Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier: TSVJamYo6KSw/wKlQs+jx6dRQAmvA1FhsPN5ICrlOxA=
Subject key identifier: 7B:15:95:C0:8F:06:F2:E9:B4:22:FA:1F:B6:C0:EE:18:66:AE:99:80
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial: 019CAC7E6909E790CB7485F344B89F2066CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number: 0419
Signing time: Mon 02 Mar 2026 03:01:31 +0000
Manifest this update: Mon 02 Mar 2026 03:01:31 +0000
Manifest next update: Tue 03 Mar 2026 03:01:31 +0000
Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: 3URmxdUkdWQEoHgNqEJqffTvtQUDV/3XWdFJFabeJXs=)
2: nsMVjB3dBsEs4QDP-UqrSgiiMZk.roa (hash: 4KH9ak7vbK8YvGmfh6MjtuXURmPLUowjhWOo+NHtQgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:69:09:e7:90:cb:74:85:f3:44:b8:9f:20:66:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
Validity
Not Before: Mar 2 03:01:31 2026 GMT
Not After : Mar 3 03:01:31 2026 GMT
Subject: CN=7b1595c08f06f2e9b422fa1fb6c0ee1866ae9980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:21:df:3d:ce:79:bd:72:81:02:9c:dd:c3:
b2:b2:c0:e1:87:07:05:d3:ca:1d:2f:2d:8f:29:d4:
10:16:3e:d1:e9:54:20:6e:d6:9d:27:ba:53:06:29:
46:69:56:a9:71:7d:b0:76:60:bb:1e:23:6a:8a:de:
da:01:31:d1:b5:2f:3b:bb:47:c6:1c:88:43:5b:0e:
e6:ad:8d:45:58:5f:36:88:51:dd:44:4e:36:3a:26:
06:cd:8f:c0:ed:b0:96:c0:b7:47:3c:44:af:bc:d2:
18:42:27:4d:56:29:20:e5:a8:51:f1:35:36:b4:6e:
b3:c1:3a:18:cc:fc:1d:85:e1:db:6d:e1:51:d0:c1:
0b:33:b3:65:77:6e:95:de:09:b5:a1:7d:08:78:39:
89:1b:c7:b1:96:85:84:05:79:ae:a4:db:ae:06:62:
54:56:9a:1b:5a:e5:d0:52:12:85:d7:13:87:32:fd:
bb:77:32:be:55:e7:51:d7:4e:0b:54:06:ae:e2:ad:
69:ad:8e:2d:8c:6a:11:1f:4b:be:85:14:49:22:77:
1b:d3:d0:67:0d:71:fe:b7:bc:30:2a:8a:4d:f2:41:
29:3c:08:75:a6:0c:6c:7e:70:f4:71:00:15:77:50:
f7:80:f8:5f:ca:ac:52:ac:de:e7:08:bd:1b:f7:3b:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:15:95:C0:8F:06:F2:E9:B4:22:FA:1F:B6:C0:EE:18:66:AE:99:80
X509v3 Authority Key Identifier:
keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:dc:a3:22:29:5e:3d:d6:9b:0a:f4:8e:18:1a:7f:45:2f:8b:
c2:b2:17:d2:71:52:e9:1e:83:a6:b5:52:7a:db:b4:fd:2b:cb:
d7:c0:13:40:13:f9:d3:e0:23:76:1a:75:38:eb:11:28:96:4d:
28:61:7f:d3:87:b2:f6:d6:47:3d:2f:95:cd:32:12:45:bc:88:
d5:dd:eb:5b:a1:c7:71:ce:03:b8:a4:a5:2c:35:33:05:3e:3d:
14:12:40:f4:1f:a8:4d:41:65:d4:e0:df:c5:8e:2b:57:17:49:
6c:ef:6e:cf:92:ff:08:15:35:68:00:80:b2:5d:88:61:01:eb:
37:20:2b:c7:16:6e:49:19:eb:f8:85:b2:1f:88:ab:15:d6:b6:
e6:52:66:5b:9f:27:41:ba:59:06:dd:bb:30:8f:f7:65:57:cb:
0e:a5:02:11:93:b8:76:ff:3c:5c:23:3d:dd:e2:76:4a:7d:4e:
8d:d6:eb:f3:94:ee:07:a8:53:7c:23:82:ea:9c:05:f9:cf:f3:
b6:3a:51:34:dc:d8:ef:a2:6f:88:be:af:f4:12:f8:12:e6:12:
ff:94:6f:f5:c0:f0:f9:4c:83:8f:82:eb:9e:76:b4:2b:56:8e:
76:ed:c4:70:62:ca:e1:82:ea:36:70:50:e2:7d:18:b8:cc:69:
16:13:b7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:53 2026 by rpki-client