Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: w5Gqu0KR/83wPZKDWN6C9NVskX/zA3YrwWOQTtb/MhQ=
Subject key identifier: F0:DB:07:A4:E1:51:F2:06:F6:38:CA:D2:73:89:16:64:CE:B3:28:A0
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 019CAB33F13247B8AA0EA0861C75B8D2544D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 171B
Signing time: Sun 01 Mar 2026 21:00:33 +0000
Manifest this update: Sun 01 Mar 2026 21:00:33 +0000
Manifest next update: Mon 02 Mar 2026 21:00:33 +0000
Files and hashes: 1: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: 47cbfPSFmzUBG6DRe0SKNbcJ8R+WZpQMheNQt3yJTcQ=)
2: ds0HwgnE1wK4tusqij2iDAo4C4w.roa (hash: AV7GAfjJkTxxVqb/RhgxTIb2SMDdBmXXWKpB5XXq9g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f1:32:47:b8:aa:0e:a0:86:1c:75:b8:d2:54:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Mar 1 21:00:33 2026 GMT
Not After : Mar 2 21:00:33 2026 GMT
Subject: CN=f0db07a4e151f206f638cad273891664ceb328a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:0c:4d:50:54:24:74:8b:bf:c2:d0:c4:97:
7f:e0:00:2d:9c:50:ec:50:1f:df:d3:74:00:5c:35:
e4:ed:c7:91:74:58:f6:a7:8c:73:eb:96:04:3f:fc:
55:e8:a5:1d:18:79:dd:b8:ac:59:e0:47:b2:81:b7:
27:78:0e:4e:b8:05:46:34:3d:05:2b:dc:f5:9c:bf:
08:43:39:f6:89:bc:dc:fd:27:3c:ad:59:8c:cc:61:
44:c5:79:22:39:48:ad:a7:c3:1d:35:19:f3:a6:d5:
07:bc:12:ad:5d:94:32:a3:d5:28:c4:58:55:fe:16:
3e:a6:7c:8f:a2:05:3f:0d:93:cd:02:c5:b9:f0:b7:
ea:0a:ef:6b:9b:da:ea:36:bc:5e:d9:2a:d4:84:88:
2e:b7:15:6f:5f:32:10:63:79:d7:3d:f3:82:b7:8e:
48:7b:d1:78:42:14:fb:f0:90:ac:c7:1e:8e:f4:a2:
58:55:02:9f:a7:ec:15:e5:89:b4:0d:3c:d7:e5:7b:
0b:35:9b:80:64:0d:29:08:41:4b:b5:38:68:1d:52:
a1:a1:7b:c8:67:b9:ef:76:8f:56:3e:1a:c3:d2:29:
cf:2a:e1:c0:4d:7a:6e:be:7a:f9:16:b0:01:88:97:
f4:82:43:48:8c:de:8d:90:2a:f6:a6:28:c7:09:f3:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DB:07:A4:E1:51:F2:06:F6:38:CA:D2:73:89:16:64:CE:B3:28:A0
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:84:59:0a:41:4b:b4:02:dc:e0:49:f5:50:58:ef:b1:3c:d6:
ea:55:2a:b8:a1:39:d0:3d:45:64:47:fd:fc:2e:a6:06:5c:cc:
87:84:58:87:dc:de:de:fc:66:52:ce:a3:8e:96:b0:a4:02:a0:
c6:d6:65:cf:98:50:b5:0a:f6:f7:43:2c:f0:1e:95:c0:3e:53:
17:75:c4:95:57:ed:9b:9b:bd:15:8c:9f:98:ba:ce:4e:89:fa:
87:7f:55:87:63:44:cd:4f:78:c7:10:65:81:a7:3d:a5:b0:c8:
15:48:85:9a:1b:2f:49:72:ee:79:84:04:bc:d9:19:9e:fd:43:
c6:84:a2:65:94:a2:7e:fd:1c:ce:36:69:1a:aa:4d:3a:fa:2f:
9a:28:9e:0a:5d:e1:7b:f4:57:c0:89:cf:11:8f:a7:31:15:3d:
0e:9a:3c:ab:7f:f2:e2:10:f5:b3:62:a1:7f:95:f2:40:2f:f2:
7b:22:e3:e9:d9:3c:2b:5b:30:89:81:5d:e3:6b:f7:0c:8f:01:
1d:43:a4:45:b9:cf:e4:c8:54:4b:a2:b7:84:68:92:1e:2e:8f:
55:b3:a0:a1:29:91:71:9b:7f:9f:3a:d2:08:92:99:ea:71:8f:
46:aa:67:ee:61:58:99:5d:af:d5:2a:0c:3f:d8:c6:a6:65:a3:
70:87:75:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:26 2026 by rpki-client