Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: c60SmSxiMNKBPQ5vBwVrmkkZXt88jcxQFJpyup85de0=
Subject key identifier: 04:4D:D8:C1:C8:8B:30:B5:EC:25:B5:5B:1C:F9:DC:5B:5E:CC:6E:F9
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 019CAE35A9DF012BC2EE7A44250BA51A8BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 067E
Signing time: Mon 02 Mar 2026 11:01:18 +0000
Manifest this update: Mon 02 Mar 2026 11:01:18 +0000
Manifest next update: Tue 03 Mar 2026 11:01:18 +0000
Files and hashes: 1: B_cUWMvkDrWwNevq-NhH06J8ywg.roa (hash: ki78ojsdQ+VGD7Du9CRQIEWSZOZHzzvnZ4p2T4RU1zU=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: XcFqpM/niqFh0P5nNm6zaivEFZeXgV7A7yaujQd6gO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:a9:df:01:2b:c2:ee:7a:44:25:0b:a5:1a:8b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Mar 2 11:01:18 2026 GMT
Not After : Mar 3 11:01:18 2026 GMT
Subject: CN=044dd8c1c88b30b5ec25b55b1cf9dc5b5ecc6ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:63:83:9c:51:a4:5a:e9:a4:da:9f:16:ce:
f2:33:77:84:03:62:f6:40:59:26:0b:49:23:07:bf:
68:e5:3d:51:a4:42:ef:6d:2c:fc:d9:9a:b4:40:a6:
2b:1d:79:2c:6f:e2:59:af:a9:69:8b:fa:1d:4d:47:
34:d8:fb:ce:75:6b:3d:9a:d6:f5:1f:21:a4:5b:fe:
39:53:b8:d3:f9:34:42:4b:d4:0f:d0:8f:fb:25:6a:
1a:03:c6:13:2e:d8:75:13:80:af:02:bb:d6:f2:d3:
e0:11:48:01:51:a0:9e:8b:0b:8d:6c:b6:49:35:b5:
e7:25:0b:1d:b1:3c:c9:7c:43:26:f1:22:c7:9a:08:
e4:07:b2:a0:66:9b:c3:8d:8c:e1:e9:53:c1:67:5f:
c9:66:ed:5a:73:7b:33:39:36:d3:6b:f4:89:1c:f1:
1e:8e:97:4a:dc:b4:4f:39:7a:3c:0c:a6:8d:64:21:
09:dd:76:4c:1d:8f:77:e7:45:17:b1:64:6e:f9:ea:
63:59:70:a3:5c:c8:22:c1:9c:3e:28:5e:3a:19:f8:
ce:c9:17:b1:3c:89:90:d6:36:b7:3f:a9:9a:71:de:
46:4e:dc:5b:d0:34:5c:3e:66:a3:a5:ee:96:78:cf:
d7:bd:2e:cc:35:a6:c6:c7:3a:5c:95:c2:56:c2:99:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4D:D8:C1:C8:8B:30:B5:EC:25:B5:5B:1C:F9:DC:5B:5E:CC:6E:F9
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a0:1e:f8:b4:fd:a3:d1:32:a5:e6:15:89:b7:8c:b4:85:3c:
ec:2b:77:5d:19:e3:e9:fa:98:ca:fa:7e:95:d2:77:6c:16:a2:
c8:4b:cb:06:2a:24:1f:99:4f:be:45:41:0b:09:84:f8:82:ac:
14:91:a4:4d:fe:6d:d0:2d:6d:42:f4:a6:19:fb:37:b5:6d:ea:
33:dc:31:a9:c6:fd:cf:5a:44:88:58:ef:8d:a1:e7:92:2d:47:
1a:16:ea:a7:78:0a:2a:09:6b:0b:d4:f5:c6:71:73:60:dc:29:
22:78:e3:97:24:8a:ca:0b:20:43:1d:69:34:7a:80:95:4e:2c:
6b:8d:dc:35:7e:5d:c3:f4:81:65:b1:8d:7d:dc:ae:ec:98:54:
ac:d1:b7:6b:19:63:23:c2:45:a7:3f:9e:ea:13:98:df:78:4c:
b7:cc:30:75:d9:d0:6a:88:6c:8a:02:a3:33:1f:60:e7:f4:fe:
65:d8:a3:cc:20:dd:8d:ca:3f:35:b2:15:fc:62:c2:9d:d1:33:
77:e9:a0:f5:ad:d5:66:6f:2a:3d:3a:ac:36:65:c9:dd:8e:20:
f9:3c:aa:89:14:62:8b:20:08:61:1e:fe:a7:a3:1a:5b:bf:82:
d8:17:3d:8d:5e:2c:8a:12:96:ba:4a:7d:9e:aa:17:95:f7:fe:
39:51:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:59 2026 by rpki-client