Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: mhPoFEVuHmKTN4feIMWhzukMYpr5mPJUzBLZ5a/zGG0=
Subject key identifier: B9:5C:B7:8B:15:B8:2F:FC:A6:48:98:D3:0C:D5:B8:DF:A2:97:A4:59
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 019CAB6B41400877E7D53873ECBEA3B6E107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:00:58 +0000
Manifest this update: Sun 01 Mar 2026 22:00:58 +0000
Manifest next update: Mon 02 Mar 2026 22:00:58 +0000
Files and hashes: 1: Nb1S4rIJytNZ9EyG1Fq9oCGchKk.roa (hash: E0krvPCL+AC9YfaXQIlTvkeNOsHIRhUhj8ZYv72osZM=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: givVZsASyi0fwFgcz6YOIY+wWnzCF5X6F7FTGa7HZgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:41:40:08:77:e7:d5:38:73:ec:be:a3:b6:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Mar 1 22:00:58 2026 GMT
Not After : Mar 2 22:00:58 2026 GMT
Subject: CN=b95cb78b15b82ffca64898d30cd5b8dfa297a459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:ae:34:20:48:5f:6f:f4:c7:e5:fa:60:53:
1e:0f:ee:1d:e0:89:f9:56:eb:8c:e8:b7:b1:10:1b:
99:ee:27:07:c1:cd:6b:93:30:f0:d8:bb:ea:0b:e3:
ae:4e:9b:ba:83:de:97:df:2e:c0:39:27:6e:7c:82:
2d:b0:90:55:8c:62:d9:4b:b3:a2:93:74:41:df:25:
67:48:dd:51:23:2d:10:b1:bc:b5:51:2d:99:ec:4b:
62:9c:c6:41:df:78:b6:27:cb:ba:8e:e8:50:a5:4d:
2a:28:31:fe:c0:08:89:eb:50:2f:cb:41:de:f1:9e:
af:10:16:e9:a5:bc:58:b8:38:9d:eb:aa:5a:23:6e:
47:58:b6:87:f4:27:b4:cd:e9:0f:c8:98:69:a4:e9:
ba:6d:0c:f0:09:4d:2b:3b:7c:a4:5d:ba:64:29:84:
9b:b1:6e:a7:4d:19:37:70:79:f6:f3:b9:bd:5c:20:
48:b3:6b:a6:26:c3:60:43:5a:7b:95:df:d0:d0:74:
40:3e:f5:d3:91:1b:9c:f6:c8:74:85:b2:28:ce:d2:
f4:4b:12:07:f4:44:08:f3:3f:10:00:b5:93:34:b3:
1c:be:22:84:36:a8:1b:67:0c:3c:8b:b5:c7:09:1b:
0c:bd:43:f3:e4:65:a6:25:dd:fe:7e:a2:8b:54:ef:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5C:B7:8B:15:B8:2F:FC:A6:48:98:D3:0C:D5:B8:DF:A2:97:A4:59
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7a:da:42:ec:68:f9:ce:25:45:2f:1e:f5:81:af:d2:fc:10:
98:95:54:a0:ed:07:5e:6e:3f:22:f5:92:40:bd:35:f0:a8:c1:
4e:9b:d3:6c:b5:3e:b7:1e:be:19:c3:51:cb:df:d4:5e:3e:6b:
e1:83:4f:39:47:12:51:0d:04:b3:58:a7:6b:b1:a1:e1:5d:88:
5e:33:33:53:ee:9e:8a:75:64:38:d5:15:29:91:41:ee:f2:31:
9e:4e:12:23:ed:47:fa:15:fa:1e:12:a7:6c:f7:52:ee:73:35:
53:9f:21:27:10:aa:bc:f7:18:08:68:8c:18:05:ae:de:ab:cb:
da:d5:b1:b4:99:e2:98:d9:78:b1:3e:07:e7:b8:4b:68:73:17:
2e:d1:b7:32:a1:3b:a8:30:56:e1:ed:62:15:37:79:54:42:f3:
20:0c:a0:d9:06:d8:9e:87:eb:f0:4d:0e:a3:08:c7:ba:38:cd:
15:04:18:30:00:13:c0:1f:90:10:f3:be:8c:b2:01:f6:30:ae:
54:15:1c:a5:fc:99:d5:d1:58:6b:42:b4:bb:68:a5:78:49:09:
f0:48:77:f3:f6:10:78:1e:05:1f:09:00:bf:07:d5:82:b8:49:
1d:af:5f:aa:b9:51:54:d6:76:c1:f0:3a:19:44:0b:fb:34:c7:
d6:65:dc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:16 2026 by rpki-client