Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File: Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier: j7qIeJoZ2l8G7dJaFLpXviPsQwnYgy6vM50xNzmiou8=
Subject key identifier: 21:FF:B0:16:B9:A1:57:C5:3F:1B:D8:5A:99:19:E0:8C:55:50:55:B5
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 019CABD931494E43FA25CBBEE40C7C63CCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number: 1403
Signing time: Mon 02 Mar 2026 00:01:03 +0000
Manifest this update: Mon 02 Mar 2026 00:01:03 +0000
Manifest next update: Tue 03 Mar 2026 00:01:03 +0000
Files and hashes: 1: QSgiyH11wyAURvatj9-ZAc4hYVY.roa (hash: clDL8JVxHAo7Ey2O322dbo1WNKZNfLWVEI2vSjSdkIA=)
2: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: qmJcdN8V72b1PQUmjv+I3aLnSHPb61iTUdFVnXegons=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:31:49:4e:43:fa:25:cb:be:e4:0c:7c:63:cc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Mar 2 00:01:03 2026 GMT
Not After : Mar 3 00:01:03 2026 GMT
Subject: CN=21ffb016b9a157c53f1bd85a9919e08c555055b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:ae:7b:26:79:5f:63:17:65:67:86:dc:4d:
5c:5b:fa:b1:86:ca:4b:dd:5f:6d:93:3e:08:8b:a1:
65:63:f7:89:a4:14:22:f6:56:2a:c9:c1:08:5f:25:
8a:26:6a:f0:b5:5a:5e:fc:f3:fb:01:97:ce:d4:2c:
50:4f:f2:00:ec:8d:ea:82:fe:6c:ae:bd:c2:5c:1a:
58:3a:9f:ca:7c:a1:85:c7:ed:9f:e0:79:ed:97:6f:
e2:4d:8c:67:87:da:cd:5e:66:b3:61:cc:7b:e7:70:
c7:f7:61:51:5a:17:6b:af:16:03:e6:61:a0:f7:3e:
95:4e:0e:f5:5c:7e:fc:13:ed:d2:5a:68:71:cc:9d:
34:76:fe:50:7a:b2:40:fd:da:c8:a4:48:06:9b:67:
af:56:4b:be:5d:c9:57:8a:62:d7:bc:59:ee:cc:e9:
bd:47:e6:5e:e2:c0:99:91:92:8d:8b:89:07:2d:01:
f3:90:cf:76:35:01:43:3b:a9:ab:7f:5b:40:ff:75:
09:17:68:f9:d7:e6:e4:8b:f9:a3:07:9a:97:f7:c3:
3b:39:d7:2e:36:3a:b7:22:6e:53:6e:9b:b9:a0:02:
f7:27:f6:db:80:ed:01:1a:52:a5:58:67:69:df:ef:
28:5f:30:b5:0c:bd:7b:56:af:14:e3:9e:5d:39:f8:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FF:B0:16:B9:A1:57:C5:3F:1B:D8:5A:99:19:E0:8C:55:50:55:B5
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:5c:1e:47:62:af:32:d6:3c:eb:26:50:e8:f9:b9:bf:f6:0f:
2c:d5:54:ee:b1:76:6d:8b:30:12:6d:04:a1:f7:31:b6:0c:c9:
34:49:09:ec:8a:b4:3a:4c:f2:9f:b2:18:38:0c:8b:5b:76:ca:
70:1c:8b:12:0a:f0:8f:fc:64:0a:f7:4a:77:70:b8:90:74:5c:
29:d9:85:b5:f4:b8:30:1a:96:be:9b:3c:80:14:43:d9:85:d8:
19:b0:53:7c:f6:79:0a:77:7b:03:c8:53:9a:db:f5:00:15:41:
fd:18:2e:c2:66:a7:07:5e:44:fd:f4:52:e9:5b:c7:4a:19:18:
71:74:07:7d:89:dd:de:48:9f:67:a2:22:70:5f:86:25:5a:66:
5d:e4:72:a0:af:1f:07:44:76:3c:16:11:fe:1c:8d:98:fa:e9:
89:ea:c5:b2:ab:6f:78:25:a0:d4:75:9f:5e:11:cc:66:33:7e:
df:43:6b:78:b6:9f:06:45:23:ee:4f:7d:f5:56:a0:50:fb:7c:
17:4e:02:3b:e6:6d:02:2c:f8:24:bc:c1:51:03:f6:78:d6:f4:
0f:e9:26:e4:67:66:97:37:fb:c2:55:90:0d:ca:6b:44:10:53:
74:d8:b7:ae:28:f4:de:e0:dd:db:2e:c6:34:08:4c:2f:d1:e6:
9f:ae:5a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:45 2026 by rpki-client