Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
File: YIYxT4djXnk7wuPbvtZkBbisZ3E.mft (raw, json)
Hash identifier: 1kxEq58pnpEpfKaBflprnUJc46hEoSTHf78AUVTdaQ4=
Subject key identifier: D6:45:94:BF:11:13:C7:F8:C5:BC:04:2B:E4:12:4C:29:E2:5A:00:95
Authority key identifier: 60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
Certificate issuer: /CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Certificate serial: 019CAC477C7411D6D668C273BE09BEA05BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:01:31 +0000
Manifest this update: Mon 02 Mar 2026 02:01:31 +0000
Manifest next update: Tue 03 Mar 2026 02:01:31 +0000
Files and hashes: 1: XXnrfTeMWz5PhgtiK8a4AxaSgho.roa (hash: yESjb+epkWscywuwChkZG1nAsFck4dw/7G4mvFgiS10=)
2: YIYxT4djXnk7wuPbvtZkBbisZ3E.crl (hash: RBEr6a8+lzZMPVnFAIvhvD7pAeDKimYCY5fS4Z/EPT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:7c:74:11:d6:d6:68:c2:73:be:09:be:a0:5b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Validity
Not Before: Mar 2 02:01:31 2026 GMT
Not After : Mar 3 02:01:31 2026 GMT
Subject: CN=d64594bf1113c7f8c5bc042be4124c29e25a0095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:ab:16:54:98:22:fc:ca:e3:0d:df:59:c2:
70:93:50:8f:73:60:34:b7:92:c3:e9:72:1e:3c:c5:
c2:9d:ba:e5:6c:ab:cf:ea:da:bb:59:91:ef:69:79:
a6:e2:81:99:d7:c6:c8:5f:42:26:96:58:12:7a:ee:
d6:c0:c7:b3:e5:9d:37:bc:6f:ae:47:c0:4a:b1:d4:
d8:0c:66:23:56:59:88:f8:a1:09:16:22:e8:4a:62:
92:17:7b:c0:23:4a:c2:ea:31:e6:e0:67:a8:0b:c0:
24:2d:ef:1e:44:fe:7e:8e:83:ef:0a:1c:93:80:23:
23:8a:7d:bb:58:f5:b3:41:5f:ce:7a:dc:5a:85:c9:
e1:2f:9b:0e:fd:44:26:30:17:f5:21:2d:4a:20:2e:
af:8a:e8:4d:52:5f:b4:f1:73:ea:6e:24:cc:8b:57:
af:e9:a3:27:35:0a:a0:f5:17:37:6b:a2:fc:35:48:
f7:12:03:87:ad:7f:f6:2f:af:bc:4f:be:64:f8:85:
dd:9b:be:77:d1:69:e7:48:94:ca:d2:30:ab:1e:39:
83:64:8d:83:b1:d3:5e:5e:69:d9:42:93:64:17:85:
07:d3:51:c4:74:21:2a:39:98:19:04:33:99:97:cd:
15:0e:60:17:ef:18:09:38:44:8b:1e:eb:13:c6:02:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:45:94:BF:11:13:C7:F8:C5:BC:04:2B:E4:12:4C:29:E2:5A:00:95
X509v3 Authority Key Identifier:
keyid:60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:6a:8a:70:ff:f7:b6:f3:5d:23:a6:b6:f2:07:9e:48:dd:1a:
9e:a0:85:a8:a4:69:a4:e8:c6:15:db:2d:f3:1c:d0:2c:7c:cb:
c2:14:42:ea:1b:f6:00:3b:a8:5c:a2:ef:f2:e6:b2:36:82:d4:
3d:fe:d6:92:c1:3c:ff:1d:f8:41:bb:8f:a3:1d:93:9d:10:3b:
b9:75:9e:c0:1e:c0:11:3d:53:a3:2c:23:2f:cf:1c:45:2f:bd:
31:62:6e:c4:79:f5:5d:c7:7d:c2:24:8a:d3:a6:a6:4e:40:3b:
92:15:d5:a5:b7:4b:39:5d:34:06:a2:3f:0c:8b:12:ee:ae:04:
8e:62:98:a5:7d:ed:51:01:65:c8:84:61:f3:2e:1a:ee:06:0b:
a7:cb:a8:88:8e:70:7a:80:30:84:c5:08:ad:85:22:7d:f1:d0:
d8:c2:9d:bd:5c:40:f8:6f:69:ca:0d:3f:1b:3e:1c:d6:3a:75:
08:7a:97:b0:c3:06:85:01:76:71:f9:c8:35:26:ab:a9:c8:95:
e0:44:27:bc:7b:5d:a5:6d:5d:0d:ca:23:58:9b:e7:6a:3f:55:
62:8f:35:b8:4c:7c:b6:01:f6:a5:f2:9f:ef:2f:2d:b8:45:7f:
62:1c:cf:6c:59:35:8c:07:55:a0:b1:ac:d2:0f:a3:20:54:12:
19:00:c8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:02 2026 by rpki-client