Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: yRpkXYpXsMK67GltBSpmIKATzKW36DwCi5Un2hjeh8o=
Subject key identifier: B0:1C:47:88:68:BA:F4:E2:DE:B1:92:84:F4:F2:39:25:B1:8D:1C:C2
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 019CAC7E19AE098F1012611AC2ED794697AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:01:11 +0000
Manifest this update: Mon 02 Mar 2026 03:01:11 +0000
Manifest next update: Tue 03 Mar 2026 03:01:11 +0000
Files and hashes: 1: J3trJnMvDZJ0BcVGu5fGaJyrupg.roa (hash: e8osDQcIENsCGM6JtSYddOPk22ajtK1guuuZINYdCT0=)
2: WiHVRTKANQPSLlslZgPEwLo61sU.roa (hash: NTrkcyBW/Rrku+dfbekK8M7MWrvABIKgt6ihPMKiaiM=)
3: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: c5UL5QqV/Wh/nrZRsf7gMFLppNjcgE4rGDaIdokx6dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:19:ae:09:8f:10:12:61:1a:c2:ed:79:46:97:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Mar 2 03:01:11 2026 GMT
Not After : Mar 3 03:01:11 2026 GMT
Subject: CN=b01c478868baf4e2deb19284f4f23925b18d1cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:ce:64:08:fc:22:7d:ee:a7:6c:eb:11:79:
72:8a:8a:4f:b8:69:ec:aa:86:a1:03:bc:11:ce:d1:
b8:28:1b:0c:f1:2f:f0:5d:31:1e:16:8b:63:ef:92:
3e:b8:2c:96:05:17:54:df:f3:dd:34:19:5b:dd:35:
4c:1e:a1:51:9d:a5:b1:37:9d:b1:4b:b8:38:d6:ac:
06:a2:67:c6:36:3d:db:54:c7:dc:8d:db:3d:bc:e7:
b1:a8:1e:5a:56:24:6d:dc:e5:35:47:74:35:e9:3f:
c0:d8:3e:c2:49:57:c9:32:9d:0a:ab:d8:78:e1:b5:
cb:eb:eb:ea:61:b3:ff:84:8e:87:d8:81:a8:b4:f8:
35:9e:81:88:e7:0d:6f:32:0b:3a:53:22:f2:41:56:
6b:b9:5d:69:3d:11:53:db:94:45:e3:16:0f:a6:cb:
42:63:19:24:8b:fe:b8:7b:b8:60:4e:e8:3b:ef:60:
22:6b:60:0f:85:15:9a:08:33:2d:70:17:d9:8d:de:
1e:3b:a3:a8:2a:e2:4e:52:66:93:a2:fd:65:a8:f1:
78:ba:a6:52:fe:cc:cf:57:71:ec:20:3d:3d:f3:e7:
a0:92:d7:01:90:fe:6b:28:e0:05:be:11:5b:12:ee:
71:ec:65:a8:e5:d1:a9:f8:af:28:f5:26:e6:b0:35:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1C:47:88:68:BA:F4:E2:DE:B1:92:84:F4:F2:39:25:B1:8D:1C:C2
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:06:ae:c5:2b:c9:16:6e:b0:17:ff:29:51:b7:67:8d:3c:86:
af:36:cd:6e:73:55:19:0d:4f:e2:e8:bb:0c:df:97:d6:19:f8:
70:05:94:f9:cc:5b:79:96:ac:b8:df:7a:45:4a:b7:4d:db:41:
a4:9c:ad:d9:e6:8e:be:32:72:f7:ec:5f:6e:c0:05:f4:bc:4c:
09:98:78:77:bf:5f:98:25:4d:78:f7:05:04:26:57:33:ad:48:
3f:7e:74:1c:b3:e0:07:1d:9f:a0:7f:86:14:31:d7:d0:22:58:
09:d3:2e:c4:f6:f7:72:eb:d2:b0:b0:86:81:12:1d:97:3c:25:
bf:8c:32:47:24:d8:c5:7b:4d:39:af:0d:81:d0:93:bd:e8:c4:
ee:e9:dd:5c:4a:00:bc:b7:e7:34:9d:fc:3d:73:f3:8c:5f:23:
24:6c:3e:af:96:78:43:2a:c8:b0:3a:17:45:05:6e:b7:64:ca:
4e:2f:75:9e:90:dc:c3:d0:f5:a3:16:77:56:1f:c3:34:19:1c:
a2:ea:74:6f:af:37:18:c5:1e:ab:08:6d:6f:0c:e2:37:9a:3a:
e0:46:1e:db:6b:40:3f:a2:dc:e9:e3:6f:6b:80:c1:b5:1f:32:
4d:d0:c5:a5:4c:18:00:c9:b1:93:8e:ae:27:56:96:ce:b2:47:
7d:d1:cf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:54 2026 by rpki-client