Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: Mns5r/Ke3sYaMKHQ+Cu27JJUN2E9m4aDqzZOQHIOGIQ=
Subject key identifier: FC:46:65:D3:45:40:6A:2B:2D:54:96:24:B0:ED:23:36:CB:23:AE:2C
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 019CAE6C475991745BAC6413A53FA3D5FA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 05D8
Signing time: Mon 02 Mar 2026 12:00:57 +0000
Manifest this update: Mon 02 Mar 2026 12:00:57 +0000
Manifest next update: Tue 03 Mar 2026 12:00:57 +0000
Files and hashes: 1: 52xBodduqIwcsYy_iwGrav8wNPA.roa (hash: OeV7zUR0TM+VXjljKVbrtHhPSwRtjc0RboLlqaQmwFA=)
2: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: Yns1UBiBjioRudrpkzkAYvYe8wZNkxgZ3MP81C+IV/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:47:59:91:74:5b:ac:64:13:a5:3f:a3:d5:fa:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Mar 2 12:00:57 2026 GMT
Not After : Mar 3 12:00:57 2026 GMT
Subject: CN=fc4665d345406a2b2d549624b0ed2336cb23ae2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:42:03:80:01:8d:c9:85:5f:df:ed:dd:f0:0b:
5e:ec:18:1c:95:19:89:0f:f3:99:9a:a5:e1:87:5c:
a6:60:35:e0:95:d8:c3:97:b3:42:78:fc:08:eb:61:
d5:a4:03:ae:6a:0a:9f:13:c4:8e:34:7a:84:ea:10:
f2:83:77:80:9d:0e:3f:03:a7:aa:2d:78:22:da:8e:
84:58:23:fd:2e:b4:4c:4d:ce:3a:fb:ac:39:b0:77:
b8:e6:87:72:53:08:84:3e:ee:f4:a6:1d:ad:c7:26:
17:8f:99:1a:e1:de:fb:be:d4:dd:5b:be:7d:5f:bb:
0b:14:af:ea:34:13:53:a8:f5:54:a2:f8:9c:ce:3d:
44:e1:18:59:13:4c:8f:be:b0:6b:21:81:c2:96:4c:
cd:73:ce:f9:2d:70:d1:bd:8b:0b:68:d7:5c:35:a2:
a0:67:45:00:ed:10:fe:05:03:94:0c:ac:e1:9b:5c:
11:fa:7c:5b:be:e1:6f:4d:fe:cc:15:5a:d2:99:50:
a3:d0:97:3d:7e:af:8e:f4:8e:88:4f:dc:89:0e:db:
dc:8e:7c:fd:8c:03:8b:f1:ae:c2:c2:eb:56:9d:e8:
cc:9a:db:6a:1b:11:7d:bf:0d:1b:4b:65:7b:95:aa:
cf:96:ea:88:68:c4:ff:97:3a:3d:89:c9:a8:05:36:
2b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:46:65:D3:45:40:6A:2B:2D:54:96:24:B0:ED:23:36:CB:23:AE:2C
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0c:03:50:b6:18:52:3d:18:17:f0:83:f1:4d:c1:b8:5d:13:
ef:72:05:26:8f:30:75:5a:dc:e7:dc:bc:bb:2f:47:58:97:69:
d0:24:cc:8c:1f:0c:06:0a:1f:72:67:5d:1d:4f:b1:ef:54:f6:
f1:3c:29:0d:ac:21:44:6b:b1:e4:35:e3:cd:f2:90:12:d8:a9:
5f:57:0a:5f:57:52:37:0c:a2:bf:68:d9:8c:32:e6:1e:98:d5:
a6:7c:78:ee:ac:99:bd:a3:f6:e4:17:98:50:fb:65:37:c5:56:
26:18:e6:5a:c5:40:68:e9:96:dd:04:ff:0f:39:94:65:00:1b:
8b:69:32:d3:bf:71:5d:cc:a2:89:ee:ee:07:34:57:8b:ae:65:
71:c0:cb:e8:41:40:dc:20:f3:64:40:8c:a7:49:c0:45:a0:fd:
66:5b:34:42:98:23:0b:36:34:ce:3b:6d:59:7a:65:3c:75:d0:
b0:18:5a:67:99:a8:f4:0f:98:c5:d5:e9:08:e3:d3:ea:cc:1a:
ea:a6:d4:e3:65:3c:e4:15:24:cc:c6:13:18:e5:eb:b2:11:76:
e1:ae:9e:e4:33:8c:cd:5d:18:ff:25:37:f7:f4:c3:af:9e:15:
12:43:da:59:68:ba:c9:90:3b:d3:db:a1:e8:c3:eb:26:5b:0b:
69:51:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:47 2026 by rpki-client