Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
File: YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json)
Hash identifier: wEHjvHHYGeLQZuPL1bAKTIttOaOE97QdBOC6Ytxil24=
Subject key identifier: 79:54:09:1D:E0:28:52:0A:F7:DC:56:F4:AE:50:52:84:A0:52:D8:CB
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Certificate issuer: /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial: 019CACB4BB57C305AC7EB38346A07CDD21C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
Manifest number: 1549
Signing time: Mon 02 Mar 2026 04:00:51 +0000
Manifest this update: Mon 02 Mar 2026 04:00:51 +0000
Manifest next update: Tue 03 Mar 2026 04:00:51 +0000
Files and hashes: 1: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: 3GcrBvmZYq9U2yfNzyzM7VC56LAJUxBbzrssWYiccdQ=)
2: m6N7HELrjq0BLATRDwGOIFqCEFI.roa (hash: SA6cDg1QSEbx4rFtnIc0Ww73sJQYtLI/mD1gBHeOlCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:bb:57:c3:05:ac:7e:b3:83:46:a0:7c:dd:21:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Validity
Not Before: Mar 2 04:00:51 2026 GMT
Not After : Mar 3 04:00:51 2026 GMT
Subject: CN=7954091de028520af7dc56f4ae505284a052d8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:72:b1:9d:55:29:0f:ba:31:f7:9a:9d:db:
e0:af:3d:8d:dd:01:fb:98:9a:3e:6b:b6:a6:54:53:
dd:46:48:3d:a2:b5:bb:1e:b8:08:33:84:be:d0:28:
30:ad:f5:58:cb:37:4f:28:1c:9e:02:ed:4c:35:d0:
6e:e1:83:d8:34:d5:68:b2:67:f0:58:2a:dc:a9:1e:
4e:ec:c5:f3:18:bc:37:5b:91:be:98:c9:92:87:33:
21:fe:ea:66:9e:a1:a0:77:0e:ec:6f:46:c1:ce:66:
30:bd:ce:b5:a1:71:e9:1f:f6:f3:f1:c8:07:09:1a:
11:42:10:f4:ec:fd:f5:d9:87:cf:5a:37:95:81:e6:
84:8e:4b:06:13:0e:85:79:b6:e8:de:4b:2e:41:1c:
e1:15:5d:7a:97:ee:0b:de:60:25:4e:f2:a9:d8:0c:
5d:c4:e0:ba:b6:03:ad:de:4c:42:ad:f0:52:57:8d:
ac:a9:49:bd:e9:f7:4e:57:bc:70:20:a6:c7:aa:fa:
7f:50:01:e2:18:3b:ad:18:b7:8e:5b:a7:4e:f6:ee:
36:94:3c:a6:91:47:ac:a3:dd:4f:12:7f:83:c2:30:
52:9a:e8:4c:73:56:54:5a:3f:12:aa:34:18:3a:8a:
3f:28:57:7a:1b:e2:01:f0:85:81:82:eb:7e:ec:d4:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:09:1D:E0:28:52:0A:F7:DC:56:F4:AE:50:52:84:A0:52:D8:CB
X509v3 Authority Key Identifier:
keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:38:84:97:e5:08:c3:a0:14:f8:12:2c:71:fb:a7:13:32:98:
d4:11:e7:d8:88:0a:43:e4:2e:ce:1d:02:c7:7b:05:8c:83:92:
5e:09:80:21:ed:f0:28:28:39:96:56:1d:11:f9:52:f0:59:b6:
40:ab:ca:90:1b:56:09:24:ef:26:1e:f4:f7:6c:85:25:7f:8f:
d0:f0:63:3f:98:82:4b:36:d7:e8:64:d8:3d:0a:d4:0b:e3:25:
8e:ec:16:74:2e:00:af:3e:1b:d1:54:af:aa:d6:d2:19:c8:ac:
f3:0b:d2:c3:27:25:5f:e3:3f:2b:05:45:c3:41:66:e7:65:57:
68:75:02:e3:e6:b3:0a:5d:f8:19:fd:ff:12:f8:6a:40:76:9c:
0f:4b:8b:0c:87:54:99:4f:9e:29:13:48:1f:3b:05:34:24:85:
bd:1c:08:c1:e7:24:a2:d1:4f:fb:64:f3:24:73:e2:58:58:e6:
70:b2:a6:50:c2:14:d2:95:04:20:4e:5f:55:e2:bc:91:f2:07:
28:6e:1d:71:63:3a:b5:af:62:b1:90:01:c9:73:cd:8e:b1:7f:
62:b9:98:54:93:96:7a:70:6d:2c:05:0e:ba:4a:9e:75:d7:b9:
69:01:54:23:1b:58:6c:71:b5:bc:31:09:80:22:0e:d3:e8:fb:
66:bc:c2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:10 2026 by rpki-client