Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
File: YXvGPTvl98AszEqZ_C8vVSiKLWc.mft (raw, json)
Hash identifier: HNMWiJgBEXIXlRGRDLW3PLdb6ebPCDiYZG2grgsVmJE=
Subject key identifier: 80:84:7E:0C:64:38:B5:5E:B3:7C:A8:D3:49:49:E4:A7:F1:EE:AF:61
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 019CABD93743D23691397F5AD0541D36F249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
Manifest number: 21
Signing time: Mon 02 Mar 2026 00:01:05 +0000
Manifest this update: Mon 02 Mar 2026 00:01:05 +0000
Manifest next update: Tue 03 Mar 2026 00:01:05 +0000
Files and hashes: 1: YXvGPTvl98AszEqZ_C8vVSiKLWc.crl (hash: 9SuUEQrFicx7EoXzIIMY1NVAy8IMMJ6BlASocKGwDXI=)
2: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (hash: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:37:43:d2:36:91:39:7f:5a:d0:54:1d:36:f2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: Mar 2 00:01:05 2026 GMT
Not After : Mar 3 00:01:05 2026 GMT
Subject: CN=80847e0c6438b55eb37ca8d34949e4a7f1eeaf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:1d:c9:d7:be:84:65:01:e5:a2:8b:dc:9b:
31:14:b5:82:11:01:a1:67:6d:30:3c:b8:d5:d4:0d:
df:d0:2c:f4:ed:7e:ec:69:04:2a:a5:2f:bb:98:26:
f8:fb:a5:8d:7e:da:57:c2:15:20:e0:3c:63:5d:b3:
11:29:de:86:08:38:02:9e:e9:ac:c9:21:50:ed:8b:
45:70:bb:ae:f5:2b:38:0b:8a:2d:b1:a9:9f:7a:b3:
86:a4:96:10:e2:29:fd:b3:91:db:32:56:e4:77:9d:
75:83:a2:bd:a0:be:ce:c4:19:c2:78:63:f8:4e:5a:
c8:ff:90:41:6c:20:c2:42:1c:2a:06:fe:e1:82:2a:
36:c1:79:ee:5f:a0:f6:93:6e:4e:d2:5a:34:23:f2:
cf:c4:78:df:09:43:48:0c:b2:64:03:3d:4e:42:62:
22:ff:64:79:0c:57:30:5e:29:2f:13:d6:a7:af:02:
9a:44:a6:e3:e7:56:ab:cf:a9:27:a4:d3:c2:32:d6:
32:77:96:01:fa:b0:de:aa:57:dc:2b:d6:7a:99:4f:
60:56:70:0e:b0:9d:3a:a5:a9:41:1d:1d:d3:93:09:
9e:a0:e0:5f:7b:9e:84:87:df:48:c6:38:75:78:2f:
d4:48:33:a6:c5:eb:3b:ba:b1:0f:2f:a6:0e:b4:5d:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:84:7E:0C:64:38:B5:5E:B3:7C:A8:D3:49:49:E4:A7:F1:EE:AF:61
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:54:1c:66:48:2b:ec:26:98:f6:5b:f8:1d:ea:03:38:96:8c:
de:39:d7:9f:92:cf:da:9c:34:90:d9:67:3e:c3:08:c0:16:bf:
04:48:e0:7e:63:a4:87:9c:84:4f:64:da:96:be:fe:91:24:5a:
2e:0a:e0:f7:e3:e0:ae:3c:11:53:5b:3d:0d:85:bb:b4:e5:20:
40:b1:56:d8:c3:f3:ba:6e:09:06:97:74:01:41:e3:61:6b:1b:
dd:20:e4:f4:97:d5:92:e7:1d:88:1e:4c:1c:1a:e9:14:88:53:
ff:e1:b6:6e:dd:9c:53:50:dd:7c:a7:08:62:10:6d:7f:34:84:
be:aa:94:94:7b:c8:02:fa:25:30:25:a6:dc:9d:9a:74:f1:ad:
34:a7:29:81:97:86:fd:09:1e:27:be:29:d6:b0:aa:91:8b:90:
83:79:36:9f:7e:e8:1c:c6:30:d4:f1:4c:33:f7:49:32:a9:5e:
fd:3c:f4:88:7e:e2:f9:12:95:61:a3:d3:4d:78:51:fb:7c:a8:
a2:9d:95:e9:1d:9e:5d:a6:75:12:45:55:82:9e:d2:8f:81:d3:
ab:4a:31:cd:4c:32:92:35:3e:a4:d5:e6:f6:ca:9a:6b:24:9c:
b0:b3:3b:37:5f:0a:8d:26:44:db:c9:58:81:33:1e:de:6b:7b:
81:b8:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:23 2026 by rpki-client