Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File: yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier: f6kMYLZcCT6qRhvmDY26/m9NRVBaoQGvgZXvVjVUh48=
Subject key identifier: A9:D1:7F:F1:02:33:D1:1E:2E:8A:0B:73:A9:20:E4:38:76:3F:97:C7
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer: /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial: 019CABA1BD7D07D49C314DC735B7069C75EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number: 1457
Signing time: Sun 01 Mar 2026 23:00:29 +0000
Manifest this update: Sun 01 Mar 2026 23:00:29 +0000
Manifest next update: Mon 02 Mar 2026 23:00:29 +0000
Files and hashes: 1: F44bKH9OXVnCIoILdhGNkCfhXGk.roa (hash: tP7jtATuTlTRwvEpnqA6Mbeq855NS1jjX+L/+eC+Juk=)
2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: a40wXYcQG+cQBuM/AHjH7E0sKEL2r2jTXBdYB/CsaZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:bd:7d:07:d4:9c:31:4d:c7:35:b7:06:9c:75:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Validity
Not Before: Mar 1 23:00:29 2026 GMT
Not After : Mar 2 23:00:29 2026 GMT
Subject: CN=a9d17ff10233d11e2e8a0b73a920e438763f97c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b4:f5:eb:a4:36:fd:6a:b2:ca:ea:84:2e:0f:
88:c2:77:55:93:d6:0a:9a:a7:fc:b7:e5:bf:40:9f:
b1:3e:7a:db:f1:7d:84:65:d9:b7:e9:f2:0d:59:71:
c5:f9:d8:7f:da:15:e3:01:53:4c:c4:33:aa:88:f8:
4a:37:86:0f:11:d1:f2:33:a9:23:7c:cf:6d:f7:3f:
69:3c:3f:2b:b5:98:e5:cb:d9:55:99:69:86:9f:23:
86:50:df:ea:42:3f:2c:cd:9d:d1:be:8f:d9:7c:0a:
76:81:f8:93:24:6a:07:41:9a:fa:d0:40:26:88:60:
52:f4:ad:45:87:6a:4c:bc:00:30:98:30:de:35:3d:
bd:54:2b:7a:af:00:59:fe:c7:30:2f:e2:ee:28:ea:
61:e2:74:ff:1e:be:61:69:64:1f:be:60:02:07:b5:
d8:3a:31:aa:2b:79:4a:28:6b:a8:d7:13:1b:15:45:
de:60:55:59:ad:30:da:4b:21:56:d5:07:a6:1e:9f:
1b:0f:e3:e3:cd:12:6d:c9:05:70:cc:43:fe:18:48:
bf:5e:08:a6:54:59:93:00:31:71:47:aa:d6:4f:e6:
4a:20:ea:6c:33:bd:78:f4:02:07:ed:ed:38:f1:d2:
5f:ac:1d:d5:81:e6:89:76:da:76:82:86:f1:3a:b5:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D1:7F:F1:02:33:D1:1E:2E:8A:0B:73:A9:20:E4:38:76:3F:97:C7
X509v3 Authority Key Identifier:
keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6f:84:f8:1c:2c:60:9b:4c:3b:84:a1:a4:75:fe:2c:a8:e0:
0b:d0:e4:50:d8:ba:4b:b3:9a:10:ef:37:a1:8c:94:d0:7c:54:
34:f6:fe:c7:50:4f:6d:af:99:77:3e:c9:e8:1c:f6:0d:f8:f0:
4d:f5:0d:76:85:f0:b8:bc:41:ed:09:bd:80:06:bc:bb:81:4e:
cc:36:95:87:3e:25:17:82:dd:be:67:3d:1d:91:93:94:50:e6:
ef:57:be:29:1e:3a:6f:11:e6:26:f8:57:fc:00:c8:25:33:a4:
0a:f5:32:2c:69:bd:1a:2a:05:57:db:7f:cb:d3:a8:a3:89:6b:
a8:af:47:52:13:6b:4a:c4:5e:23:96:8d:8c:65:bc:e1:76:02:
45:cb:12:18:0e:bb:05:e2:b3:02:fc:49:83:b5:d6:6a:2c:ee:
27:57:b6:c7:71:20:3b:0f:c3:80:7e:db:04:8b:a5:14:fe:a9:
10:a4:eb:0e:dc:62:f9:48:ac:28:9f:80:1a:07:c2:ee:64:56:
6f:da:5e:eb:d1:b7:84:e2:03:69:96:59:18:37:ce:d8:8a:3a:
92:2a:62:aa:94:82:9d:17:a3:a1:7f:63:a3:74:2f:57:52:18:
56:1c:03:bc:f1:1a:e0:bc:81:d6:6e:50:35:13:72:ea:f2:f0:
89:40:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:32 2026 by rpki-client