Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier: ncq1X2rfTP+byvl2I8pYzctu9K+rdYZvScDi3AJZCbA=
Subject key identifier: 09:D0:1F:04:83:52:09:2F:19:7F:C2:0C:FE:3E:B4:64:0E:F3:05:40
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 019CACEBD45589B4FBBC3CB6FCF626E2B8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number: 1412
Signing time: Mon 02 Mar 2026 05:01:02 +0000
Manifest this update: Mon 02 Mar 2026 05:01:02 +0000
Manifest next update: Tue 03 Mar 2026 05:01:02 +0000
Files and hashes: 1: BGkcJfFENHuGNqi5KdKaJIpLpGs.roa (hash: 14oAN4dkpEIBe9l+/o/n9bZWb4SWffTykhypz7bbQig=)
2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: oVOJ1XRe54rS+Op66sIaahqODuLhzg8yEyggegtTgPs=)
3: i8xS2SNRoq_4w2VKsWzO9ZVkL-Y.roa (hash: J61ECAA02vndrCEVyDU5JqxkNGwrJIPqNyxo3rSAtJg=)
4: vmeyUsb0B6nt7RQL8zVkNFOh_tA.roa (hash: QL+UGoxzg+c0nwUj+09aM3m1fGQQjVUbgtOrR4jVg/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:d4:55:89:b4:fb:bc:3c:b6:fc:f6:26:e2:b8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Mar 2 05:01:02 2026 GMT
Not After : Mar 3 05:01:02 2026 GMT
Subject: CN=09d01f048352092f197fc20cfe3eb4640ef30540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:75:e9:e4:b6:05:f7:3c:3a:9f:4a:f9:f6:
5a:bc:9c:6f:a6:b9:28:bd:5e:53:be:42:40:53:76:
5d:c3:86:c1:99:75:dc:30:64:bf:c1:66:a7:f8:a0:
f6:9d:13:ca:eb:b7:95:15:bf:f7:8f:71:11:67:f0:
eb:d5:02:a1:86:ab:73:c1:3e:b5:3a:61:db:55:6b:
64:23:cb:a8:eb:00:25:92:ab:8a:06:f0:48:44:01:
1f:af:65:1a:dc:22:ae:04:b5:48:fb:ab:75:78:96:
1c:7e:4e:b0:b2:d1:a8:3d:eb:57:04:e8:2a:de:2e:
1b:24:71:5b:16:b1:32:df:82:e9:41:e0:1d:91:da:
b4:e1:c0:30:64:2f:9b:0a:48:15:54:35:cb:74:16:
a6:e4:05:a7:e3:0b:27:1d:62:da:54:1f:24:ac:77:
e6:76:44:9f:cf:24:be:e2:4c:d8:0d:34:66:4f:62:
27:e2:40:99:99:a4:f0:3f:67:e1:8f:c0:8c:08:c8:
d7:be:35:d4:5c:c0:f6:19:0a:c0:e1:66:ed:24:c7:
cb:b5:f6:c9:59:6d:0f:19:b6:84:a5:32:6c:e3:f1:
22:31:26:6a:3a:7f:2f:28:fd:85:e0:97:ac:38:70:
ff:a7:43:66:cf:d4:fe:e8:90:cb:93:9e:80:cd:b8:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D0:1F:04:83:52:09:2F:19:7F:C2:0C:FE:3E:B4:64:0E:F3:05:40
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:91:ef:31:cc:bf:b5:63:37:35:21:bf:42:a1:7d:56:43:e4:
5c:7a:64:27:e9:23:d4:7a:15:14:43:7e:53:cf:e2:c6:33:aa:
88:cf:7f:73:fa:e9:3e:c4:4f:3b:67:b3:53:37:9d:e9:d8:f3:
b2:66:45:74:59:a6:42:e4:16:fc:b9:c0:8a:cc:ef:98:b3:ce:
08:6e:5d:3d:ee:c0:d9:f6:4f:1c:1a:9d:bc:95:62:6b:46:4a:
43:36:c1:f4:f6:ae:60:6f:36:e0:35:1a:d8:f2:18:fc:c9:ae:
3a:e1:a6:9b:8b:f8:f5:25:92:c2:47:1c:6c:20:24:ac:aa:6d:
0e:ba:fc:e7:80:0c:39:01:b5:a0:74:e1:15:22:5f:5d:9c:33:
4c:54:ad:2d:16:3d:ac:8a:cf:3e:56:6b:df:32:5d:c4:8c:8d:
c7:4c:bf:17:b7:6c:d1:d1:a1:ba:1f:03:47:ed:a6:99:30:d9:
2f:02:48:3f:21:09:c9:d6:42:5f:1c:a8:cc:44:c9:4b:d5:cf:
43:e5:8b:f2:cb:57:62:cd:da:4a:8e:38:64:a3:1b:c9:fa:7a:
66:34:e8:ef:4a:30:66:47:68:e8:9d:59:f3:39:0e:21:ef:91:
50:3d:e8:db:a2:87:57:51:a3:06:18:93:4a:11:92:e6:21:cd:
5f:9e:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:37:48 2026 by rpki-client