Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
File: YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft (raw, json)
Hash identifier: Q5k4hAvVhSLGI7PxDz1dYtJ3Y0PcprC63/igcy7wYuk=
Subject key identifier: 00:E9:5E:7A:06:B5:95:BE:27:83:D0:7A:01:10:17:62:45:74:C7:9D
Authority key identifier: 61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
Certificate issuer: /CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Certificate serial: 019CAB343644E7EE79963496D73A30B9B325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
Manifest number: 0199
Signing time: Sun 01 Mar 2026 21:00:51 +0000
Manifest this update: Sun 01 Mar 2026 21:00:51 +0000
Manifest next update: Mon 02 Mar 2026 21:00:51 +0000
Files and hashes: 1: 1-_NirjIbixf3IjujxY08hJ4sR0w.asa (hash: hVFgDzF+0WyJCjBVO7SZls0NW5esHMScirMPVBWG/Wk=)
2: SthetgpXxzE5DDJOcie_LsqpRQs.roa (hash: 1G5wA/BqRdbf365y+2p8DrgYId5s873fPHSYZ3snZ28=)
3: YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl (hash: 8TSDRIq2jIGtU2Snpn4mzSIlXFuVTzLKkMElJQLU0fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:36:44:e7:ee:79:96:34:96:d7:3a:30:b9:b3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Validity
Not Before: Mar 1 21:00:51 2026 GMT
Not After : Mar 2 21:00:51 2026 GMT
Subject: CN=00e95e7a06b595be2783d07a011017624574c79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:a3:45:eb:09:91:1d:36:3f:1b:0f:12:c6:
62:9b:98:0e:8b:bc:86:c5:fe:61:50:c4:b6:17:03:
df:ab:dd:8e:ff:31:87:45:4d:89:74:3a:ff:19:0e:
11:ee:02:67:74:e6:95:aa:48:f7:af:9a:d7:42:f9:
24:f9:d5:9f:f2:86:ed:54:36:30:5e:25:59:0d:88:
83:d9:3f:35:c1:af:00:4f:a0:26:24:75:3f:4d:30:
d3:10:8b:3b:ac:ea:8d:cc:81:c7:37:21:2e:45:bd:
4c:73:95:3a:7c:f6:09:f9:59:8a:18:b0:c1:af:27:
ec:99:17:76:0f:9a:1a:70:37:5e:48:58:da:70:1a:
34:38:38:38:54:4f:e4:63:2d:f8:77:6e:34:90:f1:
2c:e2:8c:86:f8:2a:79:70:5c:51:b3:91:63:05:92:
bb:34:83:7f:69:25:3e:f2:4f:c0:5e:32:0f:7a:8c:
23:66:78:4c:99:8d:96:fc:f1:b6:da:a9:a6:71:83:
f6:8a:b2:20:52:08:0a:ed:f4:82:98:c2:50:46:2a:
d5:18:00:aa:c6:0c:0f:e4:e8:0d:66:20:a6:cc:6b:
b6:e8:c1:a5:d4:a9:e5:98:9b:64:f1:19:68:bd:57:
23:a3:38:b9:91:16:36:18:34:47:f8:c2:27:c1:d5:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E9:5E:7A:06:B5:95:BE:27:83:D0:7A:01:10:17:62:45:74:C7:9D
X509v3 Authority Key Identifier:
keyid:61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3d:61:83:2a:01:3f:77:80:cc:56:c9:df:a5:6b:3c:1e:3a:
6e:f5:41:42:6d:71:1c:0e:51:9c:d6:bb:9a:cd:f7:b8:f0:5a:
4e:54:86:01:ec:4e:00:00:d3:fe:f5:64:a1:4c:96:66:21:3a:
d7:ca:af:b6:32:28:26:de:10:9b:e1:83:ba:9a:0f:31:1f:60:
74:c2:0b:7d:7a:7d:e3:6d:d4:cc:99:71:8d:57:e9:08:57:a0:
90:96:70:2a:57:32:df:d7:8a:c4:d9:82:ff:2b:fa:3b:ec:7a:
d2:17:43:eb:b1:d6:aa:07:50:9e:22:0d:e6:aa:e6:18:8c:ba:
51:d6:f1:b1:4a:80:c7:d4:b4:ba:31:1e:6d:74:2d:25:60:02:
b3:7d:b8:82:6b:52:85:27:88:78:5e:cb:8c:d1:16:51:04:1f:
4e:31:80:f6:c4:cc:ec:48:a7:68:90:a2:c6:1e:4a:f3:72:04:
5e:6d:51:be:21:9c:00:63:4c:07:ad:d6:09:6f:59:8c:d2:f7:
ee:93:68:26:7d:b5:d6:44:40:ad:f0:8f:15:f1:90:f9:67:b3:
b5:05:b6:a3:1b:6f:74:26:86:4b:07:61:fb:e8:7b:6f:4b:e9:
1f:6d:6e:f2:67:4a:bf:2a:a2:91:99:1e:6f:5a:1d:bd:2d:60:
af:7e:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:14:10 2026 by rpki-client