Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: tsNZzwjYozv7t2zJPtJ3xlKQulSAabZWnnWEo0woyWk=
Subject key identifier: 46:CD:43:DB:C3:FD:5E:78:A3:4A:80:8D:66:67:2B:35:C9:3B:9D:7B
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 019CAB346EC2AF1BC2BED9E8C5A7F6792A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:01:06 +0000
Manifest this update: Sun 01 Mar 2026 21:01:06 +0000
Manifest next update: Mon 02 Mar 2026 21:01:06 +0000
Files and hashes: 1: D8kmbrxGH990IEjHOfCChDR_0RI.roa (hash: av49JGDKCD6wMkJgxe4+rUguaf8/22rVV0DlSQeu/3g=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: yVS3S9HXtc5ut3GCJrvblAl0aleEzZPakHacyWlBFvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6e:c2:af:1b:c2:be:d9:e8:c5:a7:f6:79:2a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Mar 1 21:01:06 2026 GMT
Not After : Mar 2 21:01:06 2026 GMT
Subject: CN=46cd43dbc3fd5e78a34a808d66672b35c93b9d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d9:ab:c2:88:52:06:7e:53:e6:c8:e3:81:fb:
fa:a8:c6:a7:99:4f:35:78:4c:e5:a9:14:04:50:18:
87:74:96:c5:01:f4:2e:0c:2f:60:65:07:d6:32:45:
bf:31:44:44:53:13:89:71:73:35:ca:d2:c5:06:19:
94:f2:8d:f7:54:a0:fc:79:11:04:9a:9e:db:1b:dd:
6d:f5:a6:98:27:93:40:ef:a3:3a:98:7f:df:dc:95:
a4:b0:ec:e0:b3:5a:7c:20:25:95:af:c2:07:d4:4e:
60:96:6c:be:5a:16:fb:e2:90:07:a8:bd:e9:e7:a0:
71:70:a8:1b:eb:e8:84:40:e4:81:bd:40:ba:80:66:
ec:b2:4d:60:d7:ff:ad:97:0d:f3:9f:80:0f:28:7b:
ef:18:b1:b3:34:d0:a4:8b:10:7c:0c:3a:ad:51:f2:
32:78:02:88:9e:c0:b2:e4:ea:85:8b:da:1d:ce:99:
66:1b:02:ea:c6:f4:3b:b2:93:0c:ef:b4:fe:3d:f9:
56:80:90:98:b8:9d:db:38:1a:6e:74:11:22:6a:48:
e8:2d:6e:12:a8:f4:82:46:05:be:d1:c1:16:c7:f8:
7e:20:53:87:81:1d:44:bc:bb:2b:c0:9e:6f:ff:ff:
af:c3:16:35:f8:3a:aa:6d:c2:81:f4:94:53:63:9f:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:43:DB:C3:FD:5E:78:A3:4A:80:8D:66:67:2B:35:C9:3B:9D:7B
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0c:d8:8e:62:08:8e:5a:fc:a3:7a:76:98:15:1c:a8:21:57:
d6:f1:61:83:7e:31:72:3f:bc:8d:25:02:71:e1:94:4f:7c:ab:
0a:6c:8f:2b:3b:6a:ce:9b:8d:84:07:e6:04:a9:e1:22:37:17:
39:48:a4:77:dd:1c:6e:4a:e8:cb:3e:54:78:4a:db:2f:c2:96:
67:6d:2b:3a:38:eb:54:c3:53:6c:58:04:04:b9:3a:62:31:16:
e0:fa:74:78:7c:10:0a:12:ab:92:db:b0:5b:0b:cb:4e:da:d4:
6a:43:6f:e3:ed:2f:3a:64:2c:39:ab:67:29:f6:4e:c3:c2:15:
f2:c5:3d:e8:2e:57:48:e4:27:b3:2a:12:36:b5:cc:ff:3e:a1:
7d:60:a1:a3:e3:2c:c5:ad:fc:92:21:e6:bc:0e:b8:87:cb:f2:
25:16:9b:4f:58:d7:85:45:71:65:0f:5e:65:8a:fe:4e:5f:eb:
fc:ed:79:4d:23:c9:ca:35:59:dc:f4:12:d2:df:b6:49:a1:31:
e6:eb:85:5a:b5:cf:03:a0:5f:81:53:26:7f:61:7c:db:59:e6:
15:fd:19:73:40:25:79:90:90:d5:7d:c5:1c:1f:9f:f8:42:24:
04:53:33:3e:f5:66:2f:12:8d:b7:0a:c5:52:77:c4:77:2d:b9:
b3:41:87:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:05 2026 by rpki-client