlCo.roa (hash: UAsUsT7UI6Qc5HNmPWo/d7Tyc/aSJ+uqpouXt12HmG0=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: qa61CehYUmfoXDvwlL6dQQzKrURHUwc2Boff4tGdvJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:16:e2:f3:4e:16:24:86:7f:3f:00:ed:d7:72:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Mar 2 08:00:27 2026 GMT
Not After : Mar 3 08:00:27 2026 GMT
Subject: CN=c7678b020e88fd60525951812fcfb4191054db70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:a8:1d:d6:a7:05:1f:49:0f:ba:54:0e:73:
c3:68:d5:1d:e9:d5:0f:25:2d:88:b4:7e:b3:a2:6a:
e6:e0:e2:e0:af:bb:de:a3:f0:fa:13:92:a7:4b:14:
5c:59:78:10:8f:54:ef:95:ff:a0:c0:f0:e5:16:16:
a0:9c:70:18:22:ce:c4:2c:0a:47:49:07:fc:72:f2:
9a:bf:d7:f1:53:7f:3f:7f:ad:cd:2a:a9:85:6b:f5:
3a:3b:f8:a2:a5:2b:61:08:ec:41:2b:a4:d2:14:93:
ab:87:8f:32:1c:a9:ea:c4:95:11:9c:e9:8d:65:1f:
63:70:8c:dc:92:ac:1d:81:b0:d4:af:63:34:62:b6:
d3:df:97:e5:43:3e:87:39:f8:f2:f6:60:76:07:16:
e1:68:f3:f7:51:bf:40:bd:4d:75:76:bd:3d:cb:1d:
bf:b8:46:dc:6c:5e:6b:04:3e:ac:37:52:29:d6:c3:
28:f7:a7:d4:9a:2a:8b:94:6c:53:90:d1:59:87:86:
6e:2a:9a:9f:dd:39:74:ee:a4:b6:f1:41:89:37:32:
fb:8d:f1:d5:e0:5f:21:1c:d5:22:78:00:ed:d9:29:
8d:38:54:f4:ea:75:01:1d:4c:fb:18:6c:45:a2:35:
fc:7a:e7:e5:c0:ad:e8:e1:f2:c2:0f:f3:e1:2d:f9:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:8B:02:0E:88:FD:60:52:59:51:81:2F:CF:B4:19:10:54:DB:70
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4e:5c:4b:74:ff:dc:0c:cf:b1:7e:6d:73:5f:a8:10:21:01:
f3:d3:34:8e:02:eb:93:34:64:bc:88:6a:d8:2f:81:7d:a3:3e:
a9:c1:c3:68:be:24:93:1d:94:ee:63:43:5c:0b:6b:fc:b0:5b:
eb:08:17:d7:c8:79:73:33:ef:9c:e2:6a:46:89:67:8e:48:f6:
51:02:a6:e3:c8:92:8a:59:27:07:de:31:3a:aa:7d:d2:a3:9f:
79:50:e0:c9:be:a1:10:a8:60:ba:cb:5e:42:98:06:c3:ce:4e:
b0:b2:84:04:4e:25:45:16:fc:24:c9:ed:4a:90:57:7a:b2:0d:
21:bd:15:74:04:5d:72:f0:a4:9e:09:87:6f:7a:54:f2:16:df:
1f:57:26:45:91:fd:b5:b2:a3:0b:21:53:74:d4:e9:ed:71:29:
9b:49:96:bc:53:57:86:2f:28:dd:a8:0c:00:06:1d:46:64:99:
3b:d3:c4:11:47:c7:74:30:43:8f:d4:6c:09:73:6d:e7:7e:17:
61:c4:07:dd:0d:5b:1b:b6:d7:af:f0:97:a3:c5:21:27:a5:d2:
a4:2c:ae:59:2d:d8:d3:0a:79:e3:a6:53:e8:21:51:c8:fb:2b:
33:f3:b3:fb:34:31:05:c1:e9:e8:b1:90:f6:12:e4:66:5a:62:
5b:6c:4a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:05 2026 by rpki-client