Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: nXQLcYqDqSRBaAR1/96xPFHZbcIIlYhsxMqHq+9KKCg=
Subject key identifier: B5:6B:ED:17:08:79:A4:6D:87:A0:7F:1E:30:2D:EA:F9:2A:16:85:FC
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019CAC7DEA2770E85C98779EDDB4A036156B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 0898
Signing time: Mon 02 Mar 2026 03:00:58 +0000
Manifest this update: Mon 02 Mar 2026 03:00:58 +0000
Manifest next update: Tue 03 Mar 2026 03:00:58 +0000
Files and hashes: 1: 1-kjmng8g4ned1jrB9NFdtyqe9mM.roa (hash: vHRUVNFuySdUhd0UHIiFZU/Y6jX046RcW/mUgeD/VsA=)
2: ULhfeft8ruaAOSycLGgspsB9WDM.roa (hash: YhwNNP4dPs6tEXJFWm3JKl3sMP3qxhh6F+89COgcPeM=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: QsCTNfHazOYL0vNCbzoi23k2zA7k1V2wI2znR9EZvqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ea:27:70:e8:5c:98:77:9e:dd:b4:a0:36:15:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Mar 2 03:00:58 2026 GMT
Not After : Mar 3 03:00:58 2026 GMT
Subject: CN=b56bed170879a46d87a07f1e302deaf92a1685fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:97:6c:05:c8:cb:2b:03:26:9c:7e:6d:4f:
7b:25:43:a6:13:93:58:87:83:8f:9f:77:61:c1:52:
f0:40:b3:ce:bc:e7:73:2e:d1:54:e8:fe:a6:f2:f8:
07:ba:35:69:03:bd:77:9b:a7:81:a2:0d:17:2b:70:
5c:73:7a:cf:0a:b5:34:91:35:6b:ee:1b:84:c8:93:
d5:b7:f5:d4:1b:d2:d4:29:92:42:41:db:d7:20:04:
54:b0:e2:3f:e0:57:4c:ed:8b:74:d8:b1:41:ef:30:
3e:1b:0b:2b:d8:db:4e:25:fb:8d:9d:b1:8a:8e:eb:
73:d6:71:57:8a:48:7a:31:37:a8:36:b9:2e:66:7f:
c5:56:e5:cf:8e:c9:9c:fd:4e:4a:97:49:e4:b3:fb:
29:3c:79:c9:87:6c:c6:ba:c5:70:bb:78:2e:c8:29:
02:c7:69:ab:3d:e5:b2:af:b3:c7:7d:8e:aa:42:7b:
22:cf:7a:8e:e4:93:e7:b0:0f:ba:6b:5c:b1:ad:a1:
8b:0b:ad:08:c9:40:19:18:22:3e:c8:48:0d:eb:1f:
dd:d4:27:e6:65:1f:a1:87:df:ce:6a:38:1c:f0:a5:
5c:83:c3:55:ca:6f:a4:a6:72:a4:db:40:ce:ce:bb:
dc:e7:ab:9a:92:af:09:2d:da:d9:e6:5f:af:d8:a6:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6B:ED:17:08:79:A4:6D:87:A0:7F:1E:30:2D:EA:F9:2A:16:85:FC
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:47:a1:a2:5f:32:94:30:d3:82:a5:3d:29:f9:d8:23:05:fa:
22:2b:65:0e:0e:a9:dd:0f:f8:97:d4:75:dd:b7:64:43:a0:ee:
db:86:d8:66:f5:b1:dd:f1:9c:c1:dd:0d:8b:e3:28:c9:55:60:
01:a2:3d:1b:7b:77:87:5f:f5:39:4a:88:02:e3:10:c5:8c:90:
0d:ad:47:9f:92:53:7f:7a:38:06:e4:d8:d0:d7:e4:ab:e8:9d:
5b:0d:59:7d:d1:8a:f1:09:b4:7f:33:cc:40:f8:e2:b8:a9:07:
4a:b4:a1:0d:11:bc:ba:8f:79:3c:8d:49:f6:b4:43:7a:08:97:
07:e5:71:fd:ee:cd:d5:1c:ef:d7:29:39:d1:e3:e8:2f:13:34:
32:4b:20:8f:23:44:c7:fa:47:4b:36:63:56:77:99:4d:f8:c6:
b3:14:b6:62:c3:4c:5d:c1:00:a5:87:4d:e2:5b:26:9d:49:95:
09:cc:ac:d3:c5:b6:a0:01:fc:b1:49:e6:e7:8a:75:72:55:59:
c8:36:2b:83:4b:76:bd:50:77:21:20:a4:73:4a:d1:e4:59:48:
fb:5b:cd:9f:61:e3:3b:09:69:15:4f:0c:df:34:6d:b3:61:ce:
de:a0:be:97:5f:5f:62:ba:81:e1:e9:86:4d:14:6d:ea:1d:37:
2d:ff:8f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:43 2026 by rpki-client