Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: hpj19/dTlKvKwI4t23qMwyjgRUtC+bFLFQzYmaSgtqI=
Subject key identifier: 81:F2:5D:F9:E7:81:C1:5C:05:89:80:D2:82:CA:2E:A4:E9:44:2F:63
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 019CAA2136AF1760BC09ABEE37A2219A523D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 1197
Signing time: Sun 01 Mar 2026 16:00:29 +0000
Manifest this update: Sun 01 Mar 2026 16:00:29 +0000
Manifest next update: Mon 02 Mar 2026 16:00:29 +0000
Files and hashes: 1: WEResR1vKVF1XFqQZFnpiSVDhdQ.roa (hash: nNBq14HUZikLjgzpH3qRgEC7vVQNRFCy0PpayQuzXVc=)
2: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: NS47Wtg+YzOmcdc42jcsZDcmSK0kUSgk5Lmapze/mq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:36:af:17:60:bc:09:ab:ee:37:a2:21:9a:52:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Mar 1 16:00:29 2026 GMT
Not After : Mar 2 16:00:29 2026 GMT
Subject: CN=81f25df9e781c15c058980d282ca2ea4e9442f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:87:6f:12:7e:60:7a:fc:35:63:46:11:7c:
46:99:fd:fc:d1:e7:48:7b:1b:cb:7b:44:6d:ed:a6:
b0:99:c9:79:c0:00:08:da:ec:9c:2f:23:0c:37:f1:
84:61:0c:6e:1b:ad:02:11:ae:15:98:d0:e5:71:fe:
03:12:03:bf:b4:b2:64:f1:97:fe:30:16:c8:a2:81:
93:ba:7f:4d:97:42:10:ee:bb:c8:5f:b6:5f:42:aa:
ec:16:63:40:40:f6:da:64:69:db:d5:f7:bb:83:04:
f4:7e:40:79:46:95:8c:01:85:7c:85:2e:0b:cc:a5:
d4:88:21:b2:73:26:82:99:36:e2:58:3f:45:d0:f1:
65:5b:3e:f7:6c:16:17:51:ae:30:04:be:8a:cb:69:
b8:b5:7e:bf:2b:26:89:0d:cd:96:e6:ab:33:a7:64:
55:93:63:c0:a8:b6:d9:e3:4f:c4:ee:28:26:c1:e5:
a3:9a:74:71:a8:f6:ce:59:e8:e2:b9:99:8e:ba:5a:
c8:ed:11:f7:6b:48:bc:bd:33:bc:35:47:f6:92:61:
1a:e7:6d:d6:aa:1a:62:0a:a8:44:e0:2b:a9:f7:2b:
44:f0:67:a7:db:ed:d0:2f:15:cc:56:a8:d5:56:c9:
78:23:1b:bd:e1:ef:f3:c7:fe:02:b8:cc:40:d0:e5:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F2:5D:F9:E7:81:C1:5C:05:89:80:D2:82:CA:2E:A4:E9:44:2F:63
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c8:a1:92:ed:27:f6:c1:4c:4e:2a:48:0d:c5:3b:ab:43:a6:
b3:09:6e:0a:0a:36:c0:36:c7:1d:f2:a5:f7:70:93:f6:7b:7b:
1d:47:98:a3:6d:3a:7c:12:a7:0c:30:94:a2:81:fb:6a:c4:0b:
6f:67:da:9b:00:12:ff:7c:c1:bb:0b:74:12:c4:d8:4f:5b:f4:
2f:78:af:eb:0b:57:89:08:2e:35:f9:8d:f6:bc:03:96:9f:6d:
9b:f3:d4:80:b8:2d:35:7c:bf:ff:d3:41:da:58:55:d8:14:1f:
bc:11:1d:cf:de:a4:24:59:22:1f:ef:e1:e0:a6:0a:b3:c8:7a:
6f:bd:02:e7:43:11:23:3d:bf:fa:50:2d:cc:6b:ac:7a:0b:ed:
b9:78:89:1b:60:ca:aa:37:65:8c:07:64:96:79:e9:87:76:4a:
0f:f9:1e:a4:83:61:3e:a6:db:4e:35:38:a0:aa:93:91:25:65:
dc:c5:29:d7:47:b6:66:33:56:7e:20:12:e5:71:de:ae:0c:dd:
cf:b2:28:19:7b:50:55:34:08:b2:fd:1c:73:c1:be:43:ad:87:
bf:18:9b:64:53:14:83:51:6e:eb:fd:3a:78:31:0a:d7:b1:ca:
48:38:30:f2:26:9f:d0:42:9a:0b:5b:e9:81:db:42:91:69:9b:
dc:80:23:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:01 2026 by rpki-client