Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json)
Hash identifier: +gxm4k9s5xb0QM1lQXicgVIQsBjRVP8U0dPDf0VsZtI=
Subject key identifier: C9:9F:6D:AE:FA:F1:48:39:89:B7:50:50:50:D5:0B:7E:93:54:1D:C1
Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Certificate serial: 019CAAC692BC23F890FBD7928CFCD163BF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
Manifest number: 0284
Signing time: Sun 01 Mar 2026 19:01:06 +0000
Manifest this update: Sun 01 Mar 2026 19:01:06 +0000
Manifest next update: Mon 02 Mar 2026 19:01:06 +0000
Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: bU75VgFdAMnyx/ukjt8sxigPBjq5wNrr2CIeEc1qX/s=)
2: svfbdlsbXDjgA-A5NXKRbfvSSU0.roa (hash: S4K6rQ06DpmFLzmXdsKn8rYW01MHbvPxeo9PGG/tM+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:92:bc:23:f8:90:fb:d7:92:8c:fc:d1:63:bf:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Validity
Not Before: Mar 1 19:01:06 2026 GMT
Not After : Mar 2 19:01:06 2026 GMT
Subject: CN=c99f6daefaf1483989b7505050d50b7e93541dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:25:3d:20:94:16:50:c2:ea:24:c0:51:23:
98:13:58:3f:c0:98:e4:d2:94:f0:e3:d4:17:d2:87:
f3:d9:5a:09:70:fa:71:a4:07:c6:ea:2e:36:84:7a:
93:4c:49:35:51:2c:7e:4e:f1:e9:d1:b7:8e:17:97:
84:75:33:f3:4c:47:6f:ea:6f:96:db:67:e0:99:00:
a9:4c:a4:d9:7c:c1:b8:83:aa:65:dd:7c:20:d8:b2:
bc:c2:dd:ef:5b:a1:63:4a:50:cb:1a:53:01:4f:4e:
0b:5c:4e:91:9b:0c:dd:3c:e0:25:fc:42:a2:c9:a0:
ad:b9:62:ed:0d:60:e7:ae:ce:d9:62:5c:55:6b:f7:
c7:3a:14:9b:3e:2a:84:76:f1:69:20:f0:7c:66:d0:
92:e0:84:6f:fb:c2:05:fe:56:c7:b9:86:f6:00:e9:
96:ca:d0:52:e8:2b:46:ba:fb:51:c0:40:af:1f:c1:
b6:fe:be:dd:19:8c:0d:f3:72:fb:7e:51:f3:a7:b5:
78:86:7c:5f:f2:d0:34:8b:06:85:16:fb:75:7c:b7:
b0:03:c6:bb:07:65:aa:f9:3f:ba:b9:e5:32:31:3d:
71:02:4b:32:54:ea:a5:9f:3f:fa:ed:1d:c9:46:a5:
29:ea:27:bb:02:33:a6:3e:47:7a:a9:f3:fc:09:7e:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9F:6D:AE:FA:F1:48:39:89:B7:50:50:50:D5:0B:7E:93:54:1D:C1
X509v3 Authority Key Identifier:
keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:62:47:dd:2c:da:de:fe:9f:7d:2c:37:ae:d8:bf:64:69:70:
6b:30:fe:b1:d0:56:28:4a:0e:10:92:6f:02:b4:00:5a:1b:bc:
f6:cf:06:a9:e3:d1:31:08:01:d2:91:19:46:9f:17:8b:2f:6f:
67:42:76:54:43:93:f0:f3:f8:74:93:a3:62:cf:95:d9:df:bd:
56:d3:a7:87:fb:1e:a8:b8:88:9f:5d:ba:98:46:b7:4a:ad:e7:
04:5e:84:f5:4c:74:94:b5:a7:9e:d2:f2:44:01:1a:85:5f:bd:
0d:5e:3b:db:13:4e:49:57:43:89:87:58:52:3e:7c:d1:cc:e9:
e3:70:ad:ab:e0:85:c4:cb:6f:50:3a:0b:c2:f2:7a:b2:10:b1:
fa:a9:38:f9:85:6b:2f:d4:35:4e:ac:b3:ab:30:be:26:41:0c:
ec:57:38:4e:80:71:fe:4f:19:5a:cf:f2:bc:f0:16:f0:90:85:
a3:f6:1e:95:f8:69:1a:9d:d3:10:a7:ee:af:97:17:1d:ba:82:
11:ed:06:13:dd:c5:93:06:7b:22:c3:fa:23:05:37:9f:3c:04:
b6:5e:47:49:c8:78:7e:15:52:6e:39:67:14:a1:98:87:1f:19:
32:5c:1f:cd:08:08:6e:43:8a:d3:e7:b4:b9:62:e3:97:eb:f7:
14:c6:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:22 2026 by rpki-client