Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: 333pw3u/TTxdE7jhatLrMcQSUsxdiEGa3X+nGmbS+E4=
Subject key identifier: 4E:DA:D9:72:F4:70:16:3A:BF:17:95:09:83:DE:12:23:43:B3:1B:B5
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 019CABA20A060797F060809A6556F0F5EB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 116D
Signing time: Sun 01 Mar 2026 23:00:49 +0000
Manifest this update: Sun 01 Mar 2026 23:00:49 +0000
Manifest next update: Mon 02 Mar 2026 23:00:49 +0000
Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: 2I+RNwFwGlLHC3+tOVPT16pUTFx7/Db6Tyu2IErgZX0=)
2: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
3: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0a:06:07:97:f0:60:80:9a:65:56:f0:f5:eb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Mar 1 23:00:49 2026 GMT
Not After : Mar 2 23:00:49 2026 GMT
Subject: CN=4edad972f470163abf17950983de122343b31bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:a1:10:95:a2:58:0d:47:8a:ea:46:03:8e:
fa:7b:ed:6c:bd:c9:a4:a2:d2:ec:76:27:28:34:c1:
18:bd:3e:63:07:6a:b4:d9:79:c1:72:f0:b2:c3:e0:
41:e7:a7:9e:6f:13:80:ef:b2:99:b8:5d:0f:62:38:
54:cc:52:74:9d:88:b7:4a:a9:af:f1:c9:b3:98:81:
d5:44:a8:b7:8f:f5:95:0c:22:34:57:b5:8a:1d:28:
11:37:4c:d1:4c:49:66:be:a9:5f:95:f5:69:92:f4:
05:cb:ff:47:e4:82:c4:ad:1d:b1:37:15:4f:10:d6:
a6:0e:40:b2:ec:29:e8:35:f1:60:2d:e6:11:d9:78:
a5:05:ea:e2:fa:90:ab:4e:ef:ed:51:34:f3:1f:af:
cb:08:73:14:b4:c2:7d:82:30:de:3f:b1:f7:20:28:
2d:4d:f5:6e:7f:cb:d4:98:84:e9:35:55:bf:33:f6:
bf:a6:6d:5a:be:1b:de:13:0c:03:56:8b:5a:ed:3e:
a2:a0:51:37:09:ac:55:f5:b1:f2:a7:63:32:a0:6d:
81:74:b0:73:8b:73:c2:6c:5e:b2:cc:c0:cb:b8:0f:
fd:4c:4c:8f:24:c0:c2:03:e3:f8:61:db:34:3b:32:
33:3b:f2:07:a6:91:e9:d7:4d:16:03:3d:ff:32:dc:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DA:D9:72:F4:70:16:3A:BF:17:95:09:83:DE:12:23:43:B3:1B:B5
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e3:ee:34:cf:d4:47:c9:2d:c6:42:3e:d0:32:8f:53:8a:e2:
49:18:4f:0d:d7:a1:b7:1c:d1:57:76:48:c8:2d:f6:de:b8:11:
ba:dc:ca:67:0b:27:00:1a:09:cc:2c:a2:89:50:d0:6b:b5:01:
ba:4b:24:6f:0c:37:77:49:5b:2b:4d:94:6b:d0:9e:92:9b:c1:
04:d5:dd:78:e9:24:14:11:8c:88:e0:b7:3b:20:f9:5b:3a:e9:
e5:24:34:9d:0d:f1:3d:4f:8c:52:0c:14:dc:b2:f4:43:b5:27:
4a:c8:aa:eb:cf:f9:fa:7c:60:f9:5b:a4:0d:f9:7c:2a:62:f5:
d5:73:61:03:25:b3:e4:5d:2f:7f:1f:e0:d4:59:93:99:93:cd:
43:6e:fe:50:98:22:d2:6b:b4:a7:31:80:e1:64:22:28:47:d2:
c0:cf:56:54:ce:f4:c1:95:ab:2d:60:e0:aa:cf:26:69:88:cb:
f2:16:dc:90:ad:a0:01:d5:d3:e1:9a:ee:ff:e7:61:43:af:b0:
36:2b:60:66:68:8e:75:9f:75:63:7d:fe:4f:27:e4:b9:4f:8b:
25:b1:fb:eb:4c:7f:c9:25:48:e1:8b:6c:69:58:8b:2a:a9:4d:
94:95:52:54:a1:8c:2d:b8:10:54:a4:27:1d:c8:05:e5:70:d1:
80:8b:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:32 2026 by rpki-client