Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
File: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft (raw, json)
Hash identifier: rEi271hYk272eAaJUHfMeUK47fmyt2UsRRjKub5DQ0M=
Subject key identifier: 65:F8:F2:A7:F0:7F:87:D9:25:4C:1B:04:56:6D:0F:35:81:4F:EF:02
Authority key identifier: 62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3
Certificate issuer: /CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
Certificate serial: 019CB023C32550AD905102119D9C4A0A7AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
Manifest number: C4
Signing time: Mon 02 Mar 2026 20:00:59 +0000
Manifest this update: Mon 02 Mar 2026 20:00:59 +0000
Manifest next update: Tue 03 Mar 2026 20:00:59 +0000
Files and hashes: 1: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl (hash: d3rzQ1jP0EjbK4gceVWpvAyZX2ITfNVqAcGFDY+2DWE=)
2: nURomofbDgSrxYM0O1_tcq9RI08.roa (hash: tbGTgdyklPOm5IjmielhkBjtWa6HmczItFnGfm4z+A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:c3:25:50:ad:90:51:02:11:9d:9c:4a:0a:7a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3
Validity
Not Before: Mar 2 20:00:59 2026 GMT
Not After : Mar 3 20:00:59 2026 GMT
Subject: CN=65f8f2a7f07f87d9254c1b04566d0f35814fef02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:c7:51:3e:38:3c:35:fe:51:c2:c6:9a:2b:
c9:ab:02:4b:7a:c5:c4:9c:11:6a:11:31:c4:ee:a1:
9a:9f:65:5a:95:f2:63:f4:dc:45:0d:0b:98:44:bf:
0a:a3:9a:4b:3b:00:8b:39:44:5a:16:13:60:5b:dd:
43:84:5c:02:04:a5:1e:cf:72:f8:41:2e:fd:1b:47:
3f:83:05:a5:fe:db:e5:34:f8:f6:66:bb:89:84:45:
35:78:67:c1:df:da:bd:07:36:6e:9b:77:83:4a:c4:
d3:55:55:f5:eb:d4:11:5a:bf:bf:39:e1:3d:b1:e6:
89:ba:62:a2:82:de:be:5c:48:4e:cf:b8:c4:37:72:
01:f4:e4:18:a0:c2:88:40:da:ee:93:64:4d:72:2a:
b3:6f:8b:fe:d6:5d:27:0a:db:da:81:4e:12:71:3b:
2f:0f:06:25:30:33:bd:13:43:af:f4:85:ac:41:53:
d9:7b:70:42:10:f0:6c:86:f4:99:5c:90:d9:b9:54:
c9:b8:31:9b:29:d5:c6:da:38:7b:13:69:93:48:f0:
a4:82:1b:c7:ef:ca:c3:6c:7b:34:83:45:3f:f3:39:
2f:06:f4:e4:d6:01:bd:ce:0a:04:8a:fa:20:f4:84:
f4:c6:e7:b7:6d:fc:7c:5a:df:81:ae:f1:95:7a:c9:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F8:F2:A7:F0:7F:87:D9:25:4C:1B:04:56:6D:0F:35:81:4F:EF:02
X509v3 Authority Key Identifier:
keyid:62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:51:a2:2b:ca:70:53:a7:eb:11:2f:7e:de:11:83:94:e4:ed:
39:dd:0f:bf:59:74:5f:14:59:53:c9:f5:9e:a9:22:18:df:b7:
9c:89:37:12:c9:1b:b5:fa:92:d3:b6:68:bc:ce:9a:5e:f2:fd:
2a:80:b4:cb:eb:39:18:25:26:f6:15:07:e8:c1:96:8a:9f:85:
3d:42:6c:1f:85:7a:d5:8c:3e:4c:30:7e:a2:a3:42:d8:a7:63:
2d:bf:ba:40:a9:a9:f4:d9:d8:3f:23:07:e6:17:87:3c:3c:fd:
6a:93:33:f9:7a:02:1b:c3:0d:54:a8:5e:65:8b:5f:d5:ed:20:
ae:03:42:c1:55:c8:d7:5d:9b:53:05:8d:99:3b:7a:ab:58:fa:
97:73:7e:27:e3:26:3c:cb:55:d1:06:6d:03:fc:43:58:b9:d4:
13:d5:53:9d:2b:44:b9:94:3e:f8:b3:50:a5:02:58:96:eb:83:
1f:17:68:e6:61:b2:a0:2e:09:bb:18:11:8f:0c:1f:c7:81:c9:
1b:c9:f8:db:ad:eb:5f:9a:62:96:51:34:fe:d7:45:cd:b5:8a:
1a:72:74:e5:69:93:e5:47:4f:73:1f:63:7c:73:c8:05:17:09:
2e:93:12:51:05:63:ba:9a:4c:37:cc:bf:5e:5d:71:b2:f5:e4:
0a:bf:14:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:54:45 2026 by rpki-client