Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: DbcV70vTP8+CvWETWt8hR1kWb4j/Jq7xr5qg1+EuYbk=
Subject key identifier: 04:02:FB:A7:B7:04:BC:7E:7F:97:57:06:62:87:C3:A3:6E:45:95:79
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 019CAB33F3F8C7FD9769887A87D6B3D3EAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:34 +0000
Manifest this update: Sun 01 Mar 2026 21:00:34 +0000
Manifest next update: Mon 02 Mar 2026 21:00:34 +0000
Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=)
2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=)
3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: hkPkeqNbHpXHeSy2DDmteSRC1GrVP8FomA2S5G28kfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f3:f8:c7:fd:97:69:88:7a:87:d6:b3:d3:ea:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Mar 1 21:00:34 2026 GMT
Not After : Mar 2 21:00:34 2026 GMT
Subject: CN=0402fba7b704bc7e7f9757066287c3a36e459579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:2b:db:44:48:e5:49:e5:3e:95:65:71:52:
7d:01:32:fe:4b:df:79:94:5a:c8:0b:31:4b:08:33:
22:ce:f5:a2:23:76:2d:dd:29:ee:6c:d1:61:e7:8a:
15:e0:d4:a5:a2:3f:94:58:bd:5a:85:5c:a6:a7:f9:
4e:e1:cd:2d:69:52:f0:15:c8:4c:93:25:2d:a0:6b:
f5:b2:d9:f7:c8:f2:74:44:5c:b8:56:7b:ca:63:d0:
e3:44:f4:0e:8d:e1:4f:9f:41:93:6c:e4:88:4b:a1:
a3:50:6c:32:80:b3:54:34:33:45:e4:90:35:a9:77:
1b:01:e8:2c:ef:e6:d8:2f:a7:9c:d2:f2:19:51:38:
26:92:31:3e:eb:a9:0a:82:a9:98:f9:78:99:24:be:
4b:36:ae:ff:f4:27:07:32:84:75:75:82:f8:5f:fd:
59:12:73:27:88:68:45:a6:92:73:94:14:bb:75:5d:
f8:75:61:df:d3:0e:80:d5:f5:73:f5:c2:96:f4:27:
85:5f:d8:29:ba:77:9e:0b:1f:07:17:f2:8e:98:e4:
d7:fc:d4:16:8b:4e:4b:e4:03:87:3a:e1:ce:dd:98:
9b:c9:f6:f3:cd:7c:f4:2c:83:7a:84:23:c9:ab:a9:
99:9c:0d:b7:00:6f:46:1c:95:c1:de:e0:47:95:2b:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:FB:A7:B7:04:BC:7E:7F:97:57:06:62:87:C3:A3:6E:45:95:79
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:79:6c:fe:5c:b4:c7:11:91:d2:0b:cc:31:94:9d:73:8d:61:
38:62:ad:9c:1e:fa:b6:33:a6:0e:a8:0c:22:c4:4e:0b:0d:48:
03:2d:0b:52:5c:d2:a8:ab:b1:87:29:74:58:55:fb:f5:91:4e:
c3:fc:a7:23:08:c3:37:4d:fb:3b:fa:15:28:0b:74:96:b1:5c:
b4:00:2e:a0:b8:ee:4d:85:7d:f0:5e:96:3b:70:bd:a1:f7:3e:
97:41:72:d7:04:f6:e4:da:d3:1e:c6:a0:a7:7b:19:10:da:65:
74:b9:55:ae:93:90:dc:41:02:02:e9:ac:ef:8f:c6:a4:7e:e6:
c8:9c:f8:a6:ea:d6:c1:ca:c0:86:5f:bc:59:5b:d9:f1:04:24:
a8:2e:73:1f:7a:63:32:e9:c9:74:72:ab:f2:86:3d:0c:c1:90:
b6:e9:c4:38:32:67:02:7a:01:27:ca:da:80:7b:6f:4a:57:e6:
20:e0:b7:47:7e:a9:44:3a:96:5a:8a:80:ef:64:32:25:b9:b7:
7c:48:5b:59:4e:7b:75:8a:d7:bf:40:3c:7e:8a:b8:26:cf:3a:
fa:eb:00:76:82:ed:2f:33:eb:94:3d:63:dd:8e:5b:e6:4f:48:
4a:4f:29:ca:25:3d:f3:a5:c0:6f:fb:db:4f:61:4c:ec:ad:ee:
2f:51:14:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:36 2026 by rpki-client