Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File: YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier: PqvKQMMTprUELrjWaCrjUoOM2GdrdJ7w91UsNfHBIEA=
Subject key identifier: 56:8F:1F:80:5E:57:64:C7:10:5B:55:28:AB:AD:74:1C:85:AE:D9:7B
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer: /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial: 019CAD22D4510BF00F13184F9BACDC06A7FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number: 0272
Signing time: Mon 02 Mar 2026 06:01:06 +0000
Manifest this update: Mon 02 Mar 2026 06:01:06 +0000
Manifest next update: Tue 03 Mar 2026 06:01:06 +0000
Files and hashes: 1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: rVpPl3Q6x+cqNmi+PTTCJkdZj2XL5yC3fO7MP62rpAw=)
2: otGdouxrN50G3K6_VfBD4sUjZsk.roa (hash: KaxlTsTV8jPWF44UBDhZygEc33e9Bf3O7Tb4YHBXJsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:d4:51:0b:f0:0f:13:18:4f:9b:ac:dc:06:a7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Validity
Not Before: Mar 2 06:01:06 2026 GMT
Not After : Mar 3 06:01:06 2026 GMT
Subject: CN=568f1f805e5764c7105b5528abad741c85aed97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:b6:29:de:73:6c:b8:f8:dc:b5:cc:74:7d:
bf:2b:9d:cb:aa:34:d4:be:f6:a5:92:f3:ec:41:1c:
da:ef:7c:cb:26:a6:56:22:ac:ca:a9:a7:28:ca:27:
96:62:2f:fd:7e:1a:c2:b7:c4:5b:a8:3c:51:4e:09:
ed:ff:6e:79:75:b1:70:ac:b0:d9:74:de:a1:72:6b:
7d:8d:4f:7c:39:96:c5:15:fd:61:a2:9d:07:26:e0:
53:fb:de:ef:12:8a:99:b3:76:bd:ae:14:52:0b:34:
ad:0e:ea:03:f0:ad:4a:e2:a9:df:c8:8c:bf:97:4b:
7b:c3:62:eb:72:49:30:41:fd:6e:20:f3:d2:68:22:
4c:a5:50:24:b6:03:d1:d3:62:8c:c3:d2:57:d4:1c:
26:42:0d:64:a5:0b:d5:70:5d:e5:c2:56:05:0d:6b:
63:57:6e:97:63:72:f5:8a:45:42:ca:37:ec:27:d7:
fd:dd:27:5e:11:fc:0d:cc:1e:9d:df:de:3c:33:ea:
d4:14:cd:99:cd:28:05:1e:ec:79:e0:af:89:50:89:
69:9b:bb:a1:d2:ad:39:1a:cf:d4:e5:1e:3c:cf:3c:
3a:0b:c7:6f:36:80:e4:4c:86:44:31:99:39:d2:96:
fe:f1:6d:ae:3c:79:96:46:d4:39:16:21:3c:1b:65:
e7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:1F:80:5E:57:64:C7:10:5B:55:28:AB:AD:74:1C:85:AE:D9:7B
X509v3 Authority Key Identifier:
keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a3:d7:42:f6:46:39:5a:6c:ba:19:ff:4f:f0:e1:d1:62:a5:
2a:4d:6a:09:6d:4f:6d:b3:bf:fb:a4:dd:ae:03:9e:b9:de:72:
71:5e:7d:32:0d:ea:4c:84:93:2b:a5:3f:cd:03:81:80:ca:31:
b1:7d:8a:10:3f:5e:38:c9:88:71:8d:b1:69:88:a5:1f:14:be:
40:96:0e:57:a9:c9:fc:15:d5:f6:02:92:84:5b:8f:55:3c:99:
ec:20:f2:b0:64:22:47:1b:7a:d3:c1:b0:a9:02:ef:37:76:49:
3a:4b:ca:a5:4d:aa:6b:ce:af:6d:52:ab:64:a2:51:2b:0c:04:
e0:9a:9c:6a:4e:ef:68:29:76:6f:fb:e4:a0:e7:2d:9c:60:b6:
c8:08:bf:86:4e:d0:ba:f8:51:04:f7:8f:20:06:58:57:42:ec:
c4:b4:c1:74:40:af:3a:4e:22:c8:3e:dc:e0:8c:a0:9c:b5:48:
33:a1:68:81:41:f3:96:77:77:67:cf:36:d6:59:0c:de:51:5e:
11:7c:a2:6f:32:c8:61:08:8f:49:81:2b:5c:bc:80:a2:d0:be:
56:03:5c:62:99:27:4c:86:d1:d1:19:60:6f:d4:34:c1:e4:e8:
a7:c3:d8:f5:f3:65:59:29:fc:f6:03:00:9d:7d:52:47:00:6d:
68:31:ef:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:49 2026 by rpki-client