Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
File: yPV2sjbj7l0fmZnD27fBbEUfnh8.mft (raw, json)
Hash identifier: GC/DZDodlJ5fjEauwpbjBo2NJ4SKzIWxgeDf4t9Hh5o=
Subject key identifier: 30:57:41:AF:08:D0:82:ED:41:7E:6B:53:5E:AD:40:70:90:04:8C:67
Authority key identifier: C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
Certificate issuer: /CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Certificate serial: 019CA8A125CA14607A31DF9BDBFB686B8631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
Manifest number: 61
Signing time: Sun 01 Mar 2026 09:00:59 +0000
Manifest this update: Sun 01 Mar 2026 09:00:59 +0000
Manifest next update: Mon 02 Mar 2026 09:00:59 +0000
Files and hashes: 1: CP7XAwVQiMz2Q6ounln3ad2WPSs.asa (hash: dHCmJ8L0c4EENwwKULgdmd0i+CmSQXVp+UAKeU6FrFw=)
2: XE1hA9GoSwCCQTzlrJPud8rwosk.roa (hash: YUFGp3JRLfRJAoIp1SDL1Gd34rSXV9G2A1bQuPoViQw=)
3: yPV2sjbj7l0fmZnD27fBbEUfnh8.crl (hash: AGjkt2JOXt2yxf9Ggbdde2BDHz61ETtmlr/KeFoZfeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:25:ca:14:60:7a:31:df:9b:db:fb:68:6b:86:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Validity
Not Before: Mar 1 09:00:59 2026 GMT
Not After : Mar 2 09:00:59 2026 GMT
Subject: CN=305741af08d082ed417e6b535ead407090048c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:3d:73:b5:87:67:7f:dc:98:2e:ae:25:c6:
67:6f:a4:40:ea:67:d2:b0:3f:de:e1:24:96:1d:fa:
fd:48:80:86:c8:a2:89:06:e9:4c:ba:b4:5a:e8:56:
5f:cd:08:42:9f:e8:d9:2e:35:70:06:37:56:00:63:
de:ad:c7:a9:c5:68:1e:65:52:af:57:b6:0f:f8:89:
31:27:b4:6a:22:ff:2a:7f:3b:60:c9:14:25:73:1b:
bf:3f:ec:6f:e5:80:17:ef:72:98:06:6f:73:f7:a5:
c5:4e:25:0a:74:20:07:63:4b:bd:d8:e6:7b:66:0e:
e5:28:33:54:c9:fd:17:d5:83:a7:98:0f:54:c8:5d:
44:6b:b0:e1:84:18:51:08:39:23:00:44:6f:42:e5:
30:fb:09:62:4d:ed:6e:b9:bf:47:14:c3:21:05:01:
1b:f2:b1:f1:93:58:fa:fc:91:d8:6b:86:cf:a2:02:
14:71:d6:f1:0e:df:cb:1c:10:a2:02:83:cb:03:2c:
d3:07:6b:18:b5:80:f0:ee:e9:01:ca:f9:b4:dd:bd:
69:85:1c:cd:69:69:f8:2f:4f:46:fb:10:3f:0b:da:
15:f2:e4:1a:82:ab:3f:14:e9:1c:5f:53:b4:b4:24:
47:19:df:8e:27:ae:10:02:1f:91:22:53:4c:ee:07:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:57:41:AF:08:D0:82:ED:41:7E:6B:53:5E:AD:40:70:90:04:8C:67
X509v3 Authority Key Identifier:
keyid:C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a1:70:a2:5b:af:10:4c:12:f0:63:c8:32:f9:e3:a7:6e:43:
88:88:b4:88:32:5d:a5:0b:b0:7f:14:f8:4f:d3:18:cb:0d:76:
f9:73:38:7d:a5:fb:21:8d:30:78:c2:00:1c:e6:6c:10:77:b1:
ae:25:0b:34:d8:ad:53:83:c4:0a:3e:bd:38:f2:53:06:13:96:
26:1e:18:40:55:c8:17:e8:ce:16:90:5f:ba:9c:93:48:24:ec:
b7:79:08:8d:84:11:89:86:42:91:33:81:0e:80:d8:f2:6c:18:
fc:70:b4:57:30:96:ff:74:bf:e4:70:b6:a1:88:1c:8b:0c:f3:
68:1d:da:f3:b5:57:5a:2c:0d:2b:8e:d9:be:ea:fa:61:3a:83:
dc:c2:90:16:1c:76:17:3a:67:23:a5:25:81:19:02:8d:46:80:
17:0f:53:c4:f2:2a:00:aa:29:38:36:b1:20:26:8b:48:e0:43:
7b:36:71:a0:9e:eb:e1:6d:72:a3:0d:06:ea:32:ca:a4:87:fa:
0b:bb:51:a3:a0:00:bc:c7:9d:19:a8:01:87:b1:ab:92:5e:04:
99:96:cc:08:e3:a4:2f:0a:6d:16:fe:34:bc:82:f8:e8:fe:16:
12:cb:99:66:11:44:2c:89:d7:fe:9d:a4:47:a5:fb:97:6f:dd:
ba:97:e1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:13 2026 by rpki-client