Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
File: YRu24x7uO3Kt57GlkOLmKq9cPrA.mft (raw, json)
Hash identifier: UVJz2tbHhAolMLj6dCvd34jHx7dN3FD9YGCiNeIOjUc=
Subject key identifier: 06:57:B3:0E:16:C9:68:1C:1C:02:AC:B1:5A:9A:BA:39:B2:C0:85:2D
Authority key identifier: 61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
Certificate issuer: /CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Certificate serial: 019CABA25FA5A4AE9470E4BDA9B4F1AD7CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
Manifest number: C7
Signing time: Sun 01 Mar 2026 23:01:11 +0000
Manifest this update: Sun 01 Mar 2026 23:01:11 +0000
Manifest next update: Mon 02 Mar 2026 23:01:11 +0000
Files and hashes: 1: R8jSHJ0RvQZas12_o_Ps91TArZ8.roa (hash: 0fh/B8TN9sEd5MXdklpnp2ieFTklN6jeNTgs0tjEkic=)
2: TzNDKIgnXyebc98shaF_lgOCi6s.roa (hash: xrJNMYFkTQ1dfaAgHt3UvZimA9Jq6mAdGz+xSeudcNA=)
3: YRu24x7uO3Kt57GlkOLmKq9cPrA.crl (hash: 33BLfCBFzcFqp5CfInvzPlsI0r5OCeBNlh3iuRYpRAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5f:a5:a4:ae:94:70:e4:bd:a9:b4:f1:ad:7c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Validity
Not Before: Mar 1 23:01:11 2026 GMT
Not After : Mar 2 23:01:11 2026 GMT
Subject: CN=0657b30e16c9681c1c02acb15a9aba39b2c0852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:58:5b:b3:a7:d1:86:a2:02:00:12:10:c2:
81:d6:42:74:79:0d:7c:bc:98:5f:5b:c1:d7:1f:c7:
b8:96:cf:d4:a2:c8:1e:8d:32:a1:25:cb:fd:3a:c3:
1a:bc:b4:e3:ec:db:b8:5c:c0:bf:43:b3:92:bd:7f:
1b:71:cf:e2:dc:34:bf:bd:dc:49:47:42:12:96:da:
fc:e4:4b:42:1a:14:75:17:de:09:df:0d:2d:4c:dd:
f3:4b:43:1d:44:91:99:15:64:c1:e9:76:fd:7d:b2:
9b:ba:d9:b3:49:62:a5:c3:d4:c3:55:38:27:32:ed:
01:39:84:f2:7f:d3:5f:d0:3e:2d:93:fe:fe:25:28:
0d:83:38:a3:7f:5a:54:85:2f:30:f9:b9:25:9a:52:
0d:db:a2:f0:33:f3:d3:61:59:7c:c6:2b:23:6f:80:
6e:d1:1b:8f:f1:33:2f:95:09:2e:d6:c9:4a:db:83:
45:24:07:82:2e:b0:fe:ae:8d:66:d4:61:41:b0:87:
d9:4b:75:21:55:15:82:e0:c7:9c:06:02:3d:b4:ae:
fa:d1:6a:e7:b5:e6:86:01:77:10:b6:a5:07:b0:10:
d9:6f:45:d1:09:a2:18:9b:e7:f9:a9:6b:5e:9e:17:
85:9b:46:c7:76:83:94:80:dc:f2:f3:d4:43:e1:81:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:57:B3:0E:16:C9:68:1C:1C:02:AC:B1:5A:9A:BA:39:B2:C0:85:2D
X509v3 Authority Key Identifier:
keyid:61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ea:00:74:60:d0:8e:89:60:f3:bd:8c:70:e2:54:44:a6:43:
65:24:9b:d9:46:39:a8:e4:a2:da:d6:74:ea:5f:10:cf:45:5c:
f2:5d:21:73:d0:0d:bb:56:ec:bc:9d:1c:00:95:fc:c7:26:27:
6a:d3:30:47:7e:4a:e3:3a:b8:c6:7e:4b:4e:ab:41:8f:3c:cf:
f3:5d:43:fc:34:00:6b:44:57:c4:30:4a:48:b6:df:9c:d1:a7:
c3:72:d7:5f:3e:bb:67:09:7d:eb:f3:aa:8a:1a:d8:f0:9f:49:
95:78:e8:1c:34:05:3a:a8:0b:a8:bf:bb:be:b7:58:34:18:84:
db:06:a0:18:73:f1:27:28:52:51:d7:0a:fe:4e:bd:4d:80:39:
a0:87:5a:8e:8b:6c:e1:b3:88:dd:84:ae:e6:1e:66:f8:d2:5d:
6d:19:0c:8b:d2:43:51:ad:e9:77:36:56:7b:be:d2:58:ea:bc:
30:ad:f3:f4:0f:d4:34:19:d7:bd:08:12:97:0a:b4:1f:47:b0:
9a:84:d0:92:9e:ba:54:1e:2e:f2:c7:4e:cc:ee:e3:2e:a1:15:
9c:73:9e:f6:10:89:ab:cf:ec:93:3f:a6:46:06:5f:1f:81:4b:
cc:af:70:c6:8c:7d:32:89:67:87:88:39:8c:cd:3e:3d:53:45:
f1:82:bd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:09:42 2026 by rpki-client