Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
File: YO9KF7jv9Fugs51HSWVX44j__lI.mft (raw, json)
Hash identifier: PQ57tC+BQEqc8DDT1WbV2xiN0AgTiwrck+VYvUL2HHQ=
Subject key identifier: 48:10:B5:A7:C9:E6:65:05:D5:77:D8:8D:08:06:89:C2:3D:F0:55:CB
Authority key identifier: 60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
Certificate issuer: /CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Certificate serial: 019CACB562BC1C7F7B2C625530BAF5C573FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
Manifest number: 032C
Signing time: Mon 02 Mar 2026 04:01:34 +0000
Manifest this update: Mon 02 Mar 2026 04:01:34 +0000
Manifest next update: Tue 03 Mar 2026 04:01:34 +0000
Files and hashes: 1: YO9KF7jv9Fugs51HSWVX44j__lI.crl (hash: bkqOC0y+j236EgfsJTyLdUtoMPGY35RFhXXJsCuY2pw=)
2: bqQFNJsrG869RK3Nfbwr65mLsd0.roa (hash: lGIgTiJR2g5VC3z+XfnzZ2hEM7gGKI2STx8vdvlyfrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:62:bc:1c:7f:7b:2c:62:55:30:ba:f5:c5:73:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Validity
Not Before: Mar 2 04:01:34 2026 GMT
Not After : Mar 3 04:01:34 2026 GMT
Subject: CN=4810b5a7c9e66505d577d88d080689c23df055cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0d:56:72:62:f8:b7:03:2c:5d:df:35:dd:b8:
4b:46:b7:07:2d:98:fe:fd:80:b1:1e:46:91:34:03:
c5:b9:89:ad:55:50:fa:5c:b2:a3:a1:51:dc:74:11:
63:8d:97:c4:94:e8:12:d4:a8:be:6b:46:a5:2b:87:
68:29:8c:15:d4:c8:9d:34:dc:0c:be:15:4e:66:0a:
5f:62:cc:4c:4b:25:09:ee:fc:49:c0:cf:91:f6:f7:
dd:0b:94:67:66:23:14:9c:c7:be:1c:2d:c1:83:05:
e8:a5:31:bb:44:43:58:96:63:4f:d7:a9:e8:35:e5:
bd:bc:9a:51:cb:92:14:a0:fc:3f:f2:6d:0d:05:e0:
59:b2:a7:92:70:14:2f:a1:2a:40:05:a6:e7:3f:97:
51:a9:f0:7f:b5:46:6c:e9:c3:d4:5c:db:30:3c:5e:
f3:aa:bf:9a:97:4e:38:bb:d6:e9:5d:c1:96:02:bd:
1f:e0:57:72:fa:6c:3a:f5:f1:f2:0c:bd:df:a8:5d:
7b:e3:ed:f2:63:a1:33:16:09:16:a6:51:78:b1:86:
13:cc:a1:bf:12:0f:15:f2:d7:c5:0b:c6:7a:ed:8f:
bf:a0:f1:b0:bc:4d:4c:83:62:3e:f8:37:f7:a0:86:
6b:91:64:d1:d9:f7:fc:f2:0e:74:51:01:9d:2a:9e:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:10:B5:A7:C9:E6:65:05:D5:77:D8:8D:08:06:89:C2:3D:F0:55:CB
X509v3 Authority Key Identifier:
keyid:60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6a:0f:a4:c4:ee:5c:e2:63:ba:30:d1:57:ba:a8:68:95:09:
fc:d5:19:e7:3c:f7:d6:6b:f8:04:0b:86:ad:1d:94:19:d7:78:
0b:2e:61:d9:b6:32:ca:79:09:3f:a2:91:54:32:25:fa:56:74:
b8:26:07:9b:6d:81:4f:9b:27:c3:19:c5:ea:b7:de:f0:90:66:
c8:d2:71:83:d2:a2:25:60:c2:a4:cd:62:e1:7d:28:1c:2d:03:
ee:97:1d:f7:81:10:0d:4c:1a:58:4e:df:d1:86:b7:31:95:c0:
01:44:95:37:07:1b:8f:1c:ed:47:91:44:7a:ce:d1:1b:6f:b3:
80:84:5d:84:02:cc:b9:b9:79:f1:ea:61:f7:67:53:27:45:5d:
80:5c:50:0d:25:9a:7c:bd:62:ab:65:01:83:32:0f:9c:94:4a:
34:d8:fa:43:aa:d9:ed:50:d4:e6:e6:a7:b9:3c:fe:f2:33:b2:
38:3f:ee:ac:16:8c:81:2e:4a:ad:98:7e:b3:cc:2c:ea:d2:c1:
a8:32:51:9c:a7:8b:83:ee:ad:52:a9:42:52:26:84:3e:3a:e9:
ee:e9:bb:73:cb:4c:eb:83:01:a7:4a:51:00:a6:54:fe:86:44:
d2:be:10:b9:c7:a1:96:e2:3a:e1:90:6d:b9:aa:3d:bf:de:58:
4e:e8:f8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:13 2026 by rpki-client