Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
File: YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json)
Hash identifier: DCwBQfg0Uube3LcPIx+3MRPBxcwVPxGqZYb96sia2YM=
Subject key identifier: 8E:7A:7E:E3:55:42:8E:D5:B1:5F:8F:BD:81:48:B8:C0:29:95:35:C5
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial: 019CAA219B92FD5BC1E71D37522D9DD01782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
Manifest number: 130F
Signing time: Sun 01 Mar 2026 16:00:55 +0000
Manifest this update: Sun 01 Mar 2026 16:00:55 +0000
Manifest next update: Mon 02 Mar 2026 16:00:55 +0000
Files and hashes: 1: Jf2ybRPxCJRBz81M0sPHI9fL5Xc.asa (hash: ccXR+qhmYk9GcwGl/n5URNgWvh69G6GfXIkJnkUXeww=)
2: TdzUQghIehxteP-iZtI9mD6S7yM.roa (hash: JMCW44uz3J0EyEDOpMW3IeWpIRHn5nCzZnwcaDitVew=)
3: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: tZmo30AGWfontL3n+wR1BM58NjUoDVLCMnXEQ5xPIQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:9b:92:fd:5b:c1:e7:1d:37:52:2d:9d:d0:17:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Validity
Not Before: Mar 1 16:00:55 2026 GMT
Not After : Mar 2 16:00:55 2026 GMT
Subject: CN=8e7a7ee355428ed5b15f8fbd8148b8c0299535c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:2c:91:f6:db:75:8c:02:e2:51:b3:ff:21:
1d:de:67:a0:ad:91:43:4b:9a:e4:c4:b4:14:08:1e:
ce:81:38:fe:59:ac:48:71:5d:cb:98:3f:3b:a6:7c:
d9:c1:98:0e:b6:f8:32:1a:5b:e6:50:28:9f:fb:c8:
2e:50:70:a3:79:5d:99:f9:d7:bd:8a:d2:cb:79:26:
78:0d:18:24:e6:52:74:54:f8:7f:38:ea:37:b2:f8:
01:0f:04:bc:e5:67:95:72:f6:87:24:7b:ba:e0:5d:
66:3f:26:b1:a9:81:40:3b:c4:e2:df:1d:34:b9:6a:
94:5f:65:76:83:58:66:84:52:80:42:cd:df:6f:de:
b5:3b:89:f9:e6:33:b6:1c:1d:8a:68:e5:fe:3a:f9:
44:05:ce:d7:8b:aa:bc:97:ab:aa:c7:f7:f6:b4:7e:
38:fa:35:76:26:aa:c4:8c:32:95:1c:41:23:6e:18:
68:89:92:cb:b4:fd:84:71:69:1d:12:7e:1b:13:bd:
92:2f:af:57:46:e5:62:15:6e:31:df:16:31:ae:86:
58:79:cd:21:50:07:0c:f3:f0:2c:89:75:66:7a:ec:
91:a2:6f:df:53:9b:e5:d9:c7:d5:1f:8a:5e:47:85:
31:17:52:fe:af:90:4e:b5:47:26:92:e0:a2:78:b6:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7A:7E:E3:55:42:8E:D5:B1:5F:8F:BD:81:48:B8:C0:29:95:35:C5
X509v3 Authority Key Identifier:
keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a6:8b:3f:f1:07:8e:01:2d:53:9d:e2:45:86:07:7c:20:d4:
33:1c:11:9d:d6:00:fe:e6:12:bc:10:fc:19:51:df:69:1a:90:
5e:50:e9:12:72:56:f8:2a:59:ee:d0:45:ad:cf:23:f6:2a:67:
bc:ba:ab:03:e8:fe:74:97:99:77:c0:1b:e9:64:57:f4:6f:a2:
b0:0d:3f:ce:f8:66:87:d3:66:0c:ed:8e:4b:db:2b:ef:1c:39:
f8:3e:e4:aa:9a:69:fc:da:e4:6a:a2:23:07:7b:a1:79:18:75:
0f:c5:e4:60:b7:54:17:58:a8:dd:8b:8e:95:3a:de:e3:69:3a:
cb:00:54:b7:ac:ee:0b:92:5c:97:59:54:9c:4d:1f:0b:63:c1:
77:93:89:87:68:f6:86:03:27:d2:32:f7:8a:c2:b3:2d:b3:19:
af:e5:d1:81:d3:9f:36:c6:f3:83:78:02:62:98:a9:3a:96:93:
4c:0a:90:bb:b1:a8:6f:71:9a:86:32:84:b7:07:69:e7:ce:61:
fd:0d:f3:b1:ce:6a:18:f4:69:3a:25:38:c7:dc:ec:c9:91:a6:
42:15:01:f2:04:78:25:74:79:d3:c0:cf:8c:cc:30:58:71:a6:
66:bd:00:78:ef:ca:51:56:41:15:30:70:a0:c2:14:c7:a1:8b:
8b:0f:d3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:31 2026 by rpki-client