Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: HKpaIPphj0uYji1j9+ZN79NosjWvmDvzGUi15tu4c9E=
Subject key identifier: 96:4B:F8:05:A3:15:4D:98:EF:2F:F8:11:D4:1E:99:0E:EC:09:3C:90
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 019CAD59F4720F0A5B64FCB5D42D90D2D158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 128F
Signing time: Mon 02 Mar 2026 07:01:19 +0000
Manifest this update: Mon 02 Mar 2026 07:01:19 +0000
Manifest next update: Tue 03 Mar 2026 07:01:19 +0000
Files and hashes: 1: 6SyYBw_h6FtZj49a8Gsl0fZClAc.roa (hash: yUA4V2vWgaIeFq+az6maBFcRTyB0lNwRfV6wBfzazGA=)
2: OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa (hash: A7mJeUCg10L9AXlKSZcymy8lwjHDqKuB18cMHj/bo4g=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: UqwqHI5uwVBub9J5oXxEEDW0CBNP5D5p/0QGusmDJ0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:f4:72:0f:0a:5b:64:fc:b5:d4:2d:90:d2:d1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Mar 2 07:01:19 2026 GMT
Not After : Mar 3 07:01:19 2026 GMT
Subject: CN=964bf805a3154d98ef2ff811d41e990eec093c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:d2:45:ce:2b:c9:3e:ef:5d:17:9e:4e:10:
82:f9:53:53:6a:3a:61:be:e0:54:f5:3b:be:91:d6:
9f:4d:0e:73:da:3e:16:fe:b0:74:7d:43:18:81:2f:
db:05:be:f4:b7:59:3a:4c:6c:29:5b:8f:c0:3c:e8:
12:57:27:89:31:61:37:fe:78:b6:dd:97:06:30:38:
c4:77:da:8d:71:1c:51:aa:17:8f:9d:37:35:97:8d:
f4:eb:6c:a9:58:8b:ee:b0:b5:71:77:55:10:2b:b1:
d6:5a:2b:dc:b7:8a:34:f6:39:2c:64:74:4c:98:8c:
02:f1:de:5f:b6:d1:2b:eb:59:0c:ce:5b:7b:58:5f:
6c:b4:59:8b:2b:90:4b:76:6d:40:95:f4:ee:8b:80:
a1:cd:ca:14:74:41:dd:59:45:d1:19:b8:a8:24:a4:
79:b3:e9:f5:4a:f0:94:cf:71:80:8c:37:01:da:38:
32:d7:d2:80:b1:d9:2a:25:5c:98:52:6b:53:87:de:
ed:81:45:0a:9c:ce:49:e3:34:79:a7:cd:88:d2:98:
b0:e8:f4:af:23:a9:ee:b5:a9:ef:61:82:4f:73:7a:
d3:32:6a:4e:44:3a:8f:5d:92:f6:8c:e7:bd:44:34:
ea:b8:0b:79:4b:99:80:df:d5:60:e3:3f:14:7c:97:
c8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:F8:05:A3:15:4D:98:EF:2F:F8:11:D4:1E:99:0E:EC:09:3C:90
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ac:13:6a:f0:06:a6:0a:d2:6a:1c:e4:16:be:9a:28:d3:49:
49:b9:99:78:5b:76:54:9c:ea:c2:7e:da:16:70:55:5d:6c:79:
da:96:c7:69:4b:0b:17:29:8b:cf:10:5e:5f:c5:f8:40:e2:52:
57:0e:a5:f8:5b:2c:55:64:1a:d1:3e:70:b5:31:2f:c7:4b:4e:
1f:88:84:91:7a:e2:be:92:b6:dc:7d:37:f7:39:6d:21:e2:35:
a7:8c:64:1f:93:41:35:80:59:21:1c:3a:9d:eb:ff:ab:7f:77:
32:7d:4c:b1:50:e8:35:84:d1:06:e9:c5:31:a0:0c:dd:a0:64:
c6:a8:b3:7e:dd:8f:15:4b:aa:e8:b6:cd:6d:ee:e0:42:d5:71:
18:ff:b7:63:4b:3e:11:02:0e:e1:31:ae:93:e0:48:14:c4:fd:
4f:57:17:01:05:7f:cb:a1:e8:d2:18:c4:25:6d:f8:cf:aa:f8:
ed:8b:99:e2:a1:d9:2c:b8:5d:79:08:56:df:ff:a2:e2:c6:aa:
b5:63:94:d6:50:66:34:b0:1f:b3:e0:2a:21:4b:53:48:7d:61:
90:2d:b7:32:9d:36:22:c6:9a:26:65:83:25:93:31:67:41:18:
cd:6e:f9:40:ff:3a:ba:24:67:51:49:f7:a8:33:b5:13:47:29:
f0:52:c1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:15:17 2026 by rpki-client