Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: 3nNd5iuWnbHUx8QylWaBE7YIMHaoUJanoWR/kwJJw5A=
Subject key identifier: AA:4F:67:86:6E:D2:B0:94:1E:D9:1E:12:48:31:E7:71:7D:EF:41:97
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 019CABD9239414A41C2EA803703A0F0389D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:00 +0000
Manifest this update: Mon 02 Mar 2026 00:01:00 +0000
Manifest next update: Tue 03 Mar 2026 00:01:00 +0000
Files and hashes: 1: UJudbdHaQF50Sph8SS93Ii0CNBg.roa (hash: BhW8Ppudpr7Ja11wBjitKBz/FAThXnQThhUCrlT7gwQ=)
2: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: t28/NN0l8Jk5lF5nbVmWuGkQxN2zkxH0Pfsy+y+mxWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:23:94:14:a4:1c:2e:a8:03:70:3a:0f:03:89:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: Mar 2 00:01:00 2026 GMT
Not After : Mar 3 00:01:00 2026 GMT
Subject: CN=aa4f67866ed2b0941ed91e124831e7717def4197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:1f:98:aa:d8:11:d6:ca:d4:42:c7:04:dd:
97:ab:05:25:a0:06:78:48:7c:26:0f:2b:2e:b4:6b:
5f:07:15:14:71:f1:16:e7:7d:08:31:61:b9:05:cb:
10:e7:f8:29:c1:70:b9:25:37:d9:9c:6e:55:09:e5:
d6:8b:54:ce:94:50:c9:e3:8d:13:b9:5d:b1:75:b9:
67:5b:54:7f:90:12:e7:79:7f:61:d2:aa:24:aa:f3:
75:3b:c5:0c:df:3f:b3:53:58:35:6c:aa:fb:e1:0f:
28:f7:3c:11:7f:48:b8:4c:97:a7:3c:8a:a8:e6:75:
16:6b:00:37:ab:43:af:48:d9:fc:4f:05:38:8d:00:
65:c0:57:ff:bc:a7:a9:c0:8b:ee:76:14:37:79:70:
c8:38:8f:96:63:f6:c8:bf:a1:3f:39:e2:d6:fd:30:
e3:3d:a8:9e:36:23:67:95:20:d7:c9:8b:55:8f:2b:
88:09:ed:d2:96:32:d9:16:9d:98:ee:90:04:1d:15:
af:31:e7:2c:2e:54:d5:11:25:9e:8b:7d:ab:7d:fe:
6a:49:b3:e5:a4:b6:fc:f4:c0:09:12:ea:5b:68:1e:
60:65:20:f1:de:5d:ca:f7:0c:e8:da:6f:1c:4f:b8:
89:91:23:97:18:9a:82:dc:39:5c:3e:5c:a1:28:16:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4F:67:86:6E:D2:B0:94:1E:D9:1E:12:48:31:E7:71:7D:EF:41:97
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8c:69:6d:bf:29:b0:b8:66:7e:cd:5b:e5:55:8a:15:25:9c:
72:5e:76:9a:f2:55:0b:78:1e:13:83:c1:38:b1:eb:e8:40:18:
dc:64:e6:a3:76:ac:05:02:41:49:a5:21:95:27:71:79:e8:34:
ac:12:a4:6f:64:61:50:d1:87:d8:2b:12:fc:f7:4c:a9:ab:15:
dd:97:5e:b0:7d:0e:61:82:27:81:74:c9:47:4e:74:6a:de:ed:
35:47:b9:c7:2f:c6:32:ec:a3:c2:8f:37:49:70:34:e0:8d:c3:
2a:cf:ec:c1:dd:85:1e:be:22:60:95:93:e7:2a:c3:69:79:58:
9e:81:c3:e9:ee:73:93:73:bc:04:2d:3e:d9:38:be:92:fd:cc:
bd:f8:f1:07:23:b0:1c:b5:a3:e0:9f:3e:76:21:2f:43:7a:1c:
d3:95:97:44:bf:0e:ec:eb:52:48:cf:85:45:16:2a:83:4d:fa:
be:8f:ea:e9:17:4b:e4:84:53:0b:f4:e8:ed:1d:d5:97:66:91:
97:17:7b:08:d7:09:b3:ef:92:b3:91:c6:59:2a:3f:d8:3a:7a:
78:28:79:f4:42:01:89:79:93:8c:c0:b0:79:d5:a1:36:4b:06:
ce:4e:17:fa:83:53:dd:90:f4:4d:54:03:9d:b3:07:7f:39:cc:
22:04:25:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:05 2026 by rpki-client