Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: wMXNk1Efeh2It7JdufN12MbxvZf2ZIwvJbU6kfEpU4A=
Subject key identifier: 99:3A:FA:58:2A:25:A2:49:18:71:89:D1:CC:07:C7:9C:DB:F0:0F:24
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 019CABD9A2EBB802ACA9B9FD24B35D33D1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 02B5
Signing time: Mon 02 Mar 2026 00:01:32 +0000
Manifest this update: Mon 02 Mar 2026 00:01:32 +0000
Manifest next update: Tue 03 Mar 2026 00:01:32 +0000
Files and hashes: 1: IPEVX9NburliCOkL_8My8KZEvxc.roa (hash: vKtzd4qXyz9EWKAKarv5HXYhJ7hA2jvu9rmJAemDTXw=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: JoKyBXVsif+f5ZvAXZKyS666pZRNyVNswTurHFo6I+I=)
3: g3UM-mxo9surPyGX-ua-Jw8Hwy0.roa (hash: rLTMTj/qJ9X8Z52HM7aUZCnlG5iT1wzURKa+BIyHlNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a2:eb:b8:02:ac:a9:b9:fd:24:b3:5d:33:d1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Mar 2 00:01:32 2026 GMT
Not After : Mar 3 00:01:32 2026 GMT
Subject: CN=993afa582a25a249187189d1cc07c79cdbf00f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:16:00:b1:08:d1:d1:11:20:a1:04:38:8f:
8c:c4:93:e6:c7:a1:06:47:cc:27:9e:64:7d:cf:64:
46:4c:3e:46:19:a3:ca:d4:2c:e8:f8:8d:14:69:c2:
20:88:89:69:7d:36:11:f7:44:d5:e0:73:69:2e:27:
08:9a:e6:23:f9:a8:49:7d:00:b7:e5:0f:75:7f:03:
7e:69:9a:05:42:dd:a1:f3:86:29:d0:19:76:28:3d:
b9:e9:b7:e1:92:01:e7:4a:cb:ba:29:68:33:75:29:
78:00:50:e1:d0:0b:9f:0e:74:86:11:cc:d5:ad:16:
dc:69:fb:77:51:27:bb:5e:d4:e4:f1:da:11:83:c1:
56:f6:77:d4:dd:43:ca:a0:32:0c:7e:26:23:51:ea:
8f:9f:9a:01:82:45:e1:d7:e3:46:55:fc:d4:e3:7c:
4a:cf:c2:a2:72:ae:59:d4:32:90:25:30:a8:04:49:
8e:1e:39:dd:9f:eb:ba:a5:32:f5:e9:b2:68:4b:1c:
21:b8:a9:b1:d2:c5:0c:8a:3e:26:09:63:a3:0a:bb:
45:e0:89:94:b4:0c:41:99:00:c6:a7:9d:7a:38:00:
f5:f5:30:30:9f:93:b7:0e:72:66:b7:1c:39:de:4e:
ed:57:3c:a6:69:dc:ed:86:13:7b:89:bf:20:d1:6d:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3A:FA:58:2A:25:A2:49:18:71:89:D1:CC:07:C7:9C:DB:F0:0F:24
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cc:71:b6:c3:ce:6d:cf:3c:f8:ba:99:b2:d5:7c:e0:4f:81:
d4:e5:6c:ec:ca:a2:d4:c2:d8:41:d6:d7:ce:c7:11:03:b0:d3:
02:44:35:8b:1c:93:6a:6a:5f:d5:c2:82:3f:9a:c0:a1:51:93:
0c:0a:69:a9:ba:4a:01:ec:f8:03:55:85:d8:ba:73:fe:9f:4d:
cc:e5:01:1a:3e:ec:b1:6a:0d:bc:0d:4d:58:e2:f1:4f:d4:cb:
9d:3c:33:97:7a:7e:f7:f3:55:dc:57:5e:13:bf:d2:89:93:c7:
64:fc:1a:df:65:50:c3:ba:88:17:6e:08:53:90:5e:a3:6f:bb:
bd:78:bc:07:14:43:bf:da:3c:c5:18:43:f0:ab:c4:ad:6a:46:
62:ca:a8:c0:8b:c3:9c:34:66:20:b2:a7:c4:7a:2c:fe:84:29:
9f:39:54:b1:06:78:50:56:17:68:bc:33:61:8c:90:41:5e:17:
13:ab:40:b8:91:52:d1:fb:c6:10:fd:14:30:cc:f2:4e:9d:f4:
b0:a4:7e:52:35:d5:9f:3f:b4:32:ec:e4:99:a1:ea:ec:16:2e:
4b:05:5c:92:61:66:56:e2:51:15:c1:b4:e1:b3:f4:71:ba:32:
9c:00:ee:0b:05:73:d0:bf:2e:7a:9b:67:95:c1:ea:ce:ab:ef:
c8:bb:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:32 2026 by rpki-client