Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier: 3p/rAod69PXVOLScBsq0R67TwxNcchyWXTp5LxFGMT4=
Subject key identifier: 67:9E:AC:5A:5C:55:40:3E:A9:45:3B:12:0B:9E:C1:E0:CF:7A:21:14
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial: 019CABD96D8E8EFA7F9E0F8F4CBEF8784786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:19 +0000
Manifest this update: Mon 02 Mar 2026 00:01:19 +0000
Manifest next update: Tue 03 Mar 2026 00:01:19 +0000
Files and hashes: 1: WDz5bqq9s7Sot6DZTyns7ujP_G0.roa (hash: jp6a/AgGzZ0JdGjudIFSMOs/t8/efE23HGLQbGbVGxE=)
2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: +I1RjLmqpCfx7KDJ6MoLRZchicpyOqyfq5qscEGTpRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6d:8e:8e:fa:7f:9e:0f:8f:4c:be:f8:78:47:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
Validity
Not Before: Mar 2 00:01:19 2026 GMT
Not After : Mar 3 00:01:19 2026 GMT
Subject: CN=679eac5a5c55403ea9453b120b9ec1e0cf7a2114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:01:b5:a8:b5:82:b8:99:96:a6:4b:c2:10:
bc:82:10:dc:c8:bc:31:3c:3e:8f:db:84:06:24:2c:
95:5b:af:99:67:d1:df:54:bd:17:c7:50:a0:fd:67:
32:e8:99:8c:34:b9:ea:b0:1d:de:39:51:45:96:4e:
9c:36:49:72:2c:cf:b3:ae:cd:c8:11:41:af:19:d7:
8e:14:02:85:49:1a:27:06:d9:38:a9:01:b7:4c:1a:
62:28:f9:20:8c:33:7a:ee:be:1d:c8:af:43:0a:06:
bf:30:43:ee:7f:38:46:3d:bf:b1:7b:20:fa:28:7a:
32:6b:f8:57:fb:36:4a:aa:13:42:98:c4:c6:40:31:
8a:c5:96:1b:f5:ca:34:d4:60:dc:50:92:95:94:4d:
c0:7e:e4:15:3f:ec:18:a2:32:19:17:57:89:5f:fd:
c4:0e:30:3b:63:6a:07:9c:31:82:5a:82:85:e7:6e:
d1:17:ce:a5:40:bb:a5:86:be:e4:a5:68:72:04:d2:
b3:33:9d:b8:12:b8:19:10:56:8b:57:4d:2a:5e:cd:
84:80:00:b7:40:bc:5b:31:62:6c:10:8f:e7:12:36:
88:29:87:34:e9:21:32:4a:23:e5:18:74:ce:21:18:
93:0c:a8:05:db:39:a7:1b:4f:75:03:8d:6b:4e:8a:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:AC:5A:5C:55:40:3E:A9:45:3B:12:0B:9E:C1:E0:CF:7A:21:14
X509v3 Authority Key Identifier:
keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1d:33:81:98:11:26:6a:32:fb:49:59:65:c1:99:dd:aa:69:
cf:ef:a1:56:05:99:ea:f7:2a:a9:93:21:63:7d:ae:c5:8e:99:
0f:d8:cd:0c:52:5b:16:16:6d:7b:5d:74:7e:30:b4:a8:c0:cf:
3e:94:19:d8:ac:f9:6b:6a:06:fe:74:bf:34:34:9f:6d:75:b6:
e3:49:bc:53:ad:1a:bb:df:44:95:0d:f0:76:df:4b:e2:51:36:
60:76:c1:e8:d4:4f:d2:d5:d8:f3:df:a4:ea:6e:9e:c4:dd:df:
8c:db:0f:63:1e:a8:03:30:5c:80:bc:c8:69:ad:09:4b:2e:da:
41:7b:f0:ea:bb:ff:67:26:04:1e:7d:e6:16:d8:21:3c:40:8b:
e8:0e:db:45:21:82:3a:48:6b:97:a8:3a:6f:5b:05:f6:0b:7f:
cc:c6:77:48:22:25:f7:9d:d5:5f:b6:d2:73:dd:e7:5c:00:f8:
b2:8c:01:c7:66:33:7e:03:e8:af:b8:b8:53:24:30:4e:cf:ad:
7f:2a:bc:45:c6:bc:91:ec:fc:a7:e5:a8:25:37:1d:7d:b6:8c:
5f:10:98:f1:04:a1:21:2a:f9:1e:52:ee:24:c9:d1:6a:59:68:
ef:d1:ad:56:a9:fd:42:e4:3f:88:6d:c5:8a:68:9f:b1:db:56:
55:1a:ff:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:43 2026 by rpki-client