Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier: N7wOGUBTXvYQpw0w0ToGyWExIn7551ttURs911beJVc=
Subject key identifier: EB:E3:FD:2C:E3:F8:63:73:B6:1B:25:C4:F7:AA:61:91:DB:C8:FE:D8
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 019CAA58F4E55D7B6A4740639B9986C64DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 17:01:22 +0000
Manifest this update: Sun 01 Mar 2026 17:01:22 +0000
Manifest next update: Mon 02 Mar 2026 17:01:22 +0000
Files and hashes: 1: RF-tJIO2NICablpWJ0rxXstB-5E.roa (hash: B2eozTRe5cg7SctioXDuhV7y1QMBLlq9hEQ1DOOBwlc=)
2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: B4LR585aJMku9Qb9Aymws4JIiz7X8gHvzD24XdlUnBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f4:e5:5d:7b:6a:47:40:63:9b:99:86:c6:4d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Mar 1 17:01:22 2026 GMT
Not After : Mar 2 17:01:22 2026 GMT
Subject: CN=ebe3fd2ce3f86373b61b25c4f7aa6191dbc8fed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:a8:08:00:7a:fc:d4:07:3f:9c:ef:fc:ce:
9a:2b:b6:9a:e2:b1:d5:b8:7d:8f:dd:1c:43:1d:60:
91:7f:b1:24:e6:f2:86:a9:70:1f:2b:39:6d:b1:e2:
a8:d9:23:ee:e6:2c:19:7c:67:40:c7:56:75:53:c4:
9f:14:67:4e:83:20:b4:dc:a0:7c:2f:53:82:81:21:
89:66:5b:e5:92:2d:a4:0d:5e:c5:ad:30:f4:12:bf:
e4:f3:31:9f:fa:0e:1e:5e:83:db:f0:21:7f:4f:aa:
ff:35:aa:dd:49:12:26:9e:3d:1b:13:2a:01:2e:15:
7e:21:be:a2:af:bb:44:f0:f6:c1:8d:ac:51:cc:20:
94:6e:64:fe:c2:2f:9f:37:58:fa:32:7f:94:90:3e:
e2:39:7b:12:f4:a0:ed:c3:b4:3a:a6:ff:a6:46:da:
9b:76:e4:14:e8:eb:76:c5:96:d9:bc:e2:fb:05:77:
35:fe:62:b1:db:3d:56:c0:43:52:48:9e:24:e1:b5:
95:2d:85:dc:79:fc:40:20:b2:0d:b8:d4:f3:d8:0f:
42:bb:eb:1b:bf:17:7f:22:55:bc:92:ab:ce:61:e2:
b7:6f:07:be:d3:3d:8f:b5:43:26:2f:c7:31:57:41:
76:f6:4e:bc:73:be:01:98:b1:fe:eb:7e:48:63:b1:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E3:FD:2C:E3:F8:63:73:B6:1B:25:C4:F7:AA:61:91:DB:C8:FE:D8
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9b:8c:63:da:a4:3f:91:8e:d3:91:f1:86:81:be:4e:8e:30:
fd:ec:7e:0a:39:45:24:3e:67:4c:30:dc:f6:e7:4b:92:1c:cb:
14:5b:c6:81:ac:96:93:d9:a2:c4:d0:77:ef:2b:94:40:df:04:
e6:5b:de:e2:1f:f4:3a:f5:ad:b8:d7:1a:7b:67:c0:64:71:c0:
b8:3d:27:96:f5:c6:5c:6d:10:b9:a5:fb:3b:92:2c:55:db:87:
fd:4a:bd:4b:03:6f:34:62:a3:93:6c:d2:d0:aa:4b:05:b4:09:
aa:45:06:8e:8e:0d:73:83:19:8c:dc:5a:7a:76:f0:a4:1f:60:
f9:1b:f1:b1:88:bd:c6:4a:bc:97:ae:f1:2d:54:de:c7:83:02:
d1:3a:c1:bf:58:41:0a:40:e0:2c:2d:35:6f:70:dd:f6:9d:23:
0a:3d:45:bf:29:d0:83:82:86:cf:fe:cd:96:93:1d:64:51:32:
f3:0f:09:ed:dc:04:6a:85:cc:02:8c:a7:cd:01:4f:4f:69:ba:
d1:f2:3e:bb:30:32:79:8d:8a:8e:97:af:b6:2b:4a:b3:22:bf:
f4:de:e6:27:04:9b:37:77:93:ee:48:ce:03:1f:8e:56:68:ff:
13:5e:18:80:44:f3:51:3a:3f:1f:89:5b:14:7e:2a:b8:e1:2b:
db:9e:3a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:20 2026 by rpki-client