Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
File: YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json)
Hash identifier: xnzH4kQWp51YHi7ETy4l4mt8sGC8Z5P1xfxP2qYEuVs=
Subject key identifier: 0B:FA:4E:ED:E6:C8:69:A9:E4:4D:D5:FC:0C:F0:C1:0F:AE:5B:99:90
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Certificate issuer: /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial: 019CAAFD8F9FED42B6C399F52B1B50B60D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
Manifest number: 1431
Signing time: Sun 01 Mar 2026 20:01:09 +0000
Manifest this update: Sun 01 Mar 2026 20:01:09 +0000
Manifest next update: Mon 02 Mar 2026 20:01:09 +0000
Files and hashes: 1: B8RqG2Xxq5WGdSf7iNky-uGz4Vg.roa (hash: 9xOR3g7oJ2XNkjebEjWOcXDQwkDYeYBj7pv03VZ8aS8=)
2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: fZjxVCtPJVw+/WsTz8A4Tn0r3jZ84plv1vl5I51YWXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8f:9f:ed:42:b6:c3:99:f5:2b:1b:50:b6:0d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
Validity
Not Before: Mar 1 20:01:09 2026 GMT
Not After : Mar 2 20:01:09 2026 GMT
Subject: CN=0bfa4eede6c869a9e44dd5fc0cf0c10fae5b9990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:49:16:27:b6:d9:1d:b3:8d:72:b9:d8:e2:
3a:5c:ce:61:8e:32:b3:d5:b7:7e:99:b0:08:7c:ec:
3b:e5:71:c7:4a:16:3c:50:20:e2:e6:32:d7:ef:f1:
66:b5:41:a5:16:b3:7c:e4:c9:92:1b:e8:fa:d3:0b:
b2:58:b9:82:c4:4b:32:c3:a9:83:b7:4c:21:d2:d3:
8d:13:92:4c:ea:29:9d:5a:98:00:ba:e8:ae:da:13:
4e:3c:c7:49:af:10:3f:50:0c:0d:3b:af:a7:30:16:
e7:00:51:ae:a2:11:68:07:b7:55:14:9b:38:67:23:
05:f2:54:57:92:fd:27:96:3b:c9:0f:db:c7:99:96:
53:0d:42:65:48:11:6e:c4:a9:e8:fe:c4:54:37:ce:
5c:6d:85:9d:ab:0d:0a:52:69:6c:f6:f2:22:bd:6d:
a6:7c:37:27:9a:13:b2:7a:30:a2:65:59:c9:91:af:
39:f9:6f:d0:38:92:eb:19:6c:85:33:bb:ac:9b:c5:
1f:46:a2:91:46:58:8a:c1:5d:bf:82:60:02:f3:48:
92:18:95:55:85:f7:87:14:df:26:37:ab:bb:41:c0:
e3:a4:55:7e:8f:2a:c7:e5:35:df:f9:5c:20:a9:de:
5b:39:22:7a:0f:b5:00:78:75:46:f8:3b:94:84:01:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FA:4E:ED:E6:C8:69:A9:E4:4D:D5:FC:0C:F0:C1:0F:AE:5B:99:90
X509v3 Authority Key Identifier:
keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5c:71:06:df:07:e6:aa:71:4f:d6:07:66:92:40:4d:46:0b:
c8:1f:22:e8:a0:71:11:44:3b:16:dc:97:3b:79:8f:1c:62:87:
64:16:53:45:00:90:3b:bb:7d:f7:02:30:df:47:99:0f:84:12:
17:6c:90:12:11:13:be:15:1e:0a:84:31:37:3f:9b:02:8b:85:
c9:c7:e0:88:5f:b0:c2:04:9c:e6:6e:c0:6f:97:80:7f:59:49:
5c:4c:b1:3e:30:c1:ce:0a:6f:5a:b2:84:26:9e:67:86:ca:b6:
5e:0c:e9:67:9c:d8:0b:b9:97:f1:06:be:1d:c0:c9:55:44:99:
20:17:78:4e:d4:0e:a8:09:b6:59:b4:32:89:84:f5:4f:90:fc:
c6:17:de:a9:95:92:8c:b1:99:43:aa:f6:24:8b:32:29:06:49:
81:3c:41:20:7d:32:ae:36:03:5c:ad:3a:a1:6a:e3:5f:aa:64:
36:00:df:36:a2:09:d5:86:17:ad:86:d3:82:43:c0:36:a0:e2:
de:2a:ec:79:f8:44:57:e4:94:c5:2c:b4:7c:90:4f:21:83:8d:
76:ce:57:41:95:c7:68:3a:eb:5c:07:b0:72:fd:0e:d0:cf:91:
13:a3:d4:a6:3b:39:b2:4b:5c:67:4a:1b:f7:2e:38:c6:a0:8c:
31:43:ad:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:35 2026 by rpki-client