Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: W4qlhahM2IeQc8StfMUL89R088K1Ih94NDgzQkDJe0o=
Subject key identifier: 5B:61:F1:DA:54:46:C5:43:B3:8D:89:D1:6B:48:21:3E:03:7A:5B:B1
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 019CA9EB984D3A655BA8B14DFB54DA77D2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 0561
Signing time: Sun 01 Mar 2026 15:01:55 +0000
Manifest this update: Sun 01 Mar 2026 15:01:55 +0000
Manifest next update: Mon 02 Mar 2026 15:01:55 +0000
Files and hashes: 1: vli7nBMVVsmnP9pgh14ogSpMo5o.roa (hash: vG8+FAZpGpoQ8aVKGYzKfazZEnPs10bdq4+yw4mlzf4=)
2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: e/Cujok/UYfeGQlHnuIqzWIeEnQuiIpikZHxgMboMWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:98:4d:3a:65:5b:a8:b1:4d:fb:54:da:77:d2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Mar 1 15:01:55 2026 GMT
Not After : Mar 2 15:01:55 2026 GMT
Subject: CN=5b61f1da5446c543b38d89d16b48213e037a5bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:c8:41:8d:51:61:b4:3f:50:32:7b:05:ce:
e3:74:3f:e5:2f:1d:a0:45:6b:f3:59:81:cd:ac:6d:
03:a6:6d:ec:72:4e:7d:b9:fe:d8:6e:4c:42:9b:fc:
f7:63:3a:ec:3a:1e:96:3f:9e:6d:aa:24:ea:84:41:
ed:66:63:3f:c8:81:55:4e:1f:31:3d:2e:28:6a:48:
ce:b9:d9:0b:f9:99:76:a0:ce:a5:0c:d4:59:18:0c:
f3:bd:ad:0d:cd:0d:7d:bf:23:f2:fb:ba:8f:ce:9d:
a8:76:9c:e9:74:cc:0f:29:08:8e:c5:df:e9:a8:f6:
09:a1:fc:54:a3:51:5e:0b:88:4c:ff:14:eb:7b:45:
40:94:d8:6e:9f:4c:44:2d:1a:f8:f8:d8:b2:fa:bd:
c9:0c:d4:c3:de:24:2e:2a:09:d1:a8:94:88:d0:7f:
b1:2f:4c:03:b9:58:d5:e3:41:83:b0:65:68:39:a2:
c8:a6:57:47:29:dd:a1:78:d9:c2:bb:c9:fe:d3:07:
af:a9:3c:95:b8:42:cb:29:dc:7f:84:a1:0a:75:ae:
00:e9:10:b7:55:f0:7f:28:49:6e:b5:39:a8:ac:90:
9a:9a:5a:eb:92:73:92:8b:13:10:6e:d9:3f:d1:aa:
a0:ed:5f:34:b4:11:2e:d7:42:5d:72:fe:e1:03:03:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:61:F1:DA:54:46:C5:43:B3:8D:89:D1:6B:48:21:3E:03:7A:5B:B1
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:83:19:c9:7b:39:6a:47:e4:29:56:a4:79:e3:21:f1:e8:3f:
62:06:df:45:02:0b:61:00:02:6a:63:fe:59:67:cf:1a:ea:ad:
cd:57:30:f7:04:45:80:a5:f4:8c:18:5b:8a:87:f4:0c:ca:2b:
1e:4b:d9:68:1a:8d:9d:3a:16:e2:84:c8:f2:14:a4:0b:06:98:
bb:ed:3b:1a:39:b1:24:80:e0:2a:65:2d:35:3d:f9:55:5a:d9:
77:a8:eb:16:19:5c:50:e0:28:7f:ad:29:ab:66:7a:4d:f3:01:
86:2c:51:e3:a5:c8:a0:07:e6:8d:6e:17:d3:23:55:f5:16:47:
7a:3f:60:0c:e9:95:47:78:7b:99:76:7e:d5:e6:ba:61:f6:eb:
e0:63:0c:77:de:3a:73:5f:dd:27:df:a1:d2:b1:fb:28:cb:e1:
e5:50:d2:25:2d:7a:eb:b1:c3:d4:61:18:b5:de:11:f6:12:53:
1d:b0:60:81:0a:d9:27:82:60:e4:c9:cf:15:cc:e6:9d:37:41:
bd:bf:96:fa:f0:0e:79:73:58:c4:47:fc:69:a3:ed:b3:82:cc:
e1:d8:15:c2:68:62:bd:11:1b:bc:8e:2a:70:01:6b:be:76:e2:
b2:42:e6:73:0a:1f:b1:7a:5b:c1:d2:85:7c:86:c6:7c:3d:02:
40:da:1a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:09 2026 by rpki-client