Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
File: yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json)
Hash identifier: JYpDlhMOyuiFsWp9pcSHUXRH8UB5asFqac31VKglNU4=
Subject key identifier: 16:D8:1F:15:20:C2:9D:C9:17:0A:61:28:B7:BD:97:FE:33:3D:D2:F7
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial: 019CADC7B4DEB08CC6E66317C900FAC5410D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 09:01:12 +0000
Manifest this update: Mon 02 Mar 2026 09:01:12 +0000
Manifest next update: Tue 03 Mar 2026 09:01:12 +0000
Files and hashes: 1: 1-DbHlApWvHSbpBcMnUYSNB33bx0.roa (hash: OBuf9H667a+ueEzKXN1f4R7v9DKwH4hbK0fjD7m4gDM=)
2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: tc66s5JbkandhUz7wWmrhOsXWTsLl3keL9IDSeGFkUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:b4:de:b0:8c:c6:e6:63:17:c9:00:fa:c5:41:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Validity
Not Before: Mar 2 09:01:12 2026 GMT
Not After : Mar 3 09:01:12 2026 GMT
Subject: CN=16d81f1520c29dc9170a6128b7bd97fe333dd2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:b1:74:de:1e:da:43:af:5a:82:5c:cd:36:
01:43:4d:ce:03:b3:09:23:69:6a:86:30:8a:07:52:
4a:98:9a:85:b0:cf:92:cd:71:2a:d5:74:4e:8d:e6:
27:94:6d:87:90:03:2d:71:e4:71:6a:90:2a:d7:75:
c8:3f:87:13:22:8f:78:f3:0d:d6:ad:92:d9:05:43:
74:24:44:ea:ee:63:b0:59:c3:8b:ae:76:7b:50:d3:
54:77:ae:26:5c:4b:97:78:0b:38:00:b3:1b:0f:08:
d8:f7:7b:61:37:ec:da:06:51:00:d7:39:d7:ed:fe:
fb:45:75:7f:d7:29:85:2c:b8:fd:fe:76:14:5a:74:
8d:84:e7:d3:ca:69:21:17:a3:d6:74:a4:00:cb:4f:
4d:80:16:6b:13:65:dd:1f:d0:4d:18:3b:79:72:44:
d2:de:f8:dd:35:1c:d8:16:f2:2c:88:88:c7:c3:49:
0d:ff:93:6f:3a:2b:be:7e:ed:1b:8c:27:34:34:a5:
a4:58:83:41:d7:a6:21:11:ef:6e:89:f2:33:4f:af:
40:1e:c4:b3:e6:09:65:01:77:6c:f1:4c:a7:f5:7e:
1b:bb:1c:c1:fa:e0:62:56:57:de:bd:ff:08:18:d0:
9a:ff:61:dd:d2:b3:b4:e6:8f:84:e8:4b:54:5d:e7:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D8:1F:15:20:C2:9D:C9:17:0A:61:28:B7:BD:97:FE:33:3D:D2:F7
X509v3 Authority Key Identifier:
keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a2:65:a0:8a:99:83:1e:91:21:83:43:d1:5f:df:e5:2a:6b:
83:76:f9:a7:19:73:f2:cc:0f:ef:55:c3:76:b4:69:14:3e:1f:
e0:9f:1c:7a:3f:57:5a:5a:2a:ba:ed:2d:99:ed:bc:b2:67:b5:
b8:39:3a:72:6e:dc:04:39:12:0a:2a:2b:63:dc:20:39:b0:1f:
f5:af:6d:17:b8:52:61:e6:e4:87:41:25:c3:e7:cb:b2:c2:6b:
e2:0a:35:c1:9f:b2:db:ca:11:e9:12:7e:42:77:f6:bd:61:4f:
81:73:49:e3:52:91:46:d6:0a:4d:92:a1:d2:e5:86:6b:ef:97:
77:f5:05:96:e8:3b:6d:6e:0c:03:8b:6a:74:8e:fb:b1:ff:10:
84:37:8d:b3:a7:88:da:da:84:be:93:77:48:21:e8:df:c9:85:
48:03:45:43:b3:c0:ef:d8:36:72:3d:34:a2:36:80:62:09:af:
fa:66:9a:48:ec:31:08:c5:1b:95:b9:d4:3b:c6:09:d4:f9:16:
a6:c8:b0:3d:61:e1:7b:ab:33:36:41:99:74:df:c0:88:92:56:
84:df:94:b2:fb:59:94:50:3b:9b:7e:30:f7:42:e3:97:3e:dd:
09:d8:cd:02:0f:a5:88:3b:8f:ce:b6:16:3d:b3:f4:17:1e:ec:
9b:7e:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:44 2026 by rpki-client