Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File: YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier: xYBFrGL8Al8Ullo/3GZ9hCOtawCMnx8k8GpxB16pAfA=
Subject key identifier: 0A:B3:5A:62:2C:FC:47:0E:76:D8:C6:09:EC:40:5C:37:15:E1:65:EF
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial: 019CABD9DD49DCFE4864B3E42F6A579F5B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 00:01:47 +0000
Manifest this update: Mon 02 Mar 2026 00:01:47 +0000
Manifest next update: Tue 03 Mar 2026 00:01:47 +0000
Files and hashes: 1: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: PMayUlHYCSDkE0K7a2KKCS7+fKXSOsgtSgQ8aYhuhMY=)
2: gI7wdVdEujvd9VLF4Y0d2YxxXVQ.roa (hash: /3JebFmLKobYKFETqDIlb43OxSa7E2ofJHi6zZ1wGnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:dd:49:dc:fe:48:64:b3:e4:2f:6a:57:9f:5b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Validity
Not Before: Mar 2 00:01:47 2026 GMT
Not After : Mar 3 00:01:47 2026 GMT
Subject: CN=0ab35a622cfc470e76d8c609ec405c3715e165ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:f5:ee:0e:55:08:1d:32:35:6d:b0:aa:62:
21:54:58:2c:e4:93:16:b6:6e:d7:0b:0b:59:fe:95:
2e:42:0b:69:94:ca:e2:e5:a1:27:23:eb:b6:0c:6b:
95:d4:bf:bd:65:36:9a:37:7b:8a:b8:2c:71:bc:c4:
ee:3b:b8:49:42:1d:aa:2e:41:81:7f:0b:62:74:4a:
b8:55:5b:31:a4:aa:d9:49:ab:1e:88:0d:92:a7:48:
38:17:86:1e:d5:ab:3c:9a:c5:58:f6:9f:2b:ee:e2:
82:13:e6:7d:f3:c5:49:fa:92:16:95:64:33:6c:65:
9d:3d:08:dd:c4:0d:63:52:1d:6d:12:75:de:72:15:
24:bf:54:df:81:9a:81:6d:d7:de:77:86:78:de:d2:
51:13:fa:49:a4:23:25:66:36:c2:d9:72:92:1f:d2:
22:a6:2b:de:87:2d:6f:6d:ae:e1:09:55:e7:26:04:
eb:a4:1b:1e:1a:9b:54:a2:17:8e:f8:cf:c6:45:4b:
b7:8c:32:44:7d:e9:b0:24:63:7e:80:cd:1b:76:db:
d9:cd:4d:ad:e2:40:4e:7a:28:a4:06:49:98:d2:61:
f9:a6:0f:8d:35:c2:25:db:8d:1b:ac:9c:88:55:9d:
ad:2f:9e:ff:27:2e:3a:7a:48:14:75:a6:cf:cf:25:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B3:5A:62:2C:FC:47:0E:76:D8:C6:09:EC:40:5C:37:15:E1:65:EF
X509v3 Authority Key Identifier:
keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:93:b8:75:a5:94:30:11:a1:13:dd:fa:55:7f:81:5f:c2:80:
a7:a0:72:bf:fa:01:eb:8f:ac:48:b6:06:cf:b3:5c:2c:7a:c2:
16:f3:67:89:cc:92:5a:f4:2e:06:69:7a:74:8b:4c:f2:c3:fb:
de:97:19:3b:22:3b:14:1e:63:e9:a2:ce:75:71:85:d2:6b:49:
87:35:98:87:68:b3:52:95:3b:25:40:95:e0:a2:25:37:91:c8:
bf:ef:69:20:eb:e9:c0:e8:20:96:f0:62:bc:4b:d8:34:8f:74:
1b:9e:83:71:0e:9b:7f:25:0f:81:95:55:ba:ff:ea:bb:72:cf:
1f:c1:d2:3b:5c:0f:80:4b:42:01:0c:61:41:fd:44:18:21:57:
65:f5:ee:4c:5f:53:d5:52:63:95:00:2b:75:83:67:c2:1b:7b:
1d:e5:07:c2:07:0a:c4:3b:f4:ea:65:9b:06:be:d1:e6:73:34:
16:ca:e8:56:e3:7a:2e:72:01:cb:c1:52:27:cb:db:34:66:8c:
4a:bd:7f:cd:6c:58:0f:dd:8b:59:b6:5a:fe:a2:22:a2:d7:f3:
63:dd:23:81:8d:88:21:ce:2d:a2:bf:2e:18:99:5d:60:10:0a:
d5:9c:ee:69:fc:45:8f:fa:89:79:c1:b5:84:7a:e3:4b:7e:52:
71:cc:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:55 2026 by rpki-client