Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: 9U00bpE4XUmUV/nN2EhMNT5KEv0PF1qbe3I4hAG16ak=
Subject key identifier: F2:7C:6D:5A:F4:28:AB:3D:B1:BA:51:A4:01:C1:A1:F7:A9:67:0F:86
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 019CAAC6335A12080F1F310803DE5E419D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 08C3
Signing time: Sun 01 Mar 2026 19:00:41 +0000
Manifest this update: Sun 01 Mar 2026 19:00:41 +0000
Manifest next update: Mon 02 Mar 2026 19:00:41 +0000
Files and hashes: 1: XQZYtmJX7BpNzPu03srU_4VYUsc.roa (hash: Bjg0iayeOq8sVWJ1lC2MT+jpchRq5ORWkMqvwpb8VDY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: AxGq3rBGkFstuC+aWdRnz+aWRTSvt3e6fy17OJ6mTKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:33:5a:12:08:0f:1f:31:08:03:de:5e:41:9d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Mar 1 19:00:41 2026 GMT
Not After : Mar 2 19:00:41 2026 GMT
Subject: CN=f27c6d5af428ab3db1ba51a401c1a1f7a9670f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:29:f5:9c:68:0d:24:f3:fa:a7:be:ac:db:
5b:19:69:64:46:af:b4:dc:3d:9e:f4:90:34:19:67:
07:2d:2b:16:2b:e1:7e:7d:77:9a:4c:e0:d8:0e:58:
ce:9f:4e:f8:90:99:db:63:04:ed:51:17:4d:6a:60:
ae:60:47:f9:4f:8d:17:26:2e:45:c9:f8:03:0d:e6:
2f:f3:25:b6:18:b1:45:c3:1c:6f:f9:12:19:76:1b:
42:93:51:da:3d:9d:eb:80:66:0b:ac:58:ce:dc:d3:
fa:c5:c0:b7:ac:14:8a:e9:ac:64:c1:6c:37:bf:73:
a3:12:af:16:6b:d9:f9:ca:1c:ba:ea:5b:07:fc:5d:
89:6d:68:81:7c:5c:03:0a:7a:7c:3b:9d:a6:5d:7a:
ba:05:e0:25:78:bf:db:e9:c8:04:8a:68:38:95:43:
82:34:ea:47:dd:0e:4c:16:7e:0f:dd:25:9f:d2:35:
40:64:be:d0:ca:fd:55:7f:cd:9f:cc:42:fb:e5:9a:
d2:8f:cc:7b:6b:18:cc:77:b8:52:03:19:5f:41:08:
5e:bd:25:55:aa:26:ca:64:c5:78:12:95:c5:ce:c9:
97:e3:36:f4:18:96:3c:fb:53:a6:c1:7c:7c:3e:7b:
bb:28:c8:35:bf:51:3a:d4:29:aa:d7:a7:d4:ae:41:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7C:6D:5A:F4:28:AB:3D:B1:BA:51:A4:01:C1:A1:F7:A9:67:0F:86
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:16:92:09:df:2b:85:d0:f9:41:7d:34:35:90:ce:f0:b8:90:
9c:1d:15:91:10:81:60:d3:66:46:f1:e7:70:4e:33:97:78:16:
d9:dc:98:1a:d4:81:27:d8:20:74:57:0a:3a:f5:c2:99:db:63:
f3:d3:12:68:fc:e0:b2:0f:a9:77:03:47:f0:16:28:d4:e9:c6:
25:d5:69:17:53:1d:cb:97:48:7d:e5:66:31:04:b6:64:e3:54:
d3:46:a5:67:d9:f5:37:e9:9d:0c:b8:97:0e:98:2a:f1:67:87:
6a:b3:a6:3c:c2:4b:5c:45:7b:35:62:9d:92:55:71:d7:c0:c5:
7d:0b:4f:e1:d2:f9:e7:51:28:a7:d4:ed:d6:31:36:01:9c:f0:
2a:3b:60:97:27:8e:11:82:7d:6b:de:18:e3:f5:fb:2e:52:19:
c0:25:fc:12:9b:95:76:48:f4:b3:db:5c:bd:ed:8c:5f:48:72:
7b:bb:92:23:0a:ad:fc:a9:12:bf:c7:84:13:16:2f:52:cd:35:
e0:d8:52:40:7d:2b:d9:46:ce:ab:b4:ca:6f:06:39:f0:da:3f:
81:78:11:95:ee:a3:64:5e:a8:91:da:c3:d0:2e:1f:6e:0d:55:
b9:c0:ae:8b:4b:a4:e6:a3:7a:f5:c5:90:61:f2:ce:78:a5:75:
bb:5e:d4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:59 2026 by rpki-client