Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
File: YC8n-tkkUqJUswoGDtODsTx1jtY.mft (raw, json)
Hash identifier: ulAqzL7X8BrmIVR2v9AXhm2OAY5K2xE+q2Y4s2wA2oM=
Subject key identifier: 66:07:0E:A5:E2:2C:AE:0C:1B:B9:8C:3A:D0:1A:50:83:AB:8E:73:44
Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
Certificate issuer: /CN=602f27fad92452a254b30a060ed383b13c758ed6
Certificate serial: 019CADFE8DBBF34A295413978EBF98FA5EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
Manifest number: 0AAC
Signing time: Mon 02 Mar 2026 10:01:06 +0000
Manifest this update: Mon 02 Mar 2026 10:01:06 +0000
Manifest next update: Tue 03 Mar 2026 10:01:06 +0000
Files and hashes: 1: YC8n-tkkUqJUswoGDtODsTx1jtY.crl (hash: HaqTnvrohlGybbVjR+ohdXKAjKt8xhMONXmdJhKUAKY=)
2: yjdYp8YMAtj2_Dytxy6NEaoV14M.roa (hash: /wldluyAt2xqR07lomlO0CgTxaAUVhzs9ZM3VW1cPGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:8d:bb:f3:4a:29:54:13:97:8e:bf:98:fa:5e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6
Validity
Not Before: Mar 2 10:01:06 2026 GMT
Not After : Mar 3 10:01:06 2026 GMT
Subject: CN=66070ea5e22cae0c1bb98c3ad01a5083ab8e7344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:22:0c:a2:0f:c3:32:07:50:52:a1:3c:50:
f7:ae:23:7a:b2:f8:09:92:71:ee:6e:a5:99:e4:3e:
16:44:a8:2e:e6:03:9a:65:80:ab:9e:70:fd:ce:22:
a7:fa:14:13:ce:81:47:5e:89:47:7d:09:94:9c:22:
d6:21:c5:c8:d8:b9:6a:33:0c:49:e5:1c:e4:38:dd:
8e:de:40:14:c5:e5:5c:af:5b:65:da:9e:a0:15:67:
56:d7:aa:5d:ab:c6:f8:b5:2a:9a:76:24:3a:97:21:
58:16:66:21:f6:6b:24:79:d1:ac:33:12:28:53:8d:
ef:80:a2:8a:d9:8b:05:7a:c3:d9:d0:d9:f3:ab:43:
76:99:24:bb:00:67:8b:6a:70:19:a3:90:4a:02:99:
c1:c2:b1:78:ce:8d:72:c4:fe:f0:3f:65:9d:66:30:
e9:2c:5e:91:4c:51:96:1e:7e:02:24:2a:f4:71:e7:
fa:a5:ad:44:c8:8b:55:ab:75:19:89:fe:c8:26:cd:
5c:40:fd:e2:10:a4:ac:1d:73:22:4b:58:b3:18:fc:
85:15:8c:f3:66:9a:97:47:a3:24:a4:7a:cf:65:bc:
75:a7:03:88:5c:ce:7c:8e:fe:04:86:d0:e6:55:ec:
cd:03:53:0b:c3:35:f6:5a:99:90:4b:e2:b5:55:5a:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:0E:A5:E2:2C:AE:0C:1B:B9:8C:3A:D0:1A:50:83:AB:8E:73:44
X509v3 Authority Key Identifier:
keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:42:97:95:a6:17:b8:58:6f:9b:f7:5c:ae:33:9c:c8:12:14:
a5:8e:b0:7e:42:a9:df:92:e9:b5:85:90:d8:49:98:e6:01:1e:
ab:4c:c8:4d:a7:24:99:26:0c:86:c3:c1:ec:58:f9:27:7a:cb:
7a:34:33:e2:f2:17:11:7c:2d:2b:69:16:d8:92:88:50:b2:a1:
2b:36:ee:74:13:32:b6:0b:1b:23:11:3c:34:d3:53:19:2a:0a:
30:a4:76:32:46:64:71:71:a3:bd:c1:c6:ea:0b:ab:0d:f5:40:
05:e9:a1:9d:43:5b:58:0d:fe:93:b6:72:eb:fb:7c:84:90:58:
5a:f5:ef:89:fe:12:60:43:c9:bd:7d:85:a6:ac:a7:9f:72:e4:
65:6d:52:13:0b:31:77:c2:6a:2f:dd:07:3a:ca:86:d0:99:be:
d7:c6:56:f3:1a:ad:7c:5b:d7:26:ce:6c:bf:6f:d5:76:93:62:
f8:01:ca:f5:ed:b6:42:5b:7c:20:57:c5:c4:d5:7c:e3:ba:10:
60:01:dc:a1:78:dc:57:4e:2a:9f:12:39:b3:46:3c:98:53:e0:
a9:01:a3:ba:4b:b7:3b:30:c3:ce:b0:4e:91:e6:93:cf:a1:95:
f0:a0:29:c6:44:fa:fb:46:80:68:51:82:9c:af:7b:8c:af:c7:
ed:a0:9d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:07 2026 by rpki-client