Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
File: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft (raw, json)
Hash identifier: U6QVQ6IP1kIhdhFmGXbhS0yP07nBJvZaWXaEs19miGA=
Subject key identifier: C7:3B:BE:CF:5B:5F:28:50:70:13:8A:7F:A0:FF:48:D8:E5:9D:6A:6A
Authority key identifier: 61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
Certificate issuer: /CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Certificate serial: 019CACB55FE9DF44F83A333E13C9CD7887DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
Manifest number: 0F6D
Signing time: Mon 02 Mar 2026 04:01:33 +0000
Manifest this update: Mon 02 Mar 2026 04:01:33 +0000
Manifest next update: Tue 03 Mar 2026 04:01:33 +0000
Files and hashes: 1: U9pPpVserKeOyR7cf6mDMG3akbI.roa (hash: hACJJYL/ibjkbFYfmPGmA0g3KxmvcYZIZ/l3HP0kGcc=)
2: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl (hash: B8b17I90pISd+7AHQyECi/T11pbUI8qVWvW951DDisg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:5f:e9:df:44:f8:3a:33:3e:13:c9:cd:78:87:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Validity
Not Before: Mar 2 04:01:33 2026 GMT
Not After : Mar 3 04:01:33 2026 GMT
Subject: CN=c73bbecf5b5f285070138a7fa0ff48d8e59d6a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:27:af:6e:3e:91:37:03:42:ae:ba:1a:cd:74:
5a:e1:26:52:68:e3:21:fa:67:d9:05:c5:6e:68:ff:
c5:16:fc:22:52:75:28:cb:0b:49:44:7b:56:bf:70:
a7:f5:14:62:82:72:7c:3e:96:17:08:84:86:85:68:
97:64:7c:e4:db:18:73:42:5f:db:40:cc:d4:83:d1:
5b:51:f4:b5:a3:d5:2a:29:cd:36:39:5e:b4:83:2d:
07:ea:59:19:0b:4d:fe:82:ec:c8:62:ce:3e:de:b9:
a5:8c:39:5f:1f:c8:ab:26:b2:2d:e9:05:b1:66:02:
ec:5e:41:0c:04:4b:94:21:30:89:f8:f0:de:6c:f7:
64:2e:e2:1e:b7:83:3e:85:14:fe:8e:ac:ab:75:c0:
98:17:ae:2b:fc:17:93:05:cb:22:be:75:de:6e:97:
a8:d9:1d:62:37:cd:4e:fe:ce:c4:7b:71:0b:34:47:
3d:72:da:8e:70:bf:15:83:4f:9d:72:cd:d7:39:56:
af:f3:3c:31:dc:f0:ad:ca:28:34:3b:e1:65:b6:ce:
b4:9d:3e:d5:e8:b3:70:96:f3:74:ed:1e:8b:82:a2:
73:32:76:e8:94:45:96:97:c3:6b:0e:6f:6e:91:8f:
96:5e:e4:f1:9e:e5:bc:fa:08:b0:c6:cf:43:61:d1:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:BE:CF:5B:5F:28:50:70:13:8A:7F:A0:FF:48:D8:E5:9D:6A:6A
X509v3 Authority Key Identifier:
keyid:61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f0:21:bd:11:84:b9:96:be:e5:6d:cf:a9:b6:4e:2e:2b:d4:
a9:94:b2:0a:dc:65:e6:60:f3:a6:8c:54:29:c1:85:f3:40:77:
22:bf:34:f9:17:7d:d6:ff:6f:8b:a7:91:1f:22:48:b2:5c:37:
76:8e:f4:6a:b4:33:77:4e:58:13:70:f1:de:40:8f:63:d1:dc:
ba:b8:b7:d9:c5:5a:7e:70:55:7b:6e:8f:dc:94:a2:ff:b2:4f:
83:42:90:56:87:6b:fb:eb:08:81:ea:e8:79:3a:22:6f:ce:25:
bb:2a:97:3b:af:53:b5:0b:81:c0:b2:f9:63:09:58:0e:f9:87:
b1:f0:f1:1d:59:17:49:03:aa:43:4b:fb:09:a3:d4:f6:5c:0d:
34:e7:e6:ba:32:b5:42:21:94:55:65:37:04:8d:0e:6c:39:ab:
98:ae:82:6e:3b:31:9d:47:df:b9:82:9a:39:b9:51:9e:10:7d:
1c:eb:74:3f:23:f9:7b:32:67:14:52:ad:92:94:35:0b:f8:1a:
12:85:12:c8:49:17:47:1a:f4:11:4f:96:8e:b5:65:91:cf:98:
e4:da:95:23:ef:9f:51:1b:3e:a1:db:46:25:ce:86:22:ed:98:
14:8f:46:c5:35:b4:9f:51:d1:b9:7f:24:58:f7:28:13:43:c3:
e1:77:de:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:17 2026 by rpki-client