Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
File: yRggtQAH5BxT3WAps3lU01cvTCk.mft (raw, json)
Hash identifier: w9aS5dKBymnhYkRyr8WLxYHkj/uesH1XXSXl1shXIkk=
Subject key identifier: FF:E2:48:17:EE:6C:46:C1:C2:1C:DC:9B:4B:8D:0D:76:CD:1F:8D:59
Authority key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
Certificate issuer: /CN=c91820b50007e41c53dd6029b37954d3572f4c29
Certificate serial: 019CAA582E90E1C7658869AC9735EC28B1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
Manifest number: 138A
Signing time: Sun 01 Mar 2026 17:00:31 +0000
Manifest this update: Sun 01 Mar 2026 17:00:31 +0000
Manifest next update: Mon 02 Mar 2026 17:00:31 +0000
Files and hashes: 1: hOC_g0aFFJDt5mJXYMKufHdXY_Y.roa (hash: /1Qaua2qcuy21kP73vJzs1KKO/Ht1pr5AntmjkyRFoc=)
2: yRggtQAH5BxT3WAps3lU01cvTCk.crl (hash: 9VPJcs/FufGD6sqvllU8ZcIiBwHZFalos7Cr2Nh71Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2e:90:e1:c7:65:88:69:ac:97:35:ec:28:b1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91820b50007e41c53dd6029b37954d3572f4c29
Validity
Not Before: Mar 1 17:00:31 2026 GMT
Not After : Mar 2 17:00:31 2026 GMT
Subject: CN=ffe24817ee6c46c1c21cdc9b4b8d0d76cd1f8d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:c4:18:c5:25:13:8d:0c:8d:ca:0a:f9:91:
98:b6:c5:d7:7a:8a:a3:8c:5b:50:78:a9:5f:20:89:
98:20:d8:8e:ba:2d:12:58:ea:cc:0e:76:cb:24:cf:
6d:57:a7:14:ec:06:15:a6:2d:79:21:fe:c5:51:69:
f1:d3:19:e2:98:e5:42:6b:a9:aa:82:88:b6:d1:f6:
48:41:cf:06:5a:28:8f:48:37:a4:70:c7:53:2e:e1:
d3:bd:0b:e3:1b:7b:44:9f:ed:68:de:d6:d1:24:93:
d5:b2:4f:84:11:b8:51:0f:7a:f3:26:e3:a7:fc:5f:
8e:ea:b7:af:df:12:21:96:e4:18:ed:8e:ae:51:75:
58:eb:2d:3f:28:e9:27:84:8f:b3:08:3f:3c:28:73:
a6:8a:51:ee:38:c5:7e:66:08:cb:f1:a6:0b:e0:56:
b1:dc:21:a8:65:3b:b8:bc:ae:3a:40:08:e8:d9:60:
99:67:8c:ef:84:bd:b1:0b:62:fd:9f:85:62:3d:a7:
19:69:0e:eb:1f:9a:98:ce:ec:42:4d:cc:df:8f:6a:
5d:07:83:4f:81:e5:c6:cd:34:b0:74:8e:40:23:29:
6a:9f:56:d4:53:8b:11:48:66:00:b5:20:13:e2:8a:
3d:f8:6a:c5:b8:d1:64:62:98:99:de:17:98:c9:d4:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E2:48:17:EE:6C:46:C1:C2:1C:DC:9B:4B:8D:0D:76:CD:1F:8D:59
X509v3 Authority Key Identifier:
keyid:C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:99:50:ee:86:43:fb:db:89:3a:0e:02:96:ec:5d:b8:45:44:
9c:df:42:16:70:70:c0:e8:7a:78:ec:a3:e4:68:e3:26:20:d5:
fb:4f:3c:25:d4:43:6c:ae:e5:cc:cf:6d:a5:ed:91:27:34:f2:
28:8a:16:51:58:29:03:a4:44:55:c3:27:bd:c1:67:17:98:6b:
97:41:af:3b:de:65:67:2c:76:55:73:ad:91:33:a0:1c:bd:78:
e7:e1:b0:47:92:b7:f0:87:ba:df:ba:fb:cc:9a:8d:8a:54:fb:
76:dd:3f:f8:3f:44:c0:4a:27:6d:47:dc:e7:d7:b8:2e:5e:d1:
2e:1d:4a:eb:b1:cf:e2:c5:34:40:48:07:6c:b2:f0:3c:5a:c0:
32:9e:51:b3:9b:71:77:97:07:f1:ba:9e:a5:8c:d9:ed:cd:cf:
33:67:ed:0f:42:b9:ce:77:8b:a5:b3:56:7c:6d:73:3d:14:09:
09:96:c9:36:43:53:40:bc:15:8b:f0:0b:d5:6a:64:6a:4e:a1:
2f:07:2a:5b:81:ac:7f:7f:be:fc:1c:46:e4:cd:15:cd:1e:a0:
c2:4a:a5:22:06:c6:69:07:5e:7d:25:05:3c:04:ab:93:df:ae:
70:5e:ba:3b:88:d4:8b:96:46:fa:9e:cf:7b:3f:38:9c:22:59:
55:8c:68:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:15 2026 by rpki-client