Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: oOFQCMO+2evIuDsK9YXwui421W5/OBgtmKdmMDEZiuU=
Subject key identifier: 6B:68:B7:51:50:2A:C2:E2:16:F2:D5:4D:0F:F6:F1:91:19:0E:5D:7C
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 019CAD5999DA8B3973B6E31B2AC889B6DF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 0830
Signing time: Mon 02 Mar 2026 07:00:56 +0000
Manifest this update: Mon 02 Mar 2026 07:00:56 +0000
Manifest next update: Tue 03 Mar 2026 07:00:56 +0000
Files and hashes: 1: ByyzWxM12G0BPucLG6JiwdJtgEE.roa (hash: 4G2lH2XdNKPJSfTS1f9mdoy30Er7U9NNS0wrRk3c+sc=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: 29T7WptxPrgwXXVPfp/S2mrsc2xVADqyvmBnC4+yxOU=)
3: lH39RLJn2Hz8-UQkPP2o_JvX24I.roa (hash: iB4qVFkaq5F/oZHjDXHDMbbQUo5Vscic17RgZki9i5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:99:da:8b:39:73:b6:e3:1b:2a:c8:89:b6:df:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Mar 2 07:00:56 2026 GMT
Not After : Mar 3 07:00:56 2026 GMT
Subject: CN=6b68b751502ac2e216f2d54d0ff6f191190e5d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:8d:7d:35:5b:60:b9:7a:a9:2e:42:a6:ea:
5b:7a:c9:85:f4:0d:86:66:d4:a9:74:94:18:bf:da:
3f:36:c9:39:07:ce:ae:34:62:54:a3:07:2a:fd:37:
d4:a8:23:b7:23:5e:61:36:e2:38:4b:d8:2f:1a:fa:
21:fb:79:d2:e2:b4:8d:c0:ce:0b:18:27:ad:6f:67:
c1:8f:ea:dd:ab:a1:98:11:54:6e:df:a2:1c:4a:a7:
70:2d:3a:02:7c:85:6f:07:33:bc:b1:71:ff:b4:27:
88:db:99:5a:c2:da:13:36:d8:2a:1d:83:f1:55:0f:
93:7f:e7:4e:84:a8:a1:62:45:65:a4:09:6c:a3:dc:
2b:a7:ca:d7:35:5d:f3:2a:da:fc:83:e8:17:f8:68:
9a:9f:43:6a:4a:9d:ac:d7:af:1c:79:5f:69:70:49:
f6:d5:7b:19:f0:92:95:82:3f:1a:45:ff:d6:7f:33:
d1:17:a3:50:c4:7a:09:b4:1e:18:63:39:be:5d:7a:
6a:fc:1f:95:68:0b:a8:77:d7:86:06:52:29:ec:1b:
15:1a:16:64:93:69:a9:0b:2c:b6:84:a3:4b:72:31:
64:34:81:b9:ae:a0:3e:6a:9e:cc:56:27:26:f0:2d:
c0:f8:64:98:a9:19:a4:ce:fa:21:72:71:b2:f7:01:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:68:B7:51:50:2A:C2:E2:16:F2:D5:4D:0F:F6:F1:91:19:0E:5D:7C
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dc:88:30:73:9b:da:bd:05:ec:c4:d4:c5:13:5d:32:7c:56:
7f:7c:1e:a3:1e:6b:d1:8a:ba:c6:14:98:e7:bd:59:03:0b:d1:
c5:ad:9e:40:9b:f0:74:60:dc:44:54:a5:c6:53:46:e3:be:e7:
e7:fa:dd:6f:83:07:fc:3c:a5:33:46:d9:7c:db:dc:3e:3b:e0:
11:85:7d:88:05:5a:48:55:b8:c5:2c:42:95:b6:7d:01:d0:d1:
4d:d2:d0:5a:a6:a5:5b:ac:61:17:21:5a:19:a1:1a:a5:f3:4d:
0f:c0:bd:95:ed:ec:32:41:56:c9:f1:e8:b7:5c:5e:68:1c:5a:
be:60:50:6f:79:b2:e3:11:eb:af:8d:2a:d3:b5:9a:49:e2:eb:
b1:2d:04:73:b8:1b:66:5d:71:84:71:da:bc:61:ba:97:5b:39:
b7:d1:55:fa:61:ad:c6:8b:ef:58:18:b5:58:8c:b4:7f:74:a2:
13:86:2c:2c:6e:d5:09:91:a5:f6:b4:2b:15:a0:da:43:94:1f:
01:fc:de:4b:7a:2e:e5:94:3b:4f:af:21:4e:67:6b:2d:94:2e:
eb:76:f3:9f:c5:9f:e8:cd:4d:82:70:6a:20:70:42:57:61:0e:
d5:26:58:9e:90:ab:8f:68:c6:90:d2:38:23:e3:dd:ad:83:b2:
98:31:c8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:55:32 2026 by rpki-client