Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier: 8VHHmc9Kr9u2EnJWt5Mz/jPekPzsC/nTCwF11Q6pfaA=
Subject key identifier: C6:9B:17:BC:31:CE:A6:DF:1C:00:89:8D:32:11:83:FF:9F:1D:B2:C4
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 019CACB555D5229CEF9DB57CEFA2D28582F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number: 0CF0
Signing time: Mon 02 Mar 2026 04:01:30 +0000
Manifest this update: Mon 02 Mar 2026 04:01:30 +0000
Manifest next update: Tue 03 Mar 2026 04:01:30 +0000
Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: qLxazPJJOGSW6FUAdZrskNF00jgh4ZjkQE/YB/62tTQ=)
2: e2fLwwNnC7_gQ85Q33UfXuK3PBc.roa (hash: GaXv8AkKDgccbaFAmhisldDeR5nblYKbBIpd1n6r6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:55:d5:22:9c:ef:9d:b5:7c:ef:a2:d2:85:82:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Mar 2 04:01:30 2026 GMT
Not After : Mar 3 04:01:30 2026 GMT
Subject: CN=c69b17bc31cea6df1c00898d321183ff9f1db2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:98:dd:83:29:09:59:fc:f1:1b:39:7d:f4:
6f:67:63:43:a0:a7:2a:b9:f9:f5:c1:f9:6d:22:39:
d6:ca:61:47:e5:b0:56:4a:66:7e:55:60:41:49:1a:
a8:b7:aa:4f:33:99:6a:b6:e6:1e:36:63:8a:51:67:
ec:dd:71:00:46:76:ce:16:94:07:c2:b6:84:c3:72:
fd:5d:f4:a1:d9:d0:e8:8c:58:48:85:ec:8e:5a:0e:
f4:25:05:c4:40:0e:46:9e:34:52:9d:60:18:50:24:
e3:bd:e3:c9:5c:9c:e9:48:35:ff:e8:48:e8:47:bd:
c0:fe:5c:75:08:1f:f9:eb:e3:22:7b:6b:85:3c:07:
a7:9b:94:8f:4a:93:66:46:f3:da:5f:3e:03:20:c1:
49:db:54:12:45:a2:6e:95:82:a6:a7:e6:93:47:d8:
98:1a:e5:e5:7c:a5:6a:0c:15:90:b2:8c:f0:4b:e9:
88:a0:72:e9:47:c5:b9:ef:6e:7c:3d:2d:e8:3b:89:
5d:69:49:5f:42:29:eb:cc:e7:51:cc:12:49:c9:05:
53:5d:91:f2:82:80:bf:11:20:ab:57:07:95:a6:70:
1c:5d:61:29:c0:29:f3:c5:ec:5a:a4:ac:aa:b7:21:
5a:43:73:5d:e3:f9:b1:60:33:87:ae:23:ca:77:a5:
3a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9B:17:BC:31:CE:A6:DF:1C:00:89:8D:32:11:83:FF:9F:1D:B2:C4
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:36:e8:de:69:bd:08:f1:79:b8:ef:1c:29:22:12:49:16:12:
67:ad:ee:06:9c:4f:ab:ee:5e:85:ee:2f:64:2f:bb:6f:45:f8:
1e:96:17:fa:3c:9f:97:96:fc:74:42:08:95:6b:c8:0d:0a:c4:
97:d4:03:b6:a0:28:93:a5:19:9f:d4:7e:de:d0:2b:db:d0:e2:
07:9c:f5:67:4a:4a:5d:5e:a5:3e:f0:68:b0:c6:de:39:8c:28:
2a:16:00:44:dc:c4:ea:dd:bb:bb:88:b5:eb:c9:fe:21:65:c1:
35:81:22:f9:f1:da:10:64:12:e7:60:fe:78:ed:6b:bc:ef:e3:
8b:60:ae:08:a5:61:e0:76:48:b5:b9:71:50:54:05:a6:6b:eb:
79:d7:34:3d:87:77:24:a3:d2:55:a8:f0:d9:59:78:eb:21:ee:
7e:1c:9f:01:fe:f8:e7:c2:8d:d2:ad:11:11:5c:15:db:a5:ec:
a8:cd:a5:cd:53:16:f2:55:cf:e0:44:8a:c5:ad:54:aa:66:2f:
d7:6c:3a:28:5b:bd:ed:4a:db:d2:c0:81:fb:b8:fc:fb:78:9e:
ed:0f:35:4b:10:53:80:64:10:04:2e:fc:ee:1e:74:bd:27:36:
34:c0:12:b3:6c:f7:b7:fe:64:22:85:84:b7:6e:03:75:63:5d:
e2:30:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:26 2026 by rpki-client