Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
File: YxkpXTrafm6zKYRJYcqhACyqTYY.mft (raw, json)
Hash identifier: PKmEx5biW9CkOLAnGGD7+2B9xc398itReT5cEofAJbc=
Subject key identifier: B7:1B:D2:18:FF:FB:67:EB:16:F7:F5:8B:28:34:FF:C6:40:64:FE:BB
Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
Certificate issuer: /CN=6319295d3ada7e6eb329844961caa1002caa4d86
Certificate serial: 019CABA204DEA0EB9840D37376A32418B698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
Manifest number: 07F1
Signing time: Sun 01 Mar 2026 23:00:47 +0000
Manifest this update: Sun 01 Mar 2026 23:00:47 +0000
Manifest next update: Mon 02 Mar 2026 23:00:47 +0000
Files and hashes: 1: YxkpXTrafm6zKYRJYcqhACyqTYY.crl (hash: fWpouWoNYwb2o04Pr76Q0EM4b7T1SfwhlESU8k8sRWk=)
2: q-dlc0RnKGXQQKCzBekmdoQdLBc.roa (hash: BVWF+eiynzBU7NWIb18jSV9kqUVVHyUBCS+BjOc+ZKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:04:de:a0:eb:98:40:d3:73:76:a3:24:18:b6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86
Validity
Not Before: Mar 1 23:00:47 2026 GMT
Not After : Mar 2 23:00:47 2026 GMT
Subject: CN=b71bd218fffb67eb16f7f58b2834ffc64064febb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:3d:c7:bf:8e:04:0b:1b:13:11:2e:ef:f9:
d1:a9:2a:ac:16:8c:a0:fc:85:77:7d:57:a4:c9:14:
5e:db:13:6d:42:44:f4:0d:6e:cb:26:71:cb:d5:73:
4b:0b:1b:72:71:52:5a:52:c5:e6:1b:1b:8a:f5:72:
bb:74:11:c1:a3:33:d2:d6:57:05:ba:45:14:d8:fd:
c4:ec:52:16:7a:32:11:38:09:d7:5e:88:e9:98:20:
66:4c:af:68:19:99:a9:5b:45:ae:de:7f:cb:d9:38:
20:b6:5a:3f:06:1d:2d:f7:5a:ac:f1:25:82:f5:d4:
a0:83:fb:c3:e0:3b:45:fa:12:51:ce:35:6f:69:a6:
89:19:ef:38:4e:6a:ab:dd:89:95:b9:5e:09:e2:1d:
77:f7:87:96:cf:3d:24:cb:4e:69:90:6a:e9:f6:63:
ff:50:6f:1e:7d:16:25:7c:45:20:f6:58:b6:f1:07:
97:4b:18:bc:ac:47:bf:72:51:b8:4e:bc:af:dc:62:
3c:77:ae:a0:be:eb:ff:c8:40:d0:c4:52:b0:e4:12:
18:e2:cf:79:b3:33:09:ef:3b:d0:99:5b:15:25:34:
15:f0:76:96:2e:10:65:b8:26:66:8d:a3:34:44:f1:
fc:c9:f9:d6:63:e2:64:69:e9:14:4a:61:bf:15:58:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1B:D2:18:FF:FB:67:EB:16:F7:F5:8B:28:34:FF:C6:40:64:FE:BB
X509v3 Authority Key Identifier:
keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f4:12:cb:e0:79:eb:c2:31:e6:2c:ab:d1:1a:e3:b6:40:81:
b2:c9:41:c8:5c:42:b2:01:5d:41:2c:49:df:06:02:87:c0:53:
77:d7:c0:08:47:f2:57:42:d9:6f:7a:36:80:eb:12:84:52:84:
e2:a0:0e:a5:1d:d1:ef:80:de:ff:46:40:49:77:25:76:40:fd:
72:cb:cb:04:c1:72:64:08:84:c6:31:f6:a5:29:c2:b4:66:d2:
1c:df:d2:b1:fd:be:ce:fd:50:9c:d2:61:bc:83:71:40:96:cc:
a6:a6:fd:cb:fb:06:2f:89:d7:e8:c0:a9:e7:ff:73:3c:c3:c2:
4b:e1:94:b9:04:93:e7:5f:8a:7b:c6:96:9b:4a:33:29:3d:e5:
43:c7:dc:4c:2d:5c:e1:dc:01:2e:c8:98:37:ba:c6:80:ac:51:
8a:8e:c5:40:c1:4a:7e:37:fd:e4:af:6a:ac:12:af:73:10:bc:
07:a5:98:fd:09:cb:6e:9b:b3:70:b0:7b:a5:c4:a2:9e:4e:d4:
a1:6e:a9:04:17:5a:68:28:cf:dd:e4:cd:87:e1:99:d0:e4:02:
52:18:f5:f3:c2:8e:ef:91:d6:18:ce:1f:0d:21:3b:b9:2e:3f:
48:44:19:a3:1a:b0:e9:8b:f9:23:f8:77:24:d8:3c:45:d8:b5:
7e:4e:c8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:36 2026 by rpki-client