Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: c0lNC4g6Jsl/vQI4LblVf2JZFlPgF1C7Gf9u/nUhks0=
Subject key identifier: 92:11:A8:91:55:4A:79:FC:37:1F:2C:0A:B0:1F:B0:B0:EB:F4:73:CE
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 019CAD22845D0B56540C0A883044B743EC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 130B
Signing time: Mon 02 Mar 2026 06:00:46 +0000
Manifest this update: Mon 02 Mar 2026 06:00:46 +0000
Manifest next update: Tue 03 Mar 2026 06:00:46 +0000
Files and hashes: 1: OVXT6gUHNs92I_TpJokrvNCUI_k.roa (hash: GunbA4sCmSgthfWeCRgymGCKQHjNQ++TdcqNZ9NqpfA=)
2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: IrsnwnYmIPbyyDIE1J7BOAKdJrpDK8NmHWzzmrcls2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:84:5d:0b:56:54:0c:0a:88:30:44:b7:43:ec:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Mar 2 06:00:46 2026 GMT
Not After : Mar 3 06:00:46 2026 GMT
Subject: CN=9211a891554a79fc371f2c0ab01fb0b0ebf473ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:39:1d:3b:8a:83:ab:e3:29:85:36:4d:c9:
cb:b5:4c:97:02:84:55:b6:61:34:f1:d1:cb:f3:92:
cb:9b:7f:27:a8:f6:e6:47:33:d7:64:ae:6a:d6:40:
0f:7b:21:90:08:e8:b5:ad:84:7b:ab:ba:f7:b6:11:
7f:81:a0:a4:7b:0e:cb:f5:85:a6:b3:f7:e0:3f:80:
04:36:ff:d2:66:86:0c:92:56:03:41:1a:44:3d:63:
2c:eb:cf:f5:ac:ca:79:d6:91:8f:8c:55:a9:07:ad:
db:d5:74:96:dc:86:1a:7d:5f:45:47:c4:2c:6f:fd:
b7:87:b8:34:71:7e:c9:2c:70:24:ef:40:48:0a:3a:
1b:ce:51:1b:46:50:f6:65:6c:de:ae:c5:6a:b8:3d:
48:44:73:4f:e5:d0:a8:9b:8f:0d:66:27:ea:14:10:
74:fa:7e:e0:c4:b4:d3:9f:9a:44:c3:33:49:3c:35:
7b:fc:43:53:bf:c5:9d:1f:db:cd:41:55:a4:08:15:
c1:60:21:8a:52:30:ee:ef:6a:82:43:20:b1:d1:1e:
6f:d9:da:d4:7a:3c:cc:8b:9f:7a:84:6f:cc:8c:4c:
f5:f1:2d:3d:ca:2d:ee:c8:88:91:e8:00:56:7c:bc:
10:9f:1e:ae:a3:2f:bd:d2:8a:ef:0f:a5:eb:3d:64:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:11:A8:91:55:4A:79:FC:37:1F:2C:0A:B0:1F:B0:B0:EB:F4:73:CE
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:30:fc:6f:e9:19:e7:69:c7:c0:93:29:96:9b:b5:59:97:ce:
7e:f1:8a:39:75:de:3c:d7:80:8d:09:73:0d:58:e5:37:41:f1:
23:ea:ba:28:11:d0:b8:b5:14:39:ae:37:14:29:ab:24:18:9e:
a5:37:e7:26:89:70:9e:63:45:b9:7f:9c:38:26:e7:17:e4:46:
56:70:d9:cb:7b:28:85:b3:84:35:46:0a:cc:0d:65:c0:03:4a:
c8:55:0e:e1:79:be:1c:0d:a2:df:cd:57:fd:d5:ba:3b:fd:3e:
8d:4a:a5:81:14:f5:99:ec:4c:85:82:64:b0:64:8d:bc:5b:bd:
43:37:88:8b:08:14:55:db:e6:a9:c8:83:05:2d:9d:0f:8f:19:
87:ba:bb:1d:06:7c:d4:71:95:2e:72:8b:3a:42:5b:5b:ae:cc:
3e:be:40:7a:39:68:b3:ca:f5:1f:cd:69:b8:b9:5d:7a:5a:a1:
fa:b1:91:d9:d8:a6:7d:ea:35:c2:09:06:19:35:7f:6b:11:c8:
7b:f3:52:e1:ef:be:61:aa:18:ac:dd:b3:c6:ac:a6:d7:ff:fd:
60:40:c0:b2:8a:3b:c0:ab:34:f6:19:5a:b9:45:8f:f8:58:f3:
77:dc:b5:89:57:bd:ce:5f:74:53:08:03:19:6c:17:13:bd:f9:
28:0d:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:53 2026 by rpki-client