Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: Fadcb544ktuSdCHcgCh8oNGRuFi5xAmNDkElc0kLrhU=
Subject key identifier: F8:74:0D:C6:9A:6F:32:C9:AB:66:83:05:B4:57:20:EE:27:26:A7:1A
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 019CABD96525AC0459C319135723465B7EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 10D0
Signing time: Mon 02 Mar 2026 00:01:16 +0000
Manifest this update: Mon 02 Mar 2026 00:01:16 +0000
Manifest next update: Tue 03 Mar 2026 00:01:16 +0000
Files and hashes: 1: JqbX_PTUjq28Lqi1j_knCVS0A90.roa (hash: iCvt3eLQurCsmS7VrC6JLl3/RIGkqIASrCrA/w60LJs=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: RFz35n0NlgP92PSs1+TMF0s7x/jM1peBWhGKVPgnDRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:65:25:ac:04:59:c3:19:13:57:23:46:5b:7e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Mar 2 00:01:16 2026 GMT
Not After : Mar 3 00:01:16 2026 GMT
Subject: CN=f8740dc69a6f32c9ab668305b45720ee2726a71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:4a:43:51:60:7a:72:f6:be:f7:6d:e7:04:
3b:71:82:3f:54:66:80:44:ba:ab:cd:ac:d1:ff:3b:
b0:01:f7:0d:15:31:a5:20:bd:7c:27:e9:2b:80:90:
de:d8:ea:a1:c9:95:12:88:e2:ce:23:68:2c:66:be:
04:83:d0:84:b3:d6:c5:f0:9f:64:46:b9:07:9f:92:
19:37:7b:c2:43:86:00:ff:fe:0f:fb:ab:18:c9:a8:
d7:15:fc:08:ba:ff:5c:24:31:f9:06:36:86:2e:f1:
d7:55:a8:ce:3b:eb:47:5d:a4:8e:06:0c:2d:e3:17:
79:48:fe:6a:fb:55:db:07:b5:03:22:b4:b4:db:77:
b6:cf:84:4c:38:9e:33:25:be:18:fb:ac:1d:ba:b9:
56:ee:bc:d7:7a:4d:8e:00:08:eb:e8:c7:b0:98:d7:
d6:32:ca:d2:8d:37:18:47:36:12:1e:62:c0:2c:be:
12:c8:2e:6d:1b:4a:30:75:aa:0c:e2:49:20:e2:ac:
b4:63:6f:fe:c1:11:07:3c:57:08:f5:9e:d8:3f:68:
f2:c9:43:36:47:b6:44:c9:a9:dc:61:74:fe:cf:7b:
23:01:69:fe:b8:af:0f:8f:89:eb:67:aa:48:c2:ac:
16:9b:1a:81:ef:f1:ac:60:8f:4c:0c:e3:44:6f:f4:
95:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:74:0D:C6:9A:6F:32:C9:AB:66:83:05:B4:57:20:EE:27:26:A7:1A
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:82:3f:a9:41:43:d8:4a:a0:ee:23:11:e0:1f:e8:2d:d3:78:
e6:89:83:4a:cd:d1:72:d5:f2:6f:4c:21:83:e0:2f:91:dc:98:
de:ae:55:0b:9e:da:61:46:74:c2:d2:88:6f:36:a1:6e:69:93:
67:77:2b:6e:d3:54:8f:14:72:7b:d0:5c:1b:4b:dc:8e:84:cc:
0d:f9:cb:3b:14:cc:0a:c8:be:11:c1:7d:18:b0:5b:de:83:e3:
8f:06:f7:60:50:d6:da:8c:74:7d:e7:f5:5e:e7:93:02:de:82:
b1:45:59:04:88:d3:d3:ca:36:25:f5:20:e5:09:91:7f:54:98:
3d:4b:06:a7:b5:a1:61:c1:b8:de:92:7b:f3:c0:66:91:99:58:
bc:a6:a9:9d:f4:a1:b5:83:68:2e:df:28:19:d7:96:22:64:c9:
4d:a8:24:8b:96:82:84:7c:74:29:ae:42:8e:bf:c2:39:34:99:
a3:b3:ba:69:3b:19:8a:4e:e2:02:85:50:15:fc:11:19:1e:13:
4f:6f:b7:59:1c:71:ed:de:d8:93:6b:bf:d3:a2:22:45:87:78:
25:54:ef:e9:ee:95:72:54:6f:ef:ff:d7:cc:ba:67:ef:4d:15:
9b:ff:b5:a3:98:e6:c8:e0:51:21:64:e3:4f:31:7f:20:3d:c8:
78:8b:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:41 2026 by rpki-client