Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
File: YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft (raw, json)
Hash identifier: HGNoFl467qimcJCwR1gxXsA1dzABeHfmTdwe2ysDS24=
Subject key identifier: 7B:39:68:C5:AF:95:68:EB:75:54:65:26:48:1E:05:69:20:BC:3D:11
Authority key identifier: 60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
Certificate issuer: /CN=605abb253b766dcd7f16d9f01bc119691848eb0e
Certificate serial: 019CAC7DE8C8EBC8604479756DEDE4297475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
Manifest number: 04A3
Signing time: Mon 02 Mar 2026 03:00:58 +0000
Manifest this update: Mon 02 Mar 2026 03:00:58 +0000
Manifest next update: Tue 03 Mar 2026 03:00:58 +0000
Files and hashes: 1: YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl (hash: lu+Q9od1km1jwrfH80Dfil2oAKSmnajdFTUHZtOJvnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e8:c8:eb:c8:60:44:79:75:6d:ed:e4:29:74:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605abb253b766dcd7f16d9f01bc119691848eb0e
Validity
Not Before: Mar 2 03:00:58 2026 GMT
Not After : Mar 3 03:00:58 2026 GMT
Subject: CN=7b3968c5af9568eb75546526481e056920bc3d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:99:33:b7:0c:e9:e9:ea:0b:89:79:41:9d:
96:95:c5:5c:b1:7a:98:78:40:e2:d1:4d:be:9a:23:
93:25:33:f1:3b:dc:92:d2:1b:a0:ce:8d:af:aa:7e:
8d:ae:87:6e:a5:4b:92:b7:7a:53:d0:39:45:1c:5b:
7b:e7:89:2a:d8:ad:a4:2e:9b:46:96:c6:4e:a8:72:
d7:d4:01:2d:a0:b4:60:9a:06:68:eb:47:b6:c0:28:
ed:27:42:79:5b:61:48:58:b4:b8:cc:73:3d:a2:fe:
9a:91:53:65:bb:d1:ce:a0:7e:f9:4d:3f:60:d0:17:
38:c6:cf:e7:6d:38:a3:e5:3f:da:c6:d9:3f:d9:68:
bf:be:0e:98:b1:76:bd:41:23:97:ad:b7:de:1f:b9:
69:54:f1:b5:ac:f0:02:a5:ba:1b:d2:48:52:37:27:
28:21:41:7b:bb:5f:ff:c4:1a:36:4f:44:cd:ae:2d:
b1:0c:92:26:53:3e:04:19:4f:4a:da:db:91:4e:bc:
b6:a2:19:aa:a6:71:56:96:b4:0c:91:e8:cc:c6:38:
49:45:35:88:4c:22:c4:54:de:c4:82:4c:a4:1e:88:
c0:e0:cf:90:9d:f6:cd:8c:a1:95:53:9e:30:cc:54:
16:bf:16:f8:1c:a0:08:81:e8:ef:3e:98:b3:64:e1:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:39:68:C5:AF:95:68:EB:75:54:65:26:48:1E:05:69:20:BC:3D:11
X509v3 Authority Key Identifier:
keyid:60:5A:BB:25:3B:76:6D:CD:7F:16:D9:F0:1B:C1:19:69:18:48:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFq7JTt2bc1_FtnwG8EZaRhI6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/666670-d0f1-44a3-b93a-50111c4292d0/1/YFq7JTt2bc1_FtnwG8EZaRhI6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:99:a6:2a:be:d5:1d:6b:76:49:ab:29:b2:3e:48:9a:45:72:
a3:ce:4d:b2:93:58:f6:f9:d5:e7:7d:11:f4:10:80:f3:93:f9:
7a:0a:e3:35:ba:8d:4b:20:d8:25:ec:8d:f8:ff:64:8d:06:41:
e2:4a:31:1a:30:9e:b5:a3:23:83:d5:82:eb:72:87:bb:13:80:
cf:11:7a:1a:fc:0d:2e:0f:e5:10:91:3c:80:7b:07:86:c6:f1:
2f:b8:69:68:7d:da:61:cf:01:a9:65:7d:45:1d:02:1f:fa:16:
bc:95:a0:e3:31:b5:e4:f5:a9:01:03:d4:85:d4:e1:b2:1a:44:
eb:44:74:f7:7b:0a:52:ef:0b:0d:18:75:9f:71:b6:e4:d6:c7:
e7:c6:3a:ee:e9:73:7a:5e:7e:52:17:f3:bf:14:26:cb:16:c4:
5e:21:fc:82:3b:30:0b:98:5a:45:06:69:a1:f8:f1:24:27:89:
cc:84:37:c0:a1:92:3e:50:57:57:4b:cf:54:2e:15:55:04:95:
1e:cb:b4:94:fe:7b:ad:dc:18:5b:59:44:47:c5:f5:25:03:b9:
4d:de:59:5d:0b:61:5f:1b:dd:df:66:a3:dd:ce:a9:b0:ee:16:
6d:69:cb:05:a8:26:fc:cf:bc:ce:99:ef:0e:54:d1:63:fa:05:
34:07:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:57 2026 by rpki-client