Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier: 1JYqNoC2RPqdJzHM+29dd6cVvSvOUCrPasuXuvD9q+k=
Subject key identifier: 36:9A:8B:38:76:29:8F:E4:2D:75:5D:3C:32:18:2B:CD:51:25:BB:4A
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 019CAA59116724570F9A891DEC70CCE49880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 17:01:29 +0000
Manifest this update: Sun 01 Mar 2026 17:01:29 +0000
Manifest next update: Mon 02 Mar 2026 17:01:29 +0000
Files and hashes: 1: 8Q0Zf_p2yrZ0sNHZrjCdOSKVFH0.roa (hash: yTf6BtJWlrsaOEBrk5U/warCLRXhsKvIf1U8hGm0E84=)
2: Dch7ul5aVnL_m2XEZjfUT9TlzKI.roa (hash: dY0WBC4mPaz5+Exli1KBR1KbgYfTH82golhb7jbBUj0=)
3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: OXBA4ZJT/CRWyNyIcfHU2ysNcl7K638QstAzocXhd7o=)
4: ZcwqCFu-ugccIfT-C61LOqP6Rms.roa (hash: zUv7VdLIHUw6+UwEQbFc7BcKwkxW2AOANbLeMf0i6t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:11:67:24:57:0f:9a:89:1d:ec:70:cc:e4:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Mar 1 17:01:29 2026 GMT
Not After : Mar 2 17:01:29 2026 GMT
Subject: CN=369a8b3876298fe42d755d3c32182bcd5125bb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:63:80:b2:ca:20:01:9b:c1:4a:50:c3:75:
ea:74:a6:68:3e:bd:eb:8b:09:ea:ba:3a:5f:c4:e4:
25:7c:a6:b1:d7:03:ec:22:8d:01:ad:2d:32:28:0c:
37:5c:59:fb:7b:92:1a:1c:80:93:0c:6f:a7:31:a6:
0f:f6:1f:b8:ba:d5:0b:23:8f:4c:f4:85:e6:e0:9a:
27:bb:91:23:3b:2f:3e:8e:da:04:dd:55:f6:70:bc:
5f:1a:75:77:e0:8d:1e:bd:06:67:c1:f0:32:5a:f3:
b8:23:f1:79:35:27:2e:68:cd:6e:95:92:cc:09:bc:
f1:1a:7c:c8:c0:d9:34:d5:5d:1d:1d:9d:41:7d:40:
e9:1a:16:f0:b9:6c:08:d0:20:cc:fa:da:40:d8:ab:
2e:c9:7b:2f:98:35:8c:51:a9:70:8d:1a:5d:1d:04:
4f:c0:7d:93:15:df:0f:ef:e7:64:45:29:54:f3:ac:
50:84:8f:6e:a3:08:d9:d0:a8:30:b8:39:d1:64:ba:
64:ae:cb:d5:a8:e8:2f:a6:50:41:4e:31:9a:c1:ba:
a2:93:03:37:2a:66:39:52:60:15:46:74:02:3c:fd:
25:6b:a9:c1:06:4e:16:dd:35:8b:b2:07:0e:cd:03:
29:1c:49:ad:af:6f:ea:21:04:16:db:d0:31:5a:81:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9A:8B:38:76:29:8F:E4:2D:75:5D:3C:32:18:2B:CD:51:25:BB:4A
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f1:0a:ec:20:a2:61:55:9d:da:aa:df:38:7d:7a:3e:3a:9a:
38:c1:ab:50:0b:52:ce:c6:45:52:89:3e:44:08:54:de:0f:d8:
83:0e:1b:61:b3:03:81:39:9a:7e:f2:ee:61:fa:e2:32:dc:aa:
a5:ce:3d:ab:79:60:b1:5a:d2:8e:e8:4c:fe:e4:78:cb:42:c6:
be:a7:26:f1:0e:dd:b8:bb:76:5b:d2:e6:87:6d:2a:47:fd:a6:
8f:72:47:3c:eb:d7:f0:38:e6:0a:a9:ce:bb:f5:95:92:36:58:
81:97:b7:b8:55:76:34:22:fd:20:3c:18:c5:ce:7a:8e:c6:7f:
30:d5:1b:eb:3c:26:80:67:bb:4c:7c:18:f9:cc:58:f0:a3:ef:
80:f9:2e:d6:c6:6e:da:60:34:f6:d5:29:ac:65:35:b6:60:3c:
3e:a4:84:29:4d:4b:33:aa:3c:77:ba:80:7a:b0:34:d6:a9:ab:
75:c0:8d:8a:c4:75:52:e1:13:c8:7f:2f:fa:9f:63:ed:50:1b:
cd:fb:27:ec:e5:98:a9:86:72:03:7d:da:d5:c3:67:dc:04:df:
35:42:4f:5c:8e:19:8f:7a:25:56:21:22:c0:d7:2a:1e:cb:83:
b5:cf:81:b0:1e:56:53:47:0c:66:ce:d6:45:1c:29:47:ef:3c:
1a:87:da:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:42 2026 by rpki-client