Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File: Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier: diXXHCUw9yP+dwTgVKrITT9+iDhECxRKdEF+KVHkOI4=
Subject key identifier: 93:F0:C1:46:38:AF:F9:08:80:18:ED:15:FA:E8:26:A8:38:C0:9D:C7
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial: 019CACEB56925174B0D7E698DB75B6E44738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 05:00:29 +0000
Manifest this update: Mon 02 Mar 2026 05:00:29 +0000
Manifest next update: Tue 03 Mar 2026 05:00:29 +0000
Files and hashes: 1: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: 3rBUAJVziTojXO5YQhXovAZZwRvDHcEUlV6LXUsWAIE=)
2: ovYaAbe26D-xe8lCheafK_LrtWY.roa (hash: 6eO0/Dtd7168WHT10a4JQBuUdq1q7SgJYtnU/qwqLfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:56:92:51:74:b0:d7:e6:98:db:75:b6:e4:47:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
Validity
Not Before: Mar 2 05:00:29 2026 GMT
Not After : Mar 3 05:00:29 2026 GMT
Subject: CN=93f0c14638aff9088018ed15fae826a838c09dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:ee:c7:d2:48:21:a0:e7:83:d7:ee:d9:c6:
1a:b8:f6:9d:e4:d4:75:ab:b5:8a:85:08:a0:e9:0c:
ed:21:c8:84:42:15:3c:2e:f1:ad:a0:92:9d:e9:1b:
96:57:98:66:06:e4:45:48:db:f2:15:9e:40:70:f0:
20:11:7a:5c:20:fd:e1:83:4e:3e:6f:82:b5:bf:61:
e1:ed:2d:f4:93:f1:ca:7a:9f:99:48:e6:c2:31:33:
56:b2:6f:a8:0c:b8:3c:cf:d0:51:fe:b7:c6:71:aa:
4e:fe:68:14:97:af:4b:85:79:2d:bf:97:23:4c:5b:
b1:05:63:9b:a6:c4:41:65:4d:0f:49:5d:58:5f:ba:
a7:c5:2b:bf:61:e6:12:0a:67:cc:5c:54:e8:c2:27:
14:11:51:56:84:2c:43:7d:5e:e4:2c:b0:9b:d2:b5:
9e:d1:76:e9:d5:d3:08:60:cb:7a:2c:17:bf:92:a5:
a6:af:d9:fc:f8:2a:b6:3b:8b:4f:b9:1c:0c:9d:27:
30:6b:d9:0c:6a:b8:c0:0c:59:64:3b:51:7b:62:80:
97:d0:48:2f:af:2d:46:93:18:71:19:de:2e:21:40:
25:db:a1:70:4b:9c:14:22:e6:bd:66:74:68:38:96:
10:7f:de:de:98:f1:20:f8:44:b3:e4:fb:43:a9:90:
26:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F0:C1:46:38:AF:F9:08:80:18:ED:15:FA:E8:26:A8:38:C0:9D:C7
X509v3 Authority Key Identifier:
keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:de:a6:97:c4:cb:5f:13:85:01:be:33:0c:91:f2:86:e1:3f:
59:14:bb:48:2c:cc:64:ed:93:ea:e3:72:a0:a1:9c:8a:6f:2c:
9c:87:37:4a:0f:12:6c:62:29:3d:c7:e5:b1:25:07:8d:99:cb:
30:03:4e:14:ae:94:45:70:13:62:62:a2:13:96:fc:60:41:97:
86:45:81:2c:48:79:bc:ef:35:bd:7e:93:4d:dc:e4:b6:47:da:
9b:29:98:71:9a:dc:07:1c:11:66:1f:5d:df:e3:05:53:6f:de:
d8:32:b9:89:fc:39:b2:1b:d5:54:17:c1:8f:ae:f9:83:ac:03:
62:31:4f:48:40:b1:f5:b9:f8:62:ad:03:c5:a2:64:85:6a:d5:
64:14:11:4a:0e:f6:80:8f:b5:1b:33:9a:75:0f:0e:74:e8:53:
ad:6b:29:f3:c1:02:e0:d1:6d:96:4f:79:bf:85:42:71:32:0f:
bc:25:2c:47:5e:2c:ff:6c:d5:46:05:6c:74:d5:de:1c:88:67:
b7:15:45:4c:5b:25:a4:72:37:14:2e:eb:1a:04:92:c9:9b:2c:
11:ec:cc:b0:f6:38:2b:fb:8f:30:ec:89:87:06:70:14:2c:9c:
c8:d7:5c:a4:cd:be:5b:eb:ba:02:e0:e1:c4:31:a6:02:aa:a3:
75:89:8d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:42 2026 by rpki-client