Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
File: YdnzrFCGTRj_Jokzx04qia7GEJ0.mft (raw, json)
Hash identifier: LCMeFrOEK4DNQiAkPBWDy+O1iIr2Y8hO91CveLmgnTg=
Subject key identifier: C4:AD:D6:81:C6:C3:3F:AF:3F:C9:E0:1C:59:F0:3C:AF:98:D5:73:52
Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
Certificate issuer: /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Certificate serial: 019CAF1108030B982EF34DA7897C4A47E758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
Manifest number: 0583
Signing time: Mon 02 Mar 2026 15:00:54 +0000
Manifest this update: Mon 02 Mar 2026 15:00:54 +0000
Manifest next update: Tue 03 Mar 2026 15:00:54 +0000
Files and hashes: 1: 0i_alcfMXBsM8Yz7Pmg1_JjXkOU.roa (hash: MMsMTbsCqDU1LtCGJGBX/vBCIrKWQpXi11BOEfnfMFE=)
2: YdnzrFCGTRj_Jokzx04qia7GEJ0.crl (hash: pVV4R9FBDvv+yVobbQAO3LGBzIy6rQgSEPNZpEV1J84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:08:03:0b:98:2e:f3:4d:a7:89:7c:4a:47:e7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Validity
Not Before: Mar 2 15:00:54 2026 GMT
Not After : Mar 3 15:00:54 2026 GMT
Subject: CN=c4add681c6c33faf3fc9e01c59f03caf98d57352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:8b:06:af:62:fd:e5:4e:f4:17:96:11:a8:
58:f1:cc:81:2c:e0:1d:d0:7a:87:70:9e:38:6f:6e:
10:b2:9b:c5:bc:97:5b:6a:fd:40:35:68:27:e9:a8:
6f:da:c2:f6:4d:09:a0:49:05:30:31:2e:cd:d9:95:
9b:94:86:50:a1:3d:9d:48:b8:40:fd:8f:3d:eb:13:
1d:a5:24:7f:e6:f1:6b:83:2f:86:d0:83:a4:20:cb:
86:d4:34:6f:76:e1:2b:cd:4e:5b:3d:14:76:e7:3a:
df:03:50:c1:1f:fd:fb:f5:89:48:52:fd:76:b0:3f:
7d:0f:c3:20:5a:42:90:10:02:50:35:53:64:f4:8d:
7f:9b:eb:89:f9:2a:16:27:d1:12:89:98:e2:f8:5b:
34:c4:e9:11:62:c2:48:a5:9d:94:e3:ca:8a:e5:43:
76:5f:c6:18:dc:a1:ea:0d:07:08:c8:21:45:2b:99:
08:04:78:34:bd:e2:2e:8a:c4:e4:2c:37:79:15:5f:
be:1a:db:3c:cd:06:16:41:93:37:db:84:68:aa:4e:
0d:04:bc:e8:a6:c5:35:02:06:12:35:f1:e1:9a:3c:
ec:90:88:7c:76:10:13:e3:f4:e0:0c:cf:43:51:3f:
31:16:be:9b:9c:d6:bb:ed:7d:64:12:16:5d:22:3e:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AD:D6:81:C6:C3:3F:AF:3F:C9:E0:1C:59:F0:3C:AF:98:D5:73:52
X509v3 Authority Key Identifier:
keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2e:ef:0d:ff:5b:50:32:54:2b:93:ee:f6:1e:2a:59:a5:fa:
77:64:03:70:73:e4:ef:8c:fc:49:45:45:ca:60:64:0a:8c:d5:
64:c6:c6:c9:80:2e:09:fd:06:d2:6b:b5:f5:69:a5:10:ab:26:
f0:43:3d:a8:9d:b0:e7:23:30:29:45:0f:5c:46:64:68:6e:5d:
dc:00:21:50:f3:0e:52:99:96:43:1a:ca:05:2a:84:1a:b4:93:
94:1c:8c:3a:69:12:e0:90:94:a9:35:73:6f:2c:a7:ef:5d:ec:
5e:6e:36:35:67:68:6e:ee:59:5c:ba:36:27:a3:4b:1a:0a:4d:
4b:b3:35:d7:41:d6:c3:11:0c:bd:39:c9:e1:de:97:bb:69:1e:
52:55:6a:ec:96:cc:af:78:98:dd:45:e1:59:45:62:88:e1:e9:
68:17:29:75:55:bc:74:24:ce:0c:f7:f2:91:1b:b5:40:b1:f9:
d5:82:8c:d4:70:84:73:4b:97:67:9a:2a:54:48:1f:37:83:dd:
f3:97:3d:b5:bc:4b:58:54:c0:df:12:a3:0d:f2:2f:1c:af:51:
57:8c:3e:8d:b6:40:f6:01:d0:1a:65:fb:59:ec:2b:ba:18:06:
f1:52:c9:74:0b:5d:24:af:21:09:bb:3c:be:4f:d5:d6:fa:f1:
c7:72:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:09 2026 by rpki-client