Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: kA2tq+79t31N1PHBSiWXkkF8y1RfLX41IsfcYDXSxUU=
Subject key identifier: 71:34:15:C6:44:16:EB:6F:13:8E:10:31:DB:C7:91:27:F8:EB:D5:F7
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 019CAA213507D970B17B651F4270746DDB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 1041
Signing time: Sun 01 Mar 2026 16:00:28 +0000
Manifest this update: Sun 01 Mar 2026 16:00:28 +0000
Manifest next update: Mon 02 Mar 2026 16:00:28 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: hhwtNlpthIr0LVLD/fOoHmLD97GmsqiodZUYCar1oxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:35:07:d9:70:b1:7b:65:1f:42:70:74:6d:db:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Mar 1 16:00:28 2026 GMT
Not After : Mar 2 16:00:28 2026 GMT
Subject: CN=713415c64416eb6f138e1031dbc79127f8ebd5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:bb:c7:3c:41:1b:c8:0f:d8:ff:e5:e1:ad:
1b:97:1d:15:ff:9d:5a:89:ff:25:ed:62:ef:fe:5f:
20:e4:dd:24:68:26:58:0c:9c:12:39:31:b6:55:12:
e1:7b:49:b8:04:e5:5b:0c:75:66:4e:c5:3b:9b:fc:
00:37:03:7f:54:a5:fa:b0:85:5f:b3:da:1d:3b:9e:
cd:34:e9:6d:f9:94:51:df:14:78:40:fa:79:aa:3b:
25:f4:cb:d2:8a:1d:87:53:d8:ca:5e:cd:51:b1:6d:
f8:94:e4:55:4b:33:4b:9f:d9:e2:fd:ce:30:1a:f4:
5c:f1:68:78:70:47:b8:e3:ad:9f:54:73:38:eb:5f:
eb:02:ab:c8:0b:97:b0:76:c6:6a:e7:7d:77:03:0e:
e4:c3:d4:50:8c:bd:48:1c:64:9a:84:d7:a4:71:51:
59:31:b5:a4:21:7b:40:2b:54:d7:b6:76:d9:ad:25:
f0:4f:28:6a:ce:ed:93:94:50:a3:cb:75:b8:5c:ed:
c5:45:a4:e2:81:0d:5c:11:11:6d:b0:d8:f3:02:38:
22:eb:62:0f:e4:25:9e:ad:cf:03:b0:0f:5a:8b:39:
36:49:83:2f:2f:b8:eb:7a:c9:01:14:d3:dd:80:88:
0c:a9:db:93:b2:7e:54:90:28:ae:e8:97:0e:5d:dd:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:34:15:C6:44:16:EB:6F:13:8E:10:31:DB:C7:91:27:F8:EB:D5:F7
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:37:90:ec:fd:8b:93:6b:1c:76:5c:17:c3:1c:6f:26:6c:c8:
d4:9a:f6:c0:99:03:d4:77:48:40:c0:0d:73:ad:fd:c2:bd:76:
1e:91:18:97:2b:34:4d:a5:9a:f6:8f:14:0f:82:8f:36:aa:52:
f9:7c:70:ba:3b:4f:3d:d3:31:ae:15:b9:be:1f:63:3a:30:7e:
67:1a:92:0b:14:f6:c5:17:5e:fd:8a:93:a3:ac:77:dc:54:c9:
ba:9f:02:f7:c3:af:cd:d9:5f:03:10:cb:9e:38:a6:6d:e9:c6:
c5:8c:37:9a:8a:88:b7:f6:58:5c:eb:33:ee:be:a6:73:29:b9:
51:a1:53:3a:69:e0:cb:a4:82:06:dd:fe:22:e4:c4:76:e3:0c:
4f:42:4e:37:9d:67:64:5a:27:c6:57:a2:ac:11:50:57:0f:50:
31:8c:5d:6d:bc:11:b0:0c:df:c0:05:1d:ca:04:26:bd:9d:e0:
a1:e8:02:87:42:18:de:00:fe:56:c3:bf:af:2c:68:37:f7:1a:
e5:d7:3e:9a:d9:f7:ed:b3:14:c0:ab:64:d7:c9:ad:fd:c2:1a:
ca:58:d1:ac:6d:2e:60:0f:5e:02:ef:ea:93:f7:33:9b:ec:ca:
af:d5:33:9f:a7:96:3a:bd:c6:1c:d5:05:f8:8d:cd:94:b6:1a:
3d:62:8d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:54 2026 by rpki-client