Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: QXRt02G7rBMZZ5F14zaD+9HlyunhvjHXlBPXYakn7ak=
Subject key identifier: E4:B7:8C:85:7E:CA:1A:00:03:2A:61:9C:6E:89:D1:F9:C1:6D:54:52
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 019CAB6B0AAD8B1361CF4959E08E670ECA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 22:00:44 +0000
Manifest this update: Sun 01 Mar 2026 22:00:44 +0000
Manifest next update: Mon 02 Mar 2026 22:00:44 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: gLOOIMY5/SMYLnmtvJOCuUEAd8VIn65zyDpIPZgfCdg=)
2: qdhzDXuwEXMKIhcBtC--OVRDYRs.roa (hash: iT11iYdlbhQ14x4ERQHAeOODlysNDcwshKAALWJPnaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:0a:ad:8b:13:61:cf:49:59:e0:8e:67:0e:ca:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Mar 1 22:00:44 2026 GMT
Not After : Mar 2 22:00:44 2026 GMT
Subject: CN=e4b78c857eca1a00032a619c6e89d1f9c16d5452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ee:12:b1:54:59:90:45:8e:cc:12:2c:43:4d:
21:31:c0:e9:8f:74:70:d8:cb:f0:79:32:0c:a7:f5:
e9:f4:11:63:da:b0:c3:5b:29:20:74:55:9a:5c:3f:
24:1c:e0:7b:b1:9a:94:69:d5:ca:f8:0a:12:dd:25:
1c:2f:a2:79:3c:d0:b5:af:1e:87:6a:72:7e:2a:69:
51:1e:78:84:28:73:71:b7:6b:e3:1b:5d:5d:ac:60:
ba:b3:43:69:09:a7:bc:28:dc:a1:30:5b:a2:b3:b2:
0a:95:61:e2:1a:e6:bd:4e:8b:bf:2d:a6:56:ba:65:
89:6c:63:4d:66:15:16:a5:49:4e:39:b1:26:dc:a2:
05:08:ce:ee:63:c8:56:31:98:02:7c:b6:f2:74:b5:
ba:8c:fc:29:fc:86:4d:7e:67:65:83:65:4c:03:3c:
94:68:74:d4:73:20:cc:8e:67:28:e6:90:02:b8:ac:
bc:fb:9d:70:09:9a:13:22:41:20:09:de:eb:e1:b5:
83:12:f2:07:68:42:bc:55:c1:00:73:46:55:bb:d4:
1d:ad:7d:35:7d:59:a1:42:da:2a:eb:c2:91:a7:54:
f6:4f:a4:66:62:9c:a0:7b:5b:74:3d:79:e5:77:8e:
87:b1:15:f3:21:36:78:e5:62:9e:1f:e3:ab:a3:cd:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B7:8C:85:7E:CA:1A:00:03:2A:61:9C:6E:89:D1:F9:C1:6D:54:52
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:62:71:59:5c:91:ff:5f:1d:53:f8:89:c0:de:95:f7:9f:bd:
7e:a4:74:70:8c:42:a5:67:8f:7e:9f:19:b8:bc:88:a0:77:9b:
f1:0e:69:a6:8a:ca:f0:3b:e2:6e:59:4a:64:13:8a:d0:bf:79:
30:4f:e7:f7:5d:74:61:ff:6b:d0:3a:f8:2b:86:a5:2e:d9:a2:
35:1c:05:fa:c7:52:3e:4d:2e:50:4d:d0:95:ae:93:5b:8f:f9:
ba:9b:f8:51:9a:24:a8:b9:09:7b:4e:d1:31:0f:0b:c7:87:ab:
93:c1:fb:2e:cf:4c:d2:09:51:49:dc:ff:7c:07:b7:ca:95:61:
3c:51:d8:b8:69:c4:5c:b6:5d:6d:91:72:fe:f1:5b:6c:e7:d0:
a8:97:6a:b3:2f:e2:e5:a3:a9:e8:8f:f6:8b:61:a9:78:b6:6d:
66:d3:db:dc:68:2a:d7:e7:2c:05:72:f9:c3:c9:aa:f3:7d:c7:
db:ac:20:17:e1:f2:c2:12:41:45:89:61:e6:50:71:1f:22:8f:
bb:37:3e:82:ad:f0:4a:87:43:d1:ea:ce:79:a7:c1:2a:21:63:
63:a9:be:0b:4a:c6:ff:b8:e4:cc:0c:1b:4c:8b:2f:66:fa:eb:
4b:1a:5e:41:34:b7:3a:c2:13:87:fd:9d:b7:b3:ae:22:25:e6:
83:a9:f3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:09 2026 by rpki-client