Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
File: yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json)
Hash identifier: 5mV3s2HB7yQJpue6jZCvOREh57ZnjYpKh+yXCah43nc=
Subject key identifier: FA:70:66:00:1A:1D:65:B2:82:C5:CC:95:23:E6:0F:98:81:20:31:15
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial: 019CADFE5AE40B757B651A13B5514583F3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 10:00:53 +0000
Manifest this update: Mon 02 Mar 2026 10:00:53 +0000
Manifest next update: Tue 03 Mar 2026 10:00:53 +0000
Files and hashes: 1: aROMX3nhLZqryNRJXwP1ZsS073k.roa (hash: g+wD5MW4jZTbZvYAo4VBlWyrm2dqeMZiBJUsm2vjVD8=)
2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: jwPQOkg/ccDV3nElvXZ77e202k0aQkWuaBgvbAVU2As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:5a:e4:0b:75:7b:65:1a:13:b5:51:45:83:f3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Validity
Not Before: Mar 2 10:00:53 2026 GMT
Not After : Mar 3 10:00:53 2026 GMT
Subject: CN=fa7066001a1d65b282c5cc9523e60f9881203115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:31:8f:d4:4f:68:31:80:af:5a:4a:c4:68:
89:7f:9d:16:14:10:81:b7:24:e9:26:87:5e:25:2d:
a3:03:4e:aa:5f:34:4e:2b:50:28:16:c4:4b:2a:4f:
7d:be:49:1c:7e:32:5f:e0:b9:0a:5b:42:79:73:ae:
1e:c1:4c:d8:46:4a:f9:71:bd:f2:dc:f0:d7:17:c8:
d5:44:4d:91:d0:4e:f0:5b:bd:54:bc:10:13:fb:62:
19:2d:b8:f2:94:83:b8:74:39:ee:48:ab:09:4e:16:
1d:37:0a:6c:59:5b:3e:22:30:bb:c1:60:13:2e:18:
c4:8c:dc:91:ef:8b:c9:83:5a:72:99:6d:c9:ee:23:
6f:76:7e:a5:53:98:ab:ed:24:59:be:bc:d9:d2:d3:
4d:ed:75:09:e0:a7:14:2e:da:e7:62:48:21:83:d0:
3e:eb:e5:af:c2:aa:37:14:92:a8:33:b8:c8:92:57:
f7:ac:53:40:6c:21:a1:6d:24:20:61:1e:6b:ad:c3:
a0:83:b3:9d:de:87:a8:16:bd:a0:cb:6a:9c:24:f2:
97:20:6d:0a:64:ce:c4:9e:a9:88:d2:29:46:6b:95:
5d:83:1f:e3:3c:9f:38:8a:2c:bd:ce:95:98:2a:71:
85:19:d4:36:64:1a:af:61:92:d9:8b:46:51:a0:fe:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:70:66:00:1A:1D:65:B2:82:C5:CC:95:23:E6:0F:98:81:20:31:15
X509v3 Authority Key Identifier:
keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:44:59:8c:f0:f6:dd:9b:6f:0e:31:21:81:39:30:84:a7:9e:
2f:0a:22:64:18:34:74:e4:fa:2c:5a:8d:f9:b5:be:7c:88:57:
09:df:e5:2e:9b:32:d3:ad:df:31:14:cb:6e:d2:0c:ac:ff:6c:
b0:c7:11:e9:09:45:b7:0a:79:7b:54:0f:af:3d:55:83:cd:2a:
8a:46:85:80:69:f0:26:f5:07:0e:b1:b9:5b:4c:27:56:a8:bf:
e6:f6:60:6f:a7:02:d5:d3:71:b4:57:e7:7b:a2:ec:8e:0b:38:
06:6d:cf:b1:69:28:f4:ff:1c:71:2b:18:5b:90:e5:76:75:f4:
c7:63:a1:15:a4:6b:2b:91:38:fe:37:3d:89:54:d0:10:8d:53:
76:53:34:41:1f:f6:54:54:7a:0f:91:f2:08:b5:28:0e:d5:e0:
08:08:71:5b:24:4c:91:db:bb:85:0e:6d:c9:e4:3c:59:3f:27:
13:c7:d4:cd:2b:f3:30:38:9c:08:1b:a0:b7:de:13:3c:f3:c5:
98:ac:6b:bf:d7:9f:74:85:97:e3:92:e9:f2:98:1e:d9:43:6d:
b5:79:f8:5b:1b:8f:c4:29:4b:88:fa:95:0e:b6:c6:e1:61:a8:
5f:58:f0:95:c5:5e:e6:ac:d2:f2:39:45:e9:fd:0e:6c:49:02:
fc:3f:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:29 2026 by rpki-client