Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
File: YNxaADaNiuH7qZVDHwOkExrdipo.mft (raw, json)
Hash identifier: IwBwMRoajMExfmWBRB4YlrqLM8vvT5v8jb3lZqOvGzA=
Subject key identifier: 9A:43:C9:8D:97:20:AD:28:9B:A2:7B:E2:8D:6D:5E:1B:9C:98:A6:5F
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial: 019CAAFD901367DD9FAD29F8D05D6436E417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
Manifest number: 09F2
Signing time: Sun 01 Mar 2026 20:01:10 +0000
Manifest this update: Sun 01 Mar 2026 20:01:10 +0000
Manifest next update: Mon 02 Mar 2026 20:01:10 +0000
Files and hashes: 1: YNxaADaNiuH7qZVDHwOkExrdipo.crl (hash: JjquQ0I2cupq0wtH3MhPR8DG6TOVCIOeN1EnXHzXHeo=)
2: vkhFm3pKUDJNsT0h561aywva_1A.roa (hash: qEY3Sblpt51bVtVlep4x8ewHAAaQFqXMAiyecT6/mqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:90:13:67:dd:9f:ad:29:f8:d0:5d:64:36:e4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Validity
Not Before: Mar 1 20:01:10 2026 GMT
Not After : Mar 2 20:01:10 2026 GMT
Subject: CN=9a43c98d9720ad289ba27be28d6d5e1b9c98a65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:ca:7d:e5:23:36:af:06:44:98:90:f9:d8:
7b:81:9d:80:2f:bc:db:f4:45:57:aa:3f:82:87:20:
23:55:2b:9c:ae:60:c2:07:1f:53:3d:b0:4d:e6:a0:
76:6a:44:82:ab:d0:0e:5b:48:75:ed:b0:09:77:e3:
0c:f3:63:65:4f:38:fa:03:ea:82:3a:8d:28:6e:7b:
22:52:54:6a:44:a8:e7:af:34:28:0c:35:23:bf:8d:
01:ac:62:c8:92:b6:fa:94:9a:2d:d7:48:18:45:24:
a0:c1:21:fd:fa:97:1b:5f:2d:2e:62:42:7c:50:10:
7a:90:06:26:1d:fc:79:6f:da:bb:4d:a8:e1:f5:a6:
05:b7:5e:e3:4c:bc:4b:ad:f9:44:53:5b:af:fb:71:
1e:a1:88:ac:52:15:68:9a:0a:f3:14:bb:1f:f3:90:
ea:b9:ae:fb:21:84:5f:d4:61:2f:ff:01:1a:fe:b7:
bd:76:9a:bc:34:77:c3:a5:63:a8:34:94:b0:c2:5b:
16:c7:6a:c7:ad:7b:2c:33:5e:15:71:34:89:a3:72:
4f:f0:bb:f0:8f:0b:07:da:a8:ce:c3:f2:d1:a9:2f:
98:02:bf:36:28:b3:75:17:84:fd:73:9e:3b:68:29:
e2:2f:48:53:5d:5f:ec:f3:2b:cc:28:b7:a4:0a:75:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:43:C9:8D:97:20:AD:28:9B:A2:7B:E2:8D:6D:5E:1B:9C:98:A6:5F
X509v3 Authority Key Identifier:
keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:62:b8:f0:0e:ee:16:fc:dd:2e:45:bc:09:f2:57:87:7c:71:
b5:02:71:9b:c0:b7:61:e1:82:09:cc:bb:30:d1:6d:37:1a:71:
f7:83:d0:ae:94:fd:d5:bf:15:2e:35:85:10:6a:05:5f:a0:7d:
bb:78:cf:53:67:65:5f:89:bf:dd:d5:b0:61:13:ac:1a:0d:b1:
69:a3:6c:35:c9:b3:8a:04:69:dd:a5:61:80:1d:cf:2b:a2:ae:
6b:87:f8:ae:2d:a0:9c:03:56:54:4a:9f:da:3d:4a:9b:4b:6d:
a2:66:60:f3:a3:9f:a1:fb:98:02:eb:04:dd:8f:6f:ff:84:02:
fd:78:c8:eb:99:9f:77:80:4a:4e:82:1e:00:81:5a:6f:a6:a5:
89:58:76:53:91:20:4c:c2:f4:8f:98:23:64:22:ff:14:53:49:
d2:5a:4d:60:84:15:13:e0:9f:f6:05:7c:64:24:06:16:24:74:
d4:f0:d1:1b:5e:4f:0b:70:23:56:2d:48:1e:2c:89:76:28:ca:
56:4c:9a:ea:48:2f:0b:6a:7c:f8:c7:ad:0b:0c:83:a0:55:19:
cb:4d:13:88:bc:d7:a2:39:59:32:de:9b:86:32:ed:ca:1d:a4:
3f:43:48:49:e2:69:d9:82:a2:4e:4b:2a:6d:7b:14:43:e5:d2:
9b:f2:40:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:44 2026 by rpki-client