Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier: OKNS+haabIiFEp3t2eEotUIqmVQukLjZplIngLpDIVY=
Subject key identifier: 23:37:6B:EA:B2:20:75:78:5B:D2:4B:B0:80:69:D0:DB:33:BC:9F:73
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019CACEBB6A4D4CB6A397DD8A40239EF9A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number: 18B5
Signing time: Mon 02 Mar 2026 05:00:54 +0000
Manifest this update: Mon 02 Mar 2026 05:00:54 +0000
Manifest next update: Tue 03 Mar 2026 05:00:54 +0000
Files and hashes: 1: 1ZMsVQGAWg2it-JAEuC_i_hCIyc.roa (hash: ZLAKov/0hadhlGoY/KwpJKZ7o/B0xm108yvYfzR8PiE=)
2: ThpyK7T3T5Urd0gQp4EkSzgmEB0.roa (hash: drk6qrOhljg5/CDI9FQXdFU1YNYaPplLqtldYNHdpKY=)
3: WhS9iKVaUFg38uZaHtFMBX5xGXA.roa (hash: AUcEJ+4tf05fJdicnZl50BMdPlLmWRqkiu+wHdC3Q9g=)
4: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: DBEVwUkzSe12jMvdhqupkrh2gzd7C3r3BobLVXGm08c=)
5: hxC2jpRlaIaM98LvLVjeqhOV9cw.roa (hash: TgtubXCf93hQu/hiX0qxTtjIPY7Fb9Uk/YixVE2mPWw=)
6: lFA8TCmOsUwcRT-IH5-xMnLIn9g.roa (hash: rLmZAKicjwEflAKkEb3bhMZ1sp7aW6UtUzE6SYNtwFo=)
7: y3D_6T7LItZVGNAAIM2oiQLXK4k.roa (hash: wbaR1iGKJRGc1NnOpfqCm7AMxI+gqPXjh0axv9TvfKE=)
8: yM-BRopjf51qtduhIy15MptpHyA.roa (hash: cYXBlJN/z+ptyvUxLCa1zDp3B5VQu0MKslmhphO0gbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b6:a4:d4:cb:6a:39:7d:d8:a4:02:39:ef:9a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Mar 2 05:00:54 2026 GMT
Not After : Mar 3 05:00:54 2026 GMT
Subject: CN=23376beab22075785bd24bb08069d0db33bc9f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:01:18:d0:45:ae:93:c0:af:9e:0c:0d:29:
d5:50:40:e1:61:03:42:5a:06:47:3a:ad:2c:e7:65:
e2:22:d5:b6:06:0b:fe:4b:20:8b:76:57:a6:93:65:
62:ba:3c:fa:a7:07:3e:7e:a7:dc:40:a4:eb:57:94:
75:4d:b4:91:18:b4:9d:b1:f9:33:6d:61:59:71:04:
e6:ab:b3:2b:c6:c5:91:cb:03:98:36:10:1c:b5:a6:
b5:30:23:6d:80:a5:a4:e9:42:cb:65:3d:31:68:21:
04:0d:bf:b3:f9:61:a4:83:18:03:73:26:2f:97:19:
e5:4f:39:8f:08:e0:26:36:1f:b3:05:3b:62:0d:53:
e8:50:83:8c:56:62:9e:ae:79:01:d6:7d:77:9e:fc:
11:af:20:4d:29:fa:ec:c6:af:a9:68:e1:73:d5:a9:
e0:b8:10:12:5a:96:bf:8a:25:57:4b:b5:c2:dc:24:
2f:45:82:8a:01:45:de:26:d7:b4:37:2a:78:26:15:
5d:52:1f:75:be:30:4c:b6:10:e4:4d:f0:d1:2f:d3:
70:63:7e:1b:50:2d:fe:00:a0:6d:c1:40:63:cf:ac:
ff:0a:4c:22:ff:d1:15:41:ab:6c:cf:c9:f1:13:46:
e7:f7:ae:5f:e7:5d:b3:5b:37:db:ae:92:16:74:01:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:37:6B:EA:B2:20:75:78:5B:D2:4B:B0:80:69:D0:DB:33:BC:9F:73
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1e:43:cc:8d:13:21:4b:69:e3:bd:5e:cb:b6:d0:b4:3e:b7:
32:1a:17:f3:e8:f3:3b:0f:12:46:4a:97:5d:04:4d:3c:54:89:
5f:b8:d1:4b:0a:5e:dc:81:22:e7:d1:38:4b:06:52:ba:4f:6e:
cd:7b:b0:b0:21:9f:13:12:9e:36:02:fb:14:40:01:5e:1d:2f:
fd:5e:29:95:e2:8a:d7:e5:01:e4:08:8d:94:ba:b2:58:fa:a8:
31:15:9f:f0:56:34:47:60:81:a7:04:24:7e:03:d8:f5:8b:78:
ba:51:6e:70:56:fd:06:b2:8c:9f:4e:c4:ea:8b:6f:38:dc:24:
51:2b:22:cf:ec:63:1d:9e:10:e2:b0:29:5a:96:65:06:27:cd:
3f:3c:20:11:dd:95:ba:52:64:a5:4c:98:bb:fb:d1:cf:41:6d:
aa:48:3a:cf:3e:00:25:e3:86:0a:47:d2:03:67:4d:fa:6c:89:
3d:77:f1:c2:89:ca:5a:0d:1c:64:86:9e:0d:be:a3:7a:af:7a:
ee:2e:a3:56:ac:b0:67:1e:db:d5:24:c1:b5:29:91:8b:ce:f3:
52:d5:b6:e4:4a:2f:07:78:53:44:db:41:14:fb:72:74:8f:48:
f4:7a:5c:54:c9:bb:45:9e:13:3b:3d:02:75:e7:52:84:24:b1:
cc:c0:f8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:25 2026 by rpki-client