Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: AggHVKc4k21TbysipVupbml68aQ3258INzBp1TNZvJ8=
Subject key identifier: 8D:37:F6:C5:87:16:2D:3E:A7:A2:E2:B0:40:69:C8:27:B7:2E:0A:D4
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 019CAD5A4F32AFC9DD867A0300F7CBA4BDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 152F
Signing time: Mon 02 Mar 2026 07:01:42 +0000
Manifest this update: Mon 02 Mar 2026 07:01:42 +0000
Manifest next update: Tue 03 Mar 2026 07:01:42 +0000
Files and hashes: 1: _SwAckWBp8isMhZUKjw_8MX2PbQ.roa (hash: DdPCOva+CEkdSFj4rwktdG8ykIu5k66PhfcbhD6raBk=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: xq6SkUV76vHacq5DuxfROxGz/i09LMEs4Iah0VM6dxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:4f:32:af:c9:dd:86:7a:03:00:f7:cb:a4:bd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Mar 2 07:01:42 2026 GMT
Not After : Mar 3 07:01:42 2026 GMT
Subject: CN=8d37f6c587162d3ea7a2e2b04069c827b72e0ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fc:d4:7c:9f:38:2a:10:85:0c:3b:5a:d1:83:
cb:97:2a:2b:a2:a5:44:13:8b:6b:3d:ff:bb:1f:5a:
24:4b:01:9c:76:c5:30:1b:bb:ed:10:dc:50:40:f5:
8f:cf:b6:d3:e8:0d:fd:31:7c:e8:c4:2a:6a:c5:59:
03:e9:5f:86:7a:66:06:79:56:c3:0f:2f:dd:d0:14:
a8:d9:01:63:af:82:60:0d:21:2a:ef:26:ee:a6:0c:
8d:4b:90:cf:a2:ce:9d:d6:4c:a7:14:1c:b8:14:cf:
e8:9c:b5:56:5f:32:44:95:07:98:4f:62:5b:48:d8:
ce:3a:2f:01:08:27:f0:f3:29:c9:af:3b:2f:f8:86:
0f:d6:97:63:aa:a7:8b:57:84:e6:46:41:73:bd:ad:
78:00:4e:62:1d:a0:84:1f:21:ac:63:f8:19:c3:db:
8c:be:a2:95:6b:80:66:22:f9:67:01:6d:88:46:43:
9e:6d:93:b4:64:86:99:af:95:83:ba:8d:e8:ca:ce:
25:b6:10:4a:8c:09:1b:0c:35:49:2b:1a:9f:fc:88:
5a:b5:7a:72:2e:da:a4:14:8f:8b:92:ae:be:88:6d:
6d:6d:73:6a:a2:28:0d:b0:ce:b8:3e:d0:6e:cf:89:
e1:f6:b2:a3:01:ad:07:bd:35:2f:83:e4:b7:9e:71:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:37:F6:C5:87:16:2D:3E:A7:A2:E2:B0:40:69:C8:27:B7:2E:0A:D4
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:64:96:c8:4e:67:3d:23:1e:af:e6:36:95:28:c1:45:b2:c7:
81:5d:e2:64:7e:d6:cb:ef:ff:ca:ff:d1:3a:b0:19:fc:32:0c:
b7:b3:9e:e8:02:9f:2d:73:b4:35:09:b3:c1:80:05:67:b3:fa:
cf:61:41:61:b9:ef:18:0a:42:27:90:f8:7d:1d:cb:48:45:6f:
ac:b2:7b:fc:3a:5d:68:50:4c:f6:7b:23:1b:20:71:f7:8e:f1:
8d:4e:b1:5a:b9:58:c3:f1:69:d3:27:4e:55:06:57:82:7f:68:
eb:6d:91:97:6b:8f:75:59:a7:72:a4:1f:78:60:fc:5a:e4:a5:
c6:04:1f:3b:19:4d:1d:56:89:e6:a1:1d:30:f2:ab:af:3c:a7:
fd:3b:41:75:f6:ed:5d:6a:56:ef:49:c2:67:c6:47:2d:55:1e:
e1:55:f4:e7:17:19:04:0e:35:02:98:f7:07:c0:b0:79:e7:da:
cd:34:ca:3a:82:1e:e8:52:97:e5:1e:a8:64:a1:de:fe:3e:73:
bc:5f:6f:07:fa:a2:8f:f0:74:83:37:56:f7:d5:ed:1c:a4:cb:
fe:1f:83:d7:44:96:ff:2c:7f:36:c0:48:44:37:ee:b4:c2:1d:
5a:46:9e:1a:d0:43:fa:56:37:49:2c:a3:a7:e8:39:65:06:bc:
c8:00:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:27 2026 by rpki-client