Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier: EO7kostRBESYKdwTiEVNu6p1G3+iBmmhRxuGTPVCOMw=
Subject key identifier: 85:39:16:37:FB:74:40:4C:08:30:19:86:5C:8F:D1:69:7E:5A:27:5C
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial: 019CAC103EC15C05DB85826413B225DDC608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number: 0505
Signing time: Mon 02 Mar 2026 01:01:11 +0000
Manifest this update: Mon 02 Mar 2026 01:01:11 +0000
Manifest next update: Tue 03 Mar 2026 01:01:11 +0000
Files and hashes: 1: TVT4_OBKA-2I4FrIkhh2iW24oPw.roa (hash: U1OVtJgMOPc/4XYbv8bLSVgA0GMg+CX+suR8Va/RqoY=)
2: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: 1KUkvBoU+fs/gmf/ta6cq9neax/2m91oX0YkNbHMWb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3e:c1:5c:05:db:85:82:64:13:b2:25:dd:c6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Validity
Not Before: Mar 2 01:01:11 2026 GMT
Not After : Mar 3 01:01:11 2026 GMT
Subject: CN=85391637fb74404c083019865c8fd1697e5a275c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:41:2d:22:b0:1d:fb:b4:48:ab:59:f3:20:
cf:54:bc:82:9e:b7:d6:98:49:49:9a:8f:20:55:c4:
09:d7:47:f3:b9:50:3c:f6:84:1c:8e:29:c8:9d:8d:
8f:88:e6:77:29:a9:c3:f8:f9:25:0d:50:ba:45:03:
0c:9b:23:f3:67:3a:d9:5d:e2:e8:40:a7:5a:18:81:
ad:4e:02:af:f1:0b:58:6a:85:20:77:06:b1:05:ee:
fd:0c:54:5e:02:98:c5:b2:f8:94:3b:4c:f4:40:75:
60:b5:91:16:6c:3c:c0:ee:f7:eb:87:5f:30:b5:be:
ab:4f:c3:26:d5:c6:51:d3:d1:f7:df:7d:fd:e4:56:
b9:60:b4:c4:32:05:1c:bc:8e:ed:9c:91:63:9c:ed:
c0:2c:1b:d5:ca:6c:8d:e2:40:9d:e8:84:ff:f3:f4:
3b:40:a2:d6:d6:8f:28:28:fc:dc:0e:f2:54:a6:9e:
e0:90:cc:50:77:dc:f6:e2:5c:92:b2:4a:c1:5e:ad:
7c:f1:0d:7b:d1:c2:94:4e:ef:18:e1:cc:7f:89:39:
99:1b:e7:f3:20:12:df:f4:07:8a:4a:21:a5:77:fd:
61:9a:32:cb:3c:43:93:6e:6b:b8:09:2f:f6:24:48:
67:94:57:e4:ff:96:31:8b:06:8d:71:76:97:7c:8e:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:39:16:37:FB:74:40:4C:08:30:19:86:5C:8F:D1:69:7E:5A:27:5C
X509v3 Authority Key Identifier:
keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:83:cd:40:0e:bb:f4:ca:1c:53:44:a7:41:d9:55:85:75:2d:
93:79:f5:f4:8d:2c:c3:47:4a:36:92:0f:87:5d:b0:13:c1:98:
14:be:cc:04:e8:92:72:64:5d:db:22:6e:5c:c0:63:e9:91:4c:
d1:ff:9e:c6:cd:75:8e:33:9f:50:5a:c4:7f:68:07:28:9f:0d:
eb:6e:ef:5a:8c:33:91:e8:81:fa:ba:c9:f7:7f:4a:fe:8b:e7:
21:08:e5:60:73:14:42:45:37:6b:7f:ac:e3:3b:ae:fc:83:5f:
94:8f:7a:dc:28:fa:85:e7:3e:eb:ef:7f:f2:31:23:26:88:2c:
c2:8b:ae:de:d9:8b:6d:20:fd:f0:67:30:c5:da:26:cb:0f:2d:
2a:74:d5:c6:dc:06:1e:57:2f:54:a0:e2:a7:aa:d7:11:56:da:
bf:1b:c6:68:40:89:58:43:63:c0:0c:ad:a7:77:c3:33:96:1f:
5d:60:59:fc:72:a4:29:87:fd:af:04:c2:f1:ce:9e:33:ab:5e:
05:ea:1e:21:36:ee:5c:fd:3a:7a:f1:a3:e5:47:ac:8d:c8:73:
09:8b:53:ef:70:bb:55:77:7d:f2:53:69:49:59:96:87:e0:22:
ca:33:29:2f:dd:68:51:c6:d5:9e:37:1e:74:2b:c6:92:27:98:
00:10:0e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:15 2026 by rpki-client