Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
File: YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft (raw, json)
Hash identifier: hJEqzNeL7v6pOTMvNmLQu3D8zvDIDdaAjebkJ4aV6QQ=
Subject key identifier: AF:EF:1F:DD:E0:88:15:1E:6C:D1:3F:26:36:4E:4B:BF:1A:FE:57:D6
Authority key identifier: 61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
Certificate issuer: /CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Certificate serial: 019CAB6AC5B2847B7DE57DB47F290D6F9678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
Manifest number: 0FCF
Signing time: Sun 01 Mar 2026 22:00:27 +0000
Manifest this update: Sun 01 Mar 2026 22:00:27 +0000
Manifest next update: Mon 02 Mar 2026 22:00:27 +0000
Files and hashes: 1: YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl (hash: FRDNQRUUH/MUiYhTtFeeGvOkd8FwxVh0KpMeK/uxpQo=)
2: gJQzhId802-YJNx0WWaWWkM-fD4.roa (hash: Lrav2MOtvej8ZsEdP9SgEjv5mWkDtP7CfAPS8l/cHkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:c5:b2:84:7b:7d:e5:7d:b4:7f:29:0d:6f:96:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Validity
Not Before: Mar 1 22:00:27 2026 GMT
Not After : Mar 2 22:00:27 2026 GMT
Subject: CN=afef1fdde088151e6cd13f26364e4bbf1afe57d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:76:a8:5b:f1:05:8b:10:40:b1:bc:09:22:36:
88:6e:4d:ef:db:63:db:63:1f:ae:6d:2f:54:4b:87:
ca:7f:14:e4:ba:55:a3:0f:f6:c5:74:a4:c0:2e:8b:
e7:88:eb:24:06:64:a1:6b:8e:49:66:5e:76:52:e2:
b0:68:a7:a2:81:33:af:93:1d:82:6f:62:e5:6d:98:
88:a4:97:8b:47:bf:79:af:b4:8e:88:60:09:30:47:
fa:38:c6:0d:f2:32:80:7b:8e:3c:cf:83:6f:05:2b:
cf:dd:b4:5c:f1:2c:ad:00:31:ae:8a:7b:7e:8c:b5:
a3:41:61:6d:24:04:15:40:18:b4:6e:38:48:18:51:
d5:23:85:ca:43:ec:33:36:53:ab:de:c8:0f:45:17:
91:49:87:a1:da:42:52:46:b5:71:a7:9a:34:33:04:
ff:8f:8a:fc:0e:b8:16:56:ae:b8:27:da:5e:1a:d8:
0f:f9:94:9d:54:cf:9c:64:30:5e:22:7c:f8:b9:75:
7b:0d:95:c3:93:97:0e:2e:7e:3e:ed:2b:a6:99:9f:
9d:6f:8e:ad:81:78:c6:a9:38:18:fc:6d:1d:3e:39:
79:d1:71:b2:ac:a5:15:69:4b:87:49:e1:3e:99:93:
6b:8f:a0:77:df:17:fa:01:2c:22:3b:14:92:f0:5a:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EF:1F:DD:E0:88:15:1E:6C:D1:3F:26:36:4E:4B:BF:1A:FE:57:D6
X509v3 Authority Key Identifier:
keyid:61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6d:40:29:c9:57:5d:2b:14:e0:b4:3b:5e:d4:01:43:ac:12:
61:b5:c5:13:12:20:bf:e8:0c:aa:61:bd:48:2a:31:44:96:45:
f6:be:8a:91:c7:0d:66:ef:5c:ad:45:31:a9:9d:b2:7f:64:d3:
51:cc:37:7d:3a:8c:d6:e3:3c:02:df:72:31:bc:b8:c3:26:a0:
f9:cf:5e:cc:5d:f0:2e:22:7f:00:49:87:d0:c0:8d:64:e2:ff:
66:b5:01:22:b3:52:38:52:39:99:53:27:4e:7d:bd:7b:99:9e:
b3:28:14:1f:8b:e2:fc:35:97:45:42:5d:08:11:86:0b:dd:90:
9b:11:b9:08:33:44:7b:3a:a8:7e:69:6c:17:49:a0:49:d0:2f:
97:fa:08:f7:37:58:41:2b:b3:c3:19:58:8d:01:51:a3:25:55:
2b:3d:a2:a3:5f:ec:dd:67:00:5f:e5:22:d9:6e:55:47:6e:ce:
00:7f:41:9d:ce:34:1f:57:bf:82:2a:7a:db:ac:e5:8d:b8:e7:
64:44:70:6f:16:20:72:68:19:fb:0f:29:2e:2c:0a:96:1f:a8:
0d:3b:86:9e:b3:3d:62:e2:af:c4:10:35:9d:45:91:9a:e1:72:
5e:17:61:42:60:86:0e:94:73:13:5d:6f:7d:89:02:d9:b1:87:
24:38:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:36 2026 by rpki-client