
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: WHQeGP2wgVkwWuFyATFyaTcquxVWxZOXeQv5gmVstN4=
Subject key identifier: CF:11:56:38:33:DC:60:43:0C:36:EB:5F:A2:87:28:62:AE:6C:01:94
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 019CACEB5D750ADDF8F58FDC35BEA881D7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 05:00:31 +0000
Manifest this update: Mon 02 Mar 2026 05:00:31 +0000
Manifest next update: Tue 03 Mar 2026 05:00:31 +0000
Files and hashes: 1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: 4lI+lWsS0e5Y/qXGIrHoP0eGE0eA0mBnLPM+O/jaGXg=)
2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:5d:75:0a:dd:f8:f5:8f:dc:35:be:a8:81:d7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Mar 2 05:00:31 2026 GMT
Not After : Mar 3 05:00:31 2026 GMT
Subject: CN=cf11563833dc60430c36eb5fa2872862ae6c0194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:ab:22:2c:78:c6:7d:c5:03:b8:dc:a8:21:
81:2a:70:f3:9a:3d:b5:35:ef:31:c7:4f:d1:97:5e:
69:9a:71:03:d6:36:64:60:8a:5f:3f:6f:76:db:4f:
e4:16:2d:33:6f:90:f3:43:84:f8:ad:aa:ae:0f:fa:
28:20:4f:6d:dd:c1:22:ca:eb:65:9d:d9:36:f2:bb:
5a:a2:ab:b1:f1:03:8c:63:5e:af:4b:9c:71:2c:54:
8b:0a:67:8b:88:c4:8d:9f:91:b0:f1:36:02:0d:38:
03:46:48:e0:5e:c4:94:61:fc:65:e7:1a:77:34:50:
40:ac:e0:55:5b:2b:c7:8e:31:ce:65:d1:9d:bc:5d:
af:b2:7d:7e:f2:29:a7:30:ca:c5:4a:45:91:20:3f:
e0:26:d6:33:70:0d:33:25:8b:7a:1a:24:73:a1:4e:
6d:37:60:ac:44:49:f9:e0:5e:49:04:27:cd:22:04:
ab:39:5a:df:f4:00:38:7c:88:03:05:dd:52:02:98:
20:23:58:b7:b0:3e:40:d3:cf:d0:aa:c4:c4:e2:1e:
43:fd:24:8f:ce:74:ad:c4:6e:c4:8e:8d:eb:86:22:
7b:b9:12:92:39:f6:23:f1:9e:b8:c7:1a:1d:e4:a8:
f9:91:8d:09:5e:bc:76:5a:a5:31:a8:95:4a:5c:3c:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:56:38:33:DC:60:43:0C:36:EB:5F:A2:87:28:62:AE:6C:01:94
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c2:ed:9b:14:1d:ea:7d:15:98:74:5c:54:6d:66:af:73:dc:
2e:ba:c3:78:ca:ff:27:00:32:6a:cf:03:1f:40:a4:a1:a3:52:
ed:e0:8a:28:e8:4c:0b:17:af:f4:d1:2e:65:f8:33:6e:8a:e0:
77:25:08:8b:33:db:e3:32:86:68:4a:aa:d1:f8:c1:fc:0a:94:
44:1c:b0:19:76:1e:eb:57:ad:20:ff:b3:35:b4:3e:6c:75:1a:
67:28:57:bf:e9:e3:ef:54:4b:dc:db:5b:71:42:12:c9:41:fb:
cf:ce:0f:c5:0a:c4:c7:3f:d6:c3:09:09:47:1f:ba:98:c6:16:
66:60:8b:65:ab:7f:12:02:79:e9:25:bd:62:2a:e3:0e:5d:98:
76:2f:85:d0:91:7b:58:97:2c:16:fd:c7:74:8b:aa:84:cc:86:
e9:5f:d9:23:92:a9:66:71:96:72:95:90:2c:02:4a:42:5e:e4:
8b:c4:14:4c:4a:e6:16:73:69:30:98:08:22:98:5c:65:d7:06:
d6:e3:db:b4:fe:d6:60:ca:95:3c:37:14:70:14:84:7f:ff:7c:
8c:e2:93:16:94:c5:5f:04:cc:f5:92:82:43:56:06:ee:0d:54:
8b:1d:c6:13:81:38:b2:46:87:57:31:3c:ac:4e:72:ff:d6:f2:
1c:df:7f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:11 2026 by rpki-client