Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
File: YcXtDe2GJbMrZTMgcinyxGclmEg.mft (raw, json)
Hash identifier: LPazFef5JhBrZXZ2A75Kr/C6x9NnaAQreFxw9pYI4So=
Subject key identifier: 97:D0:16:41:A6:71:41:22:B9:20:92:EA:46:21:87:1B:DD:47:6B:03
Authority key identifier: 61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48
Certificate issuer: /CN=61c5ed0ded8625b32b6533207229f2c467259848
Certificate serial: 019CADFDFF40E416D7BBFF79E0A1B1C5C74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 10:00:30 +0000
Manifest this update: Mon 02 Mar 2026 10:00:30 +0000
Manifest next update: Tue 03 Mar 2026 10:00:30 +0000
Files and hashes: 1: QdSCp7V6SXB6kY3MDm-0dxcIQJY.roa (hash: j90AwqYuVEioYPkOABNDsET8wy4V7UafpGuH2RPQHeg=)
2: YcXtDe2GJbMrZTMgcinyxGclmEg.crl (hash: 09tQaWrpzheOVUii1UqupMRHBQtqy4kwK0J5ooapYT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fd:ff:40:e4:16:d7:bb:ff:79:e0:a1:b1:c5:c7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c5ed0ded8625b32b6533207229f2c467259848
Validity
Not Before: Mar 2 10:00:30 2026 GMT
Not After : Mar 3 10:00:30 2026 GMT
Subject: CN=97d01641a6714122b92092ea4621871bdd476b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:08:6c:ab:d2:52:1e:56:3e:39:7c:61:a7:
f5:85:36:b3:13:35:80:da:0f:ec:cb:e2:1a:f3:1b:
81:d9:0a:4d:7d:fd:bb:ad:77:0b:d0:c6:32:36:17:
01:c3:93:0e:fe:29:9c:b1:ac:67:ef:9a:33:9e:65:
a8:b0:86:e5:bd:f8:a9:6e:13:7b:96:75:1a:e4:1f:
8f:9d:63:af:37:bd:be:24:a9:22:55:dd:19:65:5a:
f6:65:fd:2b:6f:9c:0e:f0:3d:59:3b:7b:af:78:34:
ce:67:26:9d:d6:16:af:3a:77:75:15:b0:f4:5a:21:
07:4d:f7:4b:6e:9a:3e:1f:72:b6:be:0d:27:13:c1:
cc:22:06:8b:fc:ba:bc:ea:48:af:69:12:e2:43:09:
94:42:6a:7c:2f:aa:7a:f7:06:9b:e5:05:60:ba:28:
20:71:64:ad:08:04:3e:ad:97:82:89:eb:b7:09:15:
ad:24:26:a3:91:b3:82:7b:19:cf:48:e5:05:9a:52:
de:59:6c:2c:ec:44:40:b6:a1:03:f6:f2:e5:a5:c2:
24:51:0b:1c:1d:3c:5d:21:5a:1f:da:17:0a:c7:53:
f9:45:35:d9:27:e1:0d:70:9c:45:3b:5b:2b:2c:c5:
b9:0a:5a:3a:a5:c2:f4:0c:1b:ce:64:b9:d3:9f:ad:
60:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D0:16:41:A6:71:41:22:B9:20:92:EA:46:21:87:1B:DD:47:6B:03
X509v3 Authority Key Identifier:
keyid:61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ff:49:12:7a:55:51:05:51:c0:4b:56:2f:e9:06:f3:67:ad:
d5:6d:5f:fc:87:b8:e8:ce:1f:02:ed:9d:24:4b:2f:05:8c:e1:
e8:bd:dc:b6:b1:49:5c:67:b5:ea:4f:2e:2d:40:93:5a:a9:08:
00:f9:b8:40:96:fc:d2:26:83:97:a2:99:77:32:52:3a:a2:dc:
a0:54:d2:e6:78:64:aa:88:68:a8:99:de:e7:7e:48:6e:21:63:
d2:6c:9f:25:1a:ac:67:f4:cd:ca:e4:39:ae:28:87:24:9d:77:
9b:fb:29:59:4f:f7:91:9b:db:54:aa:9a:6a:69:6a:60:b9:aa:
b3:b0:ea:b8:6c:76:d6:e8:16:4a:11:74:62:63:85:e9:47:d7:
5c:a2:1e:38:32:2a:c7:8d:be:30:61:51:ff:7c:38:a6:1f:56:
3f:b6:d9:f7:45:e5:6a:06:a5:4c:e2:92:31:7a:95:96:4e:6c:
0b:f6:3d:fc:00:45:24:2e:a7:85:97:4f:ac:9d:97:96:3c:84:
17:ff:82:54:84:42:79:95:2c:11:0a:b3:ff:89:1d:2c:3f:20:
6b:93:ad:51:2c:bc:fc:dc:a4:fe:6d:d2:a6:64:1d:14:89:ba:
19:e2:05:36:22:e1:7d:f1:f6:66:d2:d2:37:61:b9:f0:91:49:
7a:71:04:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:04 2026 by rpki-client