Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
File: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft (raw, json)
Hash identifier: ftR622velrKfkvsmWVMLbRmUfOJrBYm+TGVUttVr6RQ=
Subject key identifier: 45:7F:72:39:93:0F:6E:72:5B:F8:55:31:34:D1:79:5E:9D:CF:EC:AD
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial: 019CA7C56E45F305C19BC6A9A1DECF48F790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
Manifest number: 1863
Signing time: Sun 01 Mar 2026 05:00:59 +0000
Manifest this update: Sun 01 Mar 2026 05:00:59 +0000
Manifest next update: Mon 02 Mar 2026 05:00:59 +0000
Files and hashes: 1: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl (hash: 9f0RKnJ1hLvJxBSg/P1bkda41X3LoDJ9sgFQw7qm4cg=)
2: rbSihGXODQuXmGdRnxTGjpysN_E.roa (hash: kNylbr0jppPNSO+4QDcJI79pqrUPxp86qMzkIb3LnQY=)
3: xSLEYc0lt1omC0_5S_IEJQG-sFo.asa (hash: XvuqcAAROcucGiTTqNKqYAdleeXb8tap+MKCtPl4Y5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:c5:6e:45:f3:05:c1:9b:c6:a9:a1:de:cf:48:f7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Validity
Not Before: Mar 1 05:00:59 2026 GMT
Not After : Mar 2 05:00:59 2026 GMT
Subject: CN=457f7239930f6e725bf8553134d1795e9dcfecad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:18:ed:ad:c7:6b:34:2b:be:64:a9:3f:6f:
d5:c5:6c:ec:6d:c9:6e:a0:7c:57:f5:b5:48:c6:30:
0d:af:10:1f:72:82:cd:39:f7:72:ed:6c:59:a6:52:
ca:12:ae:7d:0d:9d:42:73:9e:e8:2c:d2:bf:08:e3:
89:39:d6:db:96:86:cf:3e:5c:25:90:e8:9e:09:a5:
0f:24:b0:b2:a8:53:80:28:e5:2f:c7:95:1f:aa:33:
3b:0c:e7:ff:82:a1:4e:ba:d8:b2:15:6e:4e:f3:20:
ea:bf:51:71:fa:c6:cb:b4:02:91:54:42:d2:d7:5c:
ea:56:b6:f7:26:24:73:ab:a0:95:df:f2:38:7f:f8:
1a:d1:d8:1e:d6:9f:df:ad:12:72:00:4f:3f:4f:a8:
25:df:58:10:16:0e:dd:a0:0e:4f:7b:82:cc:f8:88:
57:22:72:ad:94:cb:ef:57:02:2a:a4:25:4a:08:35:
47:e2:89:58:60:65:ee:2a:7f:5c:a6:cd:7f:ae:45:
af:7b:e9:5c:42:9a:04:95:4e:10:bd:f9:73:71:99:
8e:90:0e:56:c1:ff:d0:05:df:82:96:93:28:fb:93:
11:f5:31:ab:51:05:cc:06:08:cc:b0:2d:33:43:00:
fe:0a:17:3c:cd:54:4c:aa:c1:06:cb:9a:42:4b:c5:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7F:72:39:93:0F:6E:72:5B:F8:55:31:34:D1:79:5E:9D:CF:EC:AD
X509v3 Authority Key Identifier:
keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3e:cf:90:17:40:1f:ab:a9:d8:19:a2:ea:26:b9:bc:86:48:
7c:b1:4a:1d:3f:bb:82:0c:66:96:6c:37:36:a7:2f:22:b8:06:
38:c0:9d:fa:9e:71:18:30:8a:55:fa:00:b0:5f:9e:cb:63:b7:
6f:24:12:81:0c:3b:cb:77:85:05:55:90:e5:5b:65:0c:44:72:
df:f5:e9:97:2b:51:ef:84:fe:d8:c7:b0:cd:03:ad:0a:6f:cb:
e9:f2:63:37:66:c2:28:c5:9b:15:fa:d9:67:55:fc:45:2f:18:
dc:5c:48:8b:66:53:85:77:0a:07:d2:9b:e4:d9:7b:9f:25:0e:
18:50:32:8d:f7:53:07:21:da:6f:b6:99:27:1a:0d:11:47:3f:
fd:d0:32:89:21:f2:ce:77:ac:48:6a:31:5f:2e:21:92:34:b9:
be:7b:e8:8a:ad:7a:5a:41:52:cd:ae:cf:f2:c1:a5:04:e6:62:
dd:5a:2b:6e:42:39:a8:52:91:76:f4:a9:96:01:e1:16:37:89:
de:33:3d:ea:8d:3c:49:a1:04:cc:e7:bf:0d:49:43:22:a6:49:
79:0a:42:b2:0f:da:24:01:f6:10:3b:9d:71:7d:27:f0:9b:23:
a0:71:36:c0:7f:78:b3:7c:1b:06:2c:09:4a:18:0b:f7:44:ee:
30:f3:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:49:10 2026 by rpki-client