Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
File: YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json)
Hash identifier: qcFEoOMxI/IROHtxKWO5N6Oe32XgABN1/erCRJzOAiE=
Subject key identifier: 47:CE:FF:22:79:4D:C4:E4:47:9E:AF:6F:8C:5B:7B:19:9D:EE:89:0D
Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
Certificate issuer: /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Certificate serial: 019CADC833B4C46AF670DB325AA266901A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
Manifest number: 01A8
Signing time: Mon 02 Mar 2026 09:01:44 +0000
Manifest this update: Mon 02 Mar 2026 09:01:44 +0000
Manifest next update: Tue 03 Mar 2026 09:01:44 +0000
Files and hashes: 1: 30S6gV2oh78DXtrqvndtvSPPKd4.roa (hash: OcTAJVeDjRXR19iBC0Wj5Tjt34V2Iwuh2sKP2/1+Fgg=)
2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: 5th/0rHW7qroGohYmMwN0TSRJ+IE55tL2y3tQGvQftc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:33:b4:c4:6a:f6:70:db:32:5a:a2:66:90:1a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Validity
Not Before: Mar 2 09:01:44 2026 GMT
Not After : Mar 3 09:01:44 2026 GMT
Subject: CN=47ceff22794dc4e4479eaf6f8c5b7b199dee890d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:11:71:52:a3:18:87:c6:32:d4:7f:be:0e:
16:e2:19:64:a6:83:af:f2:a7:69:85:2c:19:f4:ef:
2a:d0:bc:a1:99:bc:f1:ea:fd:96:79:7a:64:68:5a:
6a:86:64:08:13:be:f0:41:20:48:2a:59:74:27:95:
5d:6a:03:0d:8b:69:6e:f5:da:85:b7:b6:97:f8:1b:
18:07:ac:d8:3e:2d:5d:29:54:22:cb:04:f4:fa:87:
b8:bf:a4:e8:7e:4c:f5:03:6c:8b:80:ac:75:dd:c6:
26:9a:cd:92:87:14:d2:e6:90:ce:43:23:49:37:52:
47:fa:28:37:64:8c:96:f8:d1:2d:e5:ab:a3:8d:3c:
2c:88:a7:7d:3b:25:13:2d:97:41:f2:10:63:4d:a4:
89:eb:47:9b:74:63:70:56:ed:9a:b8:45:36:f7:6b:
cf:50:40:a3:da:77:e3:37:35:5d:26:23:76:d3:64:
91:8e:04:a1:d2:96:12:c1:da:ef:34:55:bd:60:7a:
37:a2:24:fd:79:1a:cb:52:c7:b1:95:40:c0:72:7d:
cf:d1:d3:5d:94:84:b4:6e:61:fe:8d:4c:54:34:09:
8a:4f:01:52:3e:ce:61:84:fc:d5:f3:0d:49:c0:18:
98:86:22:ba:aa:30:e8:5e:6b:ce:8e:65:e1:c7:de:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CE:FF:22:79:4D:C4:E4:47:9E:AF:6F:8C:5B:7B:19:9D:EE:89:0D
X509v3 Authority Key Identifier:
keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:66:73:42:3f:f0:f0:43:15:89:ce:a4:1e:d4:e3:30:f2:67:
23:d9:fa:b3:5d:63:68:3a:2f:3f:56:91:d3:65:b3:cd:dd:09:
16:9b:04:98:20:77:34:b5:94:5e:95:63:41:f8:8b:71:dd:79:
9b:c5:35:4e:3b:82:8e:eb:4d:ab:ae:fd:e5:f2:d0:93:0e:0c:
4b:07:83:5a:9c:65:c1:be:32:cc:31:3d:98:9e:80:40:df:87:
28:ab:ec:85:a1:e1:b4:d2:88:93:30:5f:a3:53:a2:c9:e4:cc:
0e:2b:10:e3:b0:4a:c7:db:e0:4b:08:2c:0d:57:47:ca:1a:2d:
84:f7:f0:d6:af:fd:96:44:aa:21:0d:2e:9d:65:c8:a2:d3:e3:
df:c2:22:31:4f:f3:95:b5:ec:5c:b7:85:1c:61:8d:63:50:19:
f1:5f:e4:96:c2:e4:50:b8:a8:bd:56:a4:55:04:e5:bc:bb:64:
b1:c4:76:4a:14:90:ee:01:82:ef:56:c3:7f:7a:2f:0a:05:80:
5e:41:7e:29:b8:3f:e9:36:72:75:9f:dc:74:45:98:25:02:07:
78:1f:91:a2:6a:ed:54:9e:c5:cd:28:66:a9:0b:d3:8a:bb:f2:
51:10:1c:6d:41:69:c8:75:c5:71:6f:34:54:48:3f:96:8e:04:
91:4a:fd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:03 2026 by rpki-client