Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier: DLv8Twu32wpI/xUozpiNJsSFa2BxP2k99yIH3e9Q9Hk=
Subject key identifier: C1:39:91:33:84:3D:C5:0E:00:D7:04:9D:BD:43:51:45:12:EE:7B:E2
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 019CADFE295313194029A8D4A7F2E658FBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number: 0A97
Signing time: Mon 02 Mar 2026 10:00:40 +0000
Manifest this update: Mon 02 Mar 2026 10:00:40 +0000
Manifest next update: Tue 03 Mar 2026 10:00:40 +0000
Files and hashes: 1: pfwLznvoYJJqfRCh4o2zmPQohuE.roa (hash: AfFbs4eSFCbfML477ZQsZuVVVQdsY3hUFmoLGoZMXTY=)
2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: KtY7IgLHWYq+fXZX2S5r2wofBB9mfospRJjW/FPIx24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:29:53:13:19:40:29:a8:d4:a7:f2:e6:58:fb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Mar 2 10:00:40 2026 GMT
Not After : Mar 3 10:00:40 2026 GMT
Subject: CN=c1399133843dc50e00d7049dbd43514512ee7be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:88:55:53:5b:2c:6a:ec:6b:f5:75:01:c1:
8d:2c:3d:5c:f9:e6:d8:a1:6f:4a:50:aa:2a:ed:ca:
7f:4a:6a:49:ef:ea:4f:64:79:ad:64:5d:e6:6a:d4:
69:73:0d:3e:65:29:5a:2c:9e:23:8e:c5:3d:4b:c6:
87:e4:2d:d8:5c:b2:68:ad:e9:e3:69:c9:32:6b:cb:
7d:1a:c9:25:42:eb:f8:f4:14:47:20:08:7c:77:9d:
f9:ca:66:a5:1f:3e:fa:76:fc:8c:c1:2d:9f:a0:9c:
aa:f1:68:71:c8:f8:f5:99:ae:a0:ff:a2:f5:6f:c2:
7b:3f:ad:4f:41:1d:e3:0c:9f:17:81:0f:d3:3f:6c:
0c:9f:af:f7:52:c1:b2:bb:18:ea:f8:4e:02:47:2a:
6b:60:57:19:3d:5c:2f:10:86:c4:cc:30:f0:1b:8e:
e4:a8:d5:bc:61:9c:e9:ee:b6:99:a6:4d:94:ed:21:
52:a6:d3:81:aa:d3:f3:10:52:37:6b:34:b3:ad:82:
56:5b:28:ee:76:24:76:3b:2b:31:02:54:0b:f5:5b:
76:47:ef:2b:22:5a:09:36:69:bb:9e:22:c8:4b:ee:
36:c4:06:23:88:aa:05:8c:a1:4d:36:2a:eb:91:61:
3c:5b:a8:f3:2b:4b:87:75:bf:f8:17:05:5e:2a:06:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:39:91:33:84:3D:C5:0E:00:D7:04:9D:BD:43:51:45:12:EE:7B:E2
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a8:aa:d6:26:0b:60:0f:98:52:ad:16:40:a3:53:95:fa:f7:
db:7a:2c:e7:c8:8c:36:45:45:15:78:a5:1b:d5:ed:de:8e:38:
5b:b3:2c:b2:95:06:87:dc:db:ce:40:77:c3:2f:e6:5c:ad:73:
4b:5c:d2:b8:83:9f:df:fd:a6:6f:7c:22:fc:c5:06:1e:66:bb:
db:85:2f:30:93:8f:a9:93:f6:74:25:d7:41:e6:7e:9d:31:72:
7e:b0:77:75:ba:63:38:56:04:6d:f9:bb:08:be:16:cb:d1:db:
a9:03:f0:1a:fe:3e:6c:fc:23:8e:64:83:a2:e0:81:30:44:2c:
27:73:1b:74:d5:17:95:e9:ca:48:5d:47:45:b6:65:c6:4f:67:
d2:28:60:b6:64:47:2d:78:9b:a0:e7:ae:dc:06:27:04:cd:14:
27:67:de:d9:55:ec:14:ac:22:2c:fb:23:01:45:29:42:2f:51:
53:26:5c:ec:2e:df:4a:bd:ae:0c:cd:f7:80:cc:ca:d8:94:f0:
63:34:d0:56:bb:b4:89:39:4f:1c:27:8d:78:0c:57:15:b3:a3:
1b:57:d5:ae:f2:67:64:10:0a:4a:9e:bc:46:f8:c0:e1:6c:80:
11:b6:27:ef:45:7e:53:f5:f3:87:b0:37:89:6f:e5:e3:26:0a:
d4:0a:25:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:25 2026 by rpki-client