Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File: YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier: Rv+s1E7dBc9aRLk/W1qFFC2DF9rQ0E4Zunh2nwSkfT4=
Subject key identifier: F4:DA:28:9D:A5:AE:21:FC:D0:BC:B2:4B:02:F4:B8:62:19:AC:B4:81
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 019CACEBEAE747234E31BF76FC7C45BA7F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number: 1588
Signing time: Mon 02 Mar 2026 05:01:08 +0000
Manifest this update: Mon 02 Mar 2026 05:01:08 +0000
Manifest next update: Tue 03 Mar 2026 05:01:08 +0000
Files and hashes: 1: 2dNlCcYTwuLwzsnBQLcW5azrUC0.roa (hash: LdCokJaoTg0Ayv8WOg6znK8za4O+cYZSIl7zsI7HgqI=)
2: MMwhBGW76MVn4Dg5EbZwOtE-V9k.roa (hash: hEekmWExVpRk8yl5uIiicxfMKJpS9Azptnbba7Lmq4g=)
3: PJSHdZS95adkLNWcV4sGR1iLw40.roa (hash: 6w7h78uytxCAdBP54QlwzbmDu/qnNv60V+P+VcQ00lk=)
4: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: cAcNHGecZAyZvc1Ixi6lHWlEwxVLbW2vSWhJqVzPhJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ea:e7:47:23:4e:31:bf:76:fc:7c:45:ba:7f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: Mar 2 05:01:08 2026 GMT
Not After : Mar 3 05:01:08 2026 GMT
Subject: CN=f4da289da5ae21fcd0bcb24b02f4b86219acb481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:2c:ed:32:ae:2f:03:ca:28:2f:b6:79:30:
15:81:32:04:fe:c9:ac:13:55:9a:98:b4:fb:72:21:
e1:bd:dd:83:0c:d5:38:5e:85:18:1c:57:cf:48:9b:
35:b3:65:83:3f:88:dd:cb:f7:90:19:28:d6:5b:fa:
7a:9a:16:a3:b7:7c:26:82:76:10:89:ef:71:8b:b3:
29:9f:5e:f0:ea:65:52:39:01:9e:e4:b1:98:07:87:
e7:9b:11:65:a1:0c:86:61:ba:cb:3a:c8:71:78:e8:
38:9e:d5:1d:77:00:68:4c:34:b5:8c:ce:66:d0:46:
54:72:90:79:50:fe:a8:07:0f:34:2c:ec:1c:19:46:
6c:0b:5f:59:8e:90:1e:dd:fe:34:9d:14:c9:a1:13:
61:9d:88:93:0f:08:41:d5:88:78:07:a0:26:86:38:
15:5a:46:26:3e:25:f8:56:dc:c0:80:ab:9c:33:cb:
11:a5:df:94:c4:36:26:ae:21:cf:cd:3e:dd:93:d7:
04:9b:46:83:fb:c2:f4:21:84:2a:64:ee:53:08:9a:
1a:a3:4c:e2:74:8f:fa:dc:d0:f7:88:cf:b4:b6:b3:
d2:d8:fd:91:70:71:e9:57:06:cb:5c:76:72:18:ea:
6e:85:64:b0:5b:8e:e6:60:35:bf:ab:ce:7d:0a:cc:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DA:28:9D:A5:AE:21:FC:D0:BC:B2:4B:02:F4:B8:62:19:AC:B4:81
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6a:fb:ea:ac:24:07:b5:1d:fc:3e:11:c6:4b:e1:cb:55:0a:
5c:9b:0b:68:0f:79:7a:3b:ec:24:a3:29:a2:48:58:aa:a7:5d:
c6:5f:5a:25:4f:97:14:58:b1:84:b9:f6:d0:e1:db:59:d2:50:
bb:2d:ca:b7:f6:03:fc:98:5b:79:66:c9:64:17:49:72:22:14:
cf:03:41:68:9b:22:fc:36:03:b7:25:ce:73:c2:bd:17:c9:a3:
24:32:9d:70:4d:10:eb:ff:39:ed:05:56:6e:34:58:7d:21:83:
55:ec:8f:80:5b:51:c2:92:4c:e3:86:b5:b2:0d:13:37:e3:eb:
fd:e5:89:0a:4e:db:be:5b:21:99:98:be:da:03:b0:d1:e6:a6:
01:98:82:b6:39:bd:14:d1:56:37:41:f0:0d:49:16:54:32:12:
ff:06:4c:4c:a9:a0:f1:e2:c8:0b:23:15:a9:2b:2a:46:4b:91:
64:ec:41:b4:1b:56:6b:5a:82:c9:6a:a3:84:88:ce:4b:6d:69:
cb:19:e5:0f:ce:d8:99:ad:0e:9e:e7:06:0a:6e:5f:18:8f:08:
27:2a:43:54:c7:0b:7c:78:6f:ee:57:78:c9:48:f0:d2:0d:96:
68:d1:ea:d3:8d:91:13:1c:35:97:1c:8a:6a:a5:0b:32:2d:97:
49:ec:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:58 2026 by rpki-client