Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
File: YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json)
Hash identifier: f7f0kw7v8skwKHhnNaihEEtJXrR6B+iRrpabSO2MYB8=
Subject key identifier: AB:A0:C8:B4:78:76:DB:C3:C2:12:7D:1D:9D:20:0C:A9:BF:56:45:27
Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Certificate serial: 019CAB34AE96C8E8F4D222FF6360CCAC460F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 21:01:22 +0000
Manifest this update: Sun 01 Mar 2026 21:01:22 +0000
Manifest next update: Mon 02 Mar 2026 21:01:22 +0000
Files and hashes: 1: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: S7nQVJl59KzqINme9PowGjyzYQ5R56/c4ynmtaYEE2g=)
2: lGw_YgGDQ_SDhIlzZs4EtJHH-ik.roa (hash: Chowr6YW7ZD6NeZH4t2rIlYB6mz3gu7Q1zTWhZm5/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:ae:96:c8:e8:f4:d2:22:ff:63:60:cc:ac:46:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Validity
Not Before: Mar 1 21:01:22 2026 GMT
Not After : Mar 2 21:01:22 2026 GMT
Subject: CN=aba0c8b47876dbc3c2127d1d9d200ca9bf564527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d5:18:61:5f:ef:f4:12:68:c4:bf:82:c4:f8:
b0:13:16:a4:64:ed:f5:bb:f6:39:17:a1:f7:71:c6:
f8:a6:ab:73:51:7b:39:7c:e8:06:96:fc:e1:3a:b0:
c9:b2:5c:b9:f1:ca:3e:c9:98:fe:d6:98:7e:61:94:
91:5d:10:9f:77:36:c0:df:6c:22:0d:52:2b:e2:68:
bb:69:55:32:b9:21:32:f0:95:89:c9:99:14:b5:c0:
ae:49:9b:b2:87:c6:fa:b4:dc:24:82:92:6b:0f:84:
58:c1:c2:e6:b2:7a:91:eb:a7:b1:8c:d5:bc:7e:64:
33:94:06:6f:42:8a:0d:d3:24:4a:4f:e0:e7:e4:d3:
8a:fc:6f:3d:3c:c4:11:d9:4e:47:db:07:eb:25:d6:
23:2e:d2:fa:56:11:36:09:79:de:01:90:b6:47:33:
2a:c7:9b:33:77:69:d7:1b:5d:a6:0b:44:e2:d3:62:
77:65:77:26:08:f6:20:23:62:76:b4:8c:b5:4d:63:
ae:56:4d:41:10:4a:19:dd:fa:ff:12:b9:77:88:76:
41:21:cf:1e:6e:0e:0b:db:52:82:66:0d:86:6d:60:
07:32:b2:7e:04:55:a9:8e:b6:d1:db:44:3b:85:82:
f9:f4:1d:b3:d3:94:3a:98:17:53:61:ad:e0:91:46:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A0:C8:B4:78:76:DB:C3:C2:12:7D:1D:9D:20:0C:A9:BF:56:45:27
X509v3 Authority Key Identifier:
keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:38:ab:82:7e:97:9d:b4:43:79:42:0b:c8:0b:35:84:57:03:
13:1f:0d:48:58:97:44:25:67:84:e1:fd:7a:63:d7:8a:ce:e2:
c8:03:ed:85:3f:fa:b9:23:db:e9:ae:fc:de:1c:01:f4:69:5a:
17:5e:33:08:c9:15:f9:ce:52:1c:af:c4:cf:5a:4d:ed:e3:44:
42:16:c6:02:de:c2:71:cb:6e:b8:63:5a:97:a4:bd:6e:a3:2c:
da:4d:82:28:4f:48:c2:96:ff:16:94:3e:e6:08:1b:00:32:a1:
f2:40:53:b3:ea:5e:e1:4d:b4:cc:dc:d5:d2:cd:88:21:27:41:
c9:22:3b:9e:db:ec:c3:2b:0c:05:70:1b:d6:52:03:db:b3:3f:
7a:c8:b4:98:6e:d0:9f:da:66:51:61:fe:a9:b6:fa:12:d6:49:
3f:b6:49:73:06:be:d9:1f:60:3c:e7:7d:02:24:6c:8e:85:57:
d2:39:4d:ac:00:9b:62:5c:9c:44:81:9c:19:20:c7:55:c3:5e:
6f:73:57:b2:87:19:58:00:bb:75:0c:0a:4b:94:a7:6b:93:a8:
4d:4c:d3:f0:86:16:2a:e3:30:f9:fb:58:90:22:06:37:c1:dc:
51:31:34:ad:0c:bf:e7:4d:b9:f2:c5:3b:2c:ec:7c:8f:3b:29:
a8:6a:cf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:41 2026 by rpki-client