Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json)
Hash identifier: a0YkHME8VzaNoloIiVa2/pT2UIVVicAGGsE1AEb7jgQ=
Subject key identifier: C7:6D:33:0A:F5:7B:A9:55:21:79:23:33:BB:CC:F0:E5:7F:B7:3A:08
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 019CAB6B354474A2A2A93EDEBE5C54F64A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
Manifest number: 0C0C
Signing time: Sun 01 Mar 2026 22:00:55 +0000
Manifest this update: Sun 01 Mar 2026 22:00:55 +0000
Manifest next update: Mon 02 Mar 2026 22:00:55 +0000
Files and hashes: 1: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: umn+pRcTQJZ1vcz/47GoZxeJN8LsF5ah0Hb3OlREFgk=)
2: a51cXgxKSVntETY6pLsFiKPsOJo.roa (hash: o402E4LpPhqmAP+XyqCG1p/8riR3uOjtyT+/vmwZflU=)
3: nADULd3amnYGR0Tr5B09poIsE28.roa (hash: gJvUmAM3aJOUpRMN3qv/5KjDyZgYcOC2qsvGzHbLhP8=)
4: qfbS_MhHwZ5T9Pkm-e5XKyepAeI.roa (hash: O0H1y3N2wNZcfjYWRzPfGG78Vh6yNgbXWFsd+yyCqLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:35:44:74:a2:a2:a9:3e:de:be:5c:54:f6:4a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Mar 1 22:00:55 2026 GMT
Not After : Mar 2 22:00:55 2026 GMT
Subject: CN=c76d330af57ba95521792333bbccf0e57fb73a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:78:95:6b:a8:bd:49:46:c3:58:e5:d0:23:
bb:bf:66:5e:b2:52:f3:53:d0:20:a0:58:b0:01:cf:
b8:dd:b2:6f:1a:b0:1e:d5:a3:2b:a7:b2:85:85:8d:
9f:f4:c6:ec:ba:93:64:1c:36:7f:a0:41:e9:01:b9:
17:35:38:bd:dc:09:c2:25:ba:eb:a6:a6:ec:96:47:
5b:df:a0:62:01:af:07:6c:1d:b3:a2:5d:c0:25:9d:
78:21:16:ff:f5:1d:e3:28:8b:55:92:0d:58:53:0d:
91:2c:d2:68:a3:c8:0a:9c:34:80:d9:15:3a:6a:2d:
f1:6a:3f:86:6f:0e:36:52:ef:56:86:f8:3e:13:86:
2b:a7:16:fe:6c:02:65:35:c7:a7:68:35:1d:7b:b9:
00:a0:6f:a2:9c:5e:b8:b9:3f:68:55:f4:2c:e3:07:
43:87:35:91:9c:42:3d:c8:19:ec:68:17:e2:26:8e:
93:e8:a2:33:6b:a9:57:08:7d:f0:f9:0d:56:be:5b:
15:2c:c2:28:7e:ac:c2:b0:2d:ec:3b:c1:12:c4:9a:
99:8c:e9:4c:00:29:f9:8a:e2:6c:89:0e:1d:82:55:
f4:d2:33:9d:0e:14:78:c0:4c:7d:0a:2f:be:88:b1:
32:00:fe:cb:bc:82:a5:6c:3c:34:35:06:ae:5c:a9:
51:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6D:33:0A:F5:7B:A9:55:21:79:23:33:BB:CC:F0:E5:7F:B7:3A:08
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0a:28:be:c8:fd:24:a5:a5:ba:12:31:83:f0:c5:43:be:ce:
68:01:9a:67:8b:e7:ef:7d:d5:fc:f6:4a:06:17:b5:75:b7:62:
28:af:47:36:90:b0:c1:78:19:6e:9e:e0:c1:b5:d5:35:00:47:
0a:31:40:65:a5:24:22:12:f2:68:e0:1b:7e:e9:49:0e:15:eb:
32:b0:d7:38:26:7a:3a:f3:a2:fc:4a:45:7a:d0:47:b6:6a:1e:
b8:21:75:e1:93:9f:8e:5c:9c:75:bd:9f:27:80:31:61:42:a4:
12:7f:dc:da:16:d0:45:8d:64:9e:5d:68:f2:d4:61:90:81:10:
b8:e4:1e:56:37:b5:bc:cf:10:dc:1e:b5:98:49:04:f3:6b:87:
ec:5e:fd:1c:29:54:f4:9b:02:41:a4:f5:54:a9:9c:ad:cb:58:
21:05:cd:30:75:3c:fd:f9:b3:c3:cd:92:5a:fd:a7:c6:b6:a5:
22:6e:dd:66:66:90:57:37:ad:4d:4d:a2:8c:17:e5:39:97:a2:
07:40:08:76:90:e8:16:da:bd:58:35:d4:06:85:b3:ac:89:81:
0a:6f:aa:b5:9c:0d:e3:5c:f5:93:4b:86:ee:1b:78:e3:c7:3f:
3e:62:23:56:b4:c8:e9:7c:40:a1:45:36:89:7b:0f:be:78:d9:
eb:70:86:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:57 2026 by rpki-client