Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier: WvoMb+bAcIc70oSB9wzXaDRKm723CE1Lht4j2fQvp2c=
Subject key identifier: 5F:A8:F0:5C:0A:CE:81:92:4C:3A:44:46:FD:7D:1A:84:1B:4A:3F:E0
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial: 019CAAFD93A8963E5118DB64B43441A322E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:01:10 +0000
Manifest this update: Sun 01 Mar 2026 20:01:10 +0000
Manifest next update: Mon 02 Mar 2026 20:01:10 +0000
Files and hashes: 1: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: wVXm/N/XoKo12lFdSEzcI3uHOpV1jvLk0lbUg7gbg2Y=)
2: gGpmcsWE1eZyNMee1NRlA1nhhvY.roa (hash: /R+1mDGIJPwiUjgMqzEayU7QgZR187J1ACp6m3yLtqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:93:a8:96:3e:51:18:db:64:b4:34:41:a3:22:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Validity
Not Before: Mar 1 20:01:10 2026 GMT
Not After : Mar 2 20:01:10 2026 GMT
Subject: CN=5fa8f05c0ace81924c3a4446fd7d1a841b4a3fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:e7:2e:e1:6f:e2:c5:06:2e:c9:b9:bc:91:
b0:37:21:12:c9:76:44:9a:e2:bd:c8:78:af:ee:fd:
c1:d9:f9:c9:75:25:8c:67:a6:63:d7:79:26:1b:a0:
5b:98:a0:60:24:f7:28:35:f7:b0:fe:02:24:be:3e:
a9:e2:f3:76:36:e0:ea:a5:2b:c1:ac:1f:07:35:83:
14:e9:49:bc:6a:e7:97:90:de:12:96:d6:21:ae:cb:
9e:81:c3:16:65:2f:ce:01:0e:e5:eb:44:40:6b:a5:
92:4f:97:cc:ef:47:96:ef:43:6b:23:81:35:3e:83:
eb:7b:55:ba:30:85:e6:0f:3f:7f:6a:61:ae:74:3c:
57:4b:d2:aa:e4:80:9e:ec:ea:f1:28:f6:fc:51:f0:
21:5d:af:e1:1f:24:0c:f2:b4:b7:f6:93:05:54:98:
76:5c:36:aa:b5:02:30:2f:33:28:0c:bf:bf:66:bf:
8d:25:47:16:be:d8:6a:d5:7f:c9:2d:31:4e:59:d1:
6c:4f:57:c0:79:94:bf:cb:53:d9:42:20:e7:b0:ee:
79:f1:a9:95:4e:f5:d2:c3:04:0b:e7:b5:c4:6e:3d:
d8:58:20:49:0f:38:f4:aa:bf:bf:0f:36:65:cc:e6:
7e:04:3f:48:1b:90:e3:28:69:59:0d:1f:38:18:43:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A8:F0:5C:0A:CE:81:92:4C:3A:44:46:FD:7D:1A:84:1B:4A:3F:E0
X509v3 Authority Key Identifier:
keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d0:2d:08:17:00:bb:d4:e3:ce:38:f3:57:71:a0:10:28:df:
c1:cc:db:18:76:4f:73:3d:48:30:19:b2:29:7b:fd:0a:9c:d0:
e0:b2:a8:9d:bf:8b:dc:8a:95:56:81:44:87:1c:fb:94:a5:cd:
e7:c9:07:d7:be:08:5b:ce:1f:1e:b9:1a:da:fd:ab:36:c4:6e:
89:48:bb:41:69:89:c4:61:4d:5b:5d:d5:85:8f:01:9e:8f:26:
a1:b5:5e:5e:82:6d:1a:d7:69:d8:8a:ab:59:35:7c:db:fc:88:
b0:2d:15:62:f2:6a:0f:34:77:e7:1d:07:a8:b9:40:8c:da:38:
c1:e1:a7:10:75:04:20:db:d9:ad:f8:0a:61:56:5e:28:f9:af:
7b:d7:b1:e8:a6:ae:e5:96:94:ab:ad:ee:19:01:0c:32:bf:fa:
a2:8d:75:d4:89:0a:a3:48:9e:f4:b3:a9:6d:79:63:05:77:ca:
b8:36:70:49:e1:7a:c0:9e:82:3a:33:27:c9:39:e2:70:eb:81:
af:77:ee:23:f3:98:61:59:a0:b0:37:10:67:4c:76:eb:dd:37:
1c:0f:d6:31:10:d2:44:2a:0d:70:d6:98:82:b1:c4:15:7b:4b:
f1:12:98:48:34:1e:dd:d4:4f:aa:9e:bf:22:cc:8b:13:7b:88:
6d:65:27:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:35:18 2026 by rpki-client