Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: /syp0qzEvq80EaDAhHZ1ChmLMzT0rmZsvgrqdPruJ94=
Subject key identifier: 98:68:62:28:91:0B:5D:7E:2B:D0:0B:EF:20:F9:26:7C:D5:71:FF:48
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 019CABD9FCEE8207B382C337373BA75735E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 08AD
Signing time: Mon 02 Mar 2026 00:01:55 +0000
Manifest this update: Mon 02 Mar 2026 00:01:55 +0000
Manifest next update: Tue 03 Mar 2026 00:01:55 +0000
Files and hashes: 1: 1-oc31O5yGfJm_mzZWVg8lkL2Wxc.roa (hash: Zj2r9ATg5ynR2EMFecfZew5Um/8F+DW2YUnerFrqrJY=)
2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: 7nBCf1GpLAT+zNE+BlBfiFdfswg3orFVaBP/M6Skp5o=)
3: _3UUxWfdIKjZ94RP_R__5_MA69o.roa (hash: xEub+d4iGHet4J1D7KwTY4kCPRXkdFvIc+V+yAPzmjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:fc:ee:82:07:b3:82:c3:37:37:3b:a7:57:35:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Mar 2 00:01:55 2026 GMT
Not After : Mar 3 00:01:55 2026 GMT
Subject: CN=98686228910b5d7e2bd00bef20f9267cd571ff48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:b3:ad:bb:25:03:e1:a1:24:3c:ee:0e:04:
e9:e2:91:15:e5:a7:0e:d0:1f:d9:f5:9b:1b:97:0b:
39:0f:64:73:6a:bb:1c:5b:fa:ef:90:56:ff:8b:71:
de:04:aa:1d:f7:f4:8b:f0:e4:fe:9b:a2:42:fe:72:
98:7a:6f:43:c7:f9:6d:55:ab:4e:cd:c3:02:83:49:
dd:a5:c8:26:54:3a:f4:69:7f:37:8a:f8:30:35:54:
dc:7b:7d:44:5e:29:9a:ac:ff:be:8f:a0:9f:c7:a0:
a2:07:1d:08:63:51:b3:c8:a4:d7:f8:68:b8:2f:24:
d3:ab:14:d9:c8:3c:89:d7:01:66:3c:4c:71:67:58:
47:60:10:0e:54:9d:00:0c:e0:bb:4c:c8:45:0c:6e:
22:cd:4d:75:9d:17:e5:4c:ba:fb:3d:ed:b6:2c:06:
5a:0c:e4:ec:10:08:1f:74:44:fd:ff:08:02:14:c6:
a4:47:7a:c5:e9:fe:8c:59:29:f9:1a:75:0b:04:81:
1a:f7:10:15:3c:37:b3:8f:ea:8c:12:d6:12:a8:26:
5f:2c:44:40:39:13:19:b2:2a:f0:67:7d:e2:a0:42:
96:f0:9c:d9:ea:9e:44:43:1c:6b:02:d9:66:34:af:
63:21:db:87:28:43:9e:35:87:e2:5d:e9:db:18:3d:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:68:62:28:91:0B:5D:7E:2B:D0:0B:EF:20:F9:26:7C:D5:71:FF:48
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:46:d9:a6:0e:3f:9e:3d:5d:36:cc:17:f7:4f:ef:a4:5f:42:
94:9f:69:49:68:2b:29:48:63:91:e8:f2:5f:02:7e:14:23:de:
1c:9f:52:35:66:e3:3a:fa:cd:b8:02:6e:8b:b9:b4:09:bd:3d:
60:87:e6:2f:3a:b5:3d:19:da:ed:b6:32:c8:2b:f3:87:2a:ca:
76:cb:20:71:63:cc:3d:1f:5c:fb:9d:ec:02:b1:22:0e:43:ad:
4b:aa:39:47:de:a5:bf:4e:b6:4e:e7:d1:8f:2d:2e:b9:5a:65:
c9:07:6b:90:40:68:14:cb:6a:e5:fd:b4:4e:4e:2b:2d:8d:ac:
e6:30:86:98:cb:d5:37:79:7d:6c:b3:b7:32:1d:2c:1a:15:e6:
00:51:cb:2b:ab:50:93:cd:04:e9:7e:cb:66:74:24:19:c2:f9:
d2:92:f6:b4:df:e2:62:04:f2:d5:db:da:cc:ca:c2:fe:d8:aa:
af:f6:35:34:72:09:53:bf:3c:ad:9a:6a:6c:ea:26:60:28:40:
03:c2:a6:af:09:d8:cf:4c:dc:2d:e5:06:d4:0a:2f:64:3d:47:
ca:ad:6a:73:42:3b:41:db:eb:71:0b:18:bc:5d:0f:57:a4:b5:
b1:16:ab:20:2d:b6:26:d5:67:d4:e4:c3:73:54:c6:70:82:45:
32:ab:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:43 2026 by rpki-client