Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File: YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier: 8P/t9qlgWrTII2snK8H73vew8i+0oT8XB7VR53SjhT4=
Subject key identifier: 03:D1:9E:D4:5A:18:C4:62:5B:D2:FC:62:0D:1A:C1:70:45:20:C5:39
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 019CAD59D879F14199709D9BAF8B120A98BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number: 16F9
Signing time: Mon 02 Mar 2026 07:01:12 +0000
Manifest this update: Mon 02 Mar 2026 07:01:12 +0000
Manifest next update: Tue 03 Mar 2026 07:01:12 +0000
Files and hashes: 1: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: t/gINejqWVMsao7t/ivQo3xInjSaCgyG83SP9tiE0+s=)
2: ZGMDMaaeutNnkXyJL58734MtHlg.roa (hash: Zs6W0mlBy5j5neBEaMNbSPEex6wUKIOiG0C8/ZE4ktw=)
3: b5JaXMr4GIBvT4KCIP7BI-wUSZI.roa (hash: vRg65JmrVs2QhtYFXLwraN6iw4o7UcfzdNjLDeVLhok=)
4: jKshf8wnc15011tXTFSj3TTXJFA.roa (hash: K6mzJUE9dYVEi81Gnv2fYao7OX/tyLrwWkjFdI+z8Z0=)
5: qPyrPHOcj4AsJ76uDNoQbJBu-3A.roa (hash: icQiWI2POs5a9KmLU/wFkbzLvsrXEhv8Owk5IzrA7+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:d8:79:f1:41:99:70:9d:9b:af:8b:12:0a:98:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: Mar 2 07:01:12 2026 GMT
Not After : Mar 3 07:01:12 2026 GMT
Subject: CN=03d19ed45a18c4625bd2fc620d1ac1704520c539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:32:83:b0:96:bc:12:64:b6:70:ec:89:54:
97:6d:7a:38:ce:d6:27:43:a2:3c:4f:96:5f:aa:c4:
35:ae:ab:87:b0:fa:ea:70:fa:7a:9d:ff:7a:b1:30:
ca:21:3c:b8:d5:b7:72:52:97:74:85:d4:7d:48:fc:
03:1a:00:48:11:ab:e8:00:bc:4f:16:31:4b:0e:07:
74:4a:9f:81:2e:45:ac:7c:71:2a:b4:9e:9b:5f:26:
83:8f:08:49:4c:62:db:ea:4d:2a:f4:0d:29:7a:34:
09:8c:e6:e3:0c:3f:6f:66:a5:52:9b:61:2f:4e:60:
81:64:23:31:cd:33:cc:2a:0b:e2:29:8b:f4:d6:0b:
58:77:f1:3e:8b:d1:fa:3b:a9:20:0e:27:2b:9b:5f:
31:aa:da:8b:f2:d5:d6:4f:6b:de:6a:df:5c:5d:cb:
ed:ff:64:79:e2:22:9c:38:d1:77:cb:5e:55:84:d7:
e9:1d:d9:a1:09:c2:0f:c3:1e:7c:7a:9c:17:20:d1:
ab:80:c5:a7:c1:58:0e:1b:65:18:78:8c:47:c2:81:
89:b5:0f:d4:b4:dd:67:ad:8e:d3:ea:9a:3c:c5:f3:
d6:4d:e1:3a:c5:80:1d:4a:ae:b0:0d:d4:27:79:b5:
9f:43:25:ce:b5:21:fa:dd:ae:e6:79:de:23:31:29:
81:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D1:9E:D4:5A:18:C4:62:5B:D2:FC:62:0D:1A:C1:70:45:20:C5:39
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cd:ca:ad:25:a5:37:40:97:bc:cf:97:8e:70:9c:2f:3c:a0:
10:2d:f0:bf:c7:49:f2:59:36:28:5d:aa:99:9d:41:f9:0a:80:
e8:04:28:f8:6f:ab:55:33:55:ee:19:34:54:bb:66:2a:63:6c:
95:be:d2:75:86:f9:9f:97:a9:f8:49:3f:3a:99:34:ed:d8:7b:
50:89:1b:71:4a:9d:9f:25:68:be:dc:b7:9f:4f:b5:f2:c8:88:
c6:f8:45:0e:a0:98:03:b2:69:f0:3f:32:81:5f:da:50:26:42:
15:a5:e3:6a:30:f6:ce:f5:c6:ce:db:c1:46:05:fa:85:78:8e:
86:e4:64:60:9f:66:12:0f:84:fe:6d:39:31:7d:f1:0b:c0:86:
c6:00:c4:76:f3:e8:c2:0f:23:9c:bf:51:26:4b:15:20:f1:7c:
12:63:84:a8:4f:6f:82:2c:97:55:cd:20:05:6b:51:29:c8:d3:
6d:63:4f:25:09:2b:e4:80:63:05:da:24:dd:82:ad:4c:6f:1a:
56:d3:bc:7f:a7:27:06:28:e2:1c:a3:e7:90:87:05:cb:9d:04:
52:ad:14:6e:43:a5:55:f7:f4:ae:e5:2d:af:c0:20:6b:cb:ce:
8e:bf:5c:69:80:49:e3:ff:99:8b:b5:9f:b3:60:23:6b:73:6e:
5f:ca:f2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:39 2026 by rpki-client