Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
File: YgTQ-JHcR16nA-be89bq0ej3wtY.mft (raw, json)
Hash identifier: JDPa8hAguq3hASWKXqb9VjdMExiCJIA8qry0K7lmO2s=
Subject key identifier: 1F:2C:63:7A:4E:4C:30:84:CD:48:B6:34:DB:60:1C:5E:5C:4E:3A:5F
Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
Certificate issuer: /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Certificate serial: 019CAA592DC646844F4454E90117D9B39656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:01:36 +0000
Manifest this update: Sun 01 Mar 2026 17:01:36 +0000
Manifest next update: Mon 02 Mar 2026 17:01:36 +0000
Files and hashes: 1: YgTQ-JHcR16nA-be89bq0ej3wtY.crl (hash: c5P59lZrdOtNTI1hPz1gCoRnVgwgGIyGXXOMtJLFDE8=)
2: pYLH_zSZV0273TNEBYT79f1lmcg.roa (hash: k3iAoFqBBNaSN0iQRFo4OKQZqr7mC8NP7hdAPA1B80I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:2d:c6:46:84:4f:44:54:e9:01:17:d9:b3:96:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Validity
Not Before: Mar 1 17:01:36 2026 GMT
Not After : Mar 2 17:01:36 2026 GMT
Subject: CN=1f2c637a4e4c3084cd48b634db601c5e5c4e3a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:3e:74:3b:37:de:d3:bc:b2:97:c8:c1:d3:
8b:0f:7d:cc:69:b4:3a:14:68:06:11:d0:c3:bc:b3:
f0:8b:11:29:2b:02:b7:b2:ba:cc:75:1c:cb:66:41:
7b:b4:d9:0b:aa:80:ad:d7:c3:f0:2f:c7:10:ae:fe:
66:a6:25:64:4a:7f:52:c2:85:cc:4c:13:7a:da:61:
d1:09:16:86:58:a9:26:03:d1:2e:45:17:e6:3f:3b:
1c:43:01:3e:f3:7c:5b:ac:8f:9f:0f:ce:49:08:a6:
fc:d6:b9:b1:a9:da:6c:0e:12:03:b0:d9:5d:79:07:
b8:9e:5f:52:87:b1:13:e3:a8:36:a9:2d:90:17:5e:
73:3a:4b:fb:57:e6:1f:2d:15:49:2c:7c:55:64:1e:
28:4b:8f:fa:f9:f2:0b:30:45:df:d9:ba:86:3c:f0:
d0:60:c5:86:e1:ca:63:03:f0:46:de:6e:97:e8:cb:
d3:38:43:7f:a5:25:ef:80:94:de:a7:76:eb:e6:e4:
e0:2f:fc:9f:05:19:20:b2:ee:f5:b1:a8:cd:07:f1:
0d:46:2d:49:d7:0e:92:5d:2a:ce:2c:b0:fa:9e:ee:
d3:d5:36:65:31:5b:3e:18:3f:bd:59:98:f8:ac:a3:
68:23:93:68:ae:5b:d7:92:6d:67:fc:7f:ab:4d:6b:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2C:63:7A:4E:4C:30:84:CD:48:B6:34:DB:60:1C:5E:5C:4E:3A:5F
X509v3 Authority Key Identifier:
keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:de:e9:d2:78:d1:c3:93:c3:70:26:be:bf:6c:f0:10:b5:d3:
ac:cd:01:29:ed:d1:26:78:f5:19:80:af:a2:4f:c8:83:02:7c:
13:9c:01:fd:69:19:7b:03:89:e0:b6:03:47:fc:b1:61:eb:7f:
76:5d:88:8c:7b:40:e7:7a:a5:15:3b:2c:9d:09:86:2a:f4:99:
fa:3e:12:05:55:dd:07:4d:3c:63:c2:37:d7:f2:c6:d9:96:3e:
8c:6c:af:28:fe:62:f4:f8:89:09:d4:63:24:f9:50:cd:f3:f2:
39:0a:ea:08:63:24:ef:73:c5:01:0a:8e:c1:00:b6:e5:b1:a1:
30:dc:b5:fd:b2:a4:9a:a0:24:a3:f7:57:30:b9:40:60:f0:bf:
30:e0:d4:de:49:07:a9:9e:e0:3a:80:b2:aa:eb:71:aa:c5:d7:
a0:5c:70:af:0a:07:05:eb:80:d0:2b:6f:02:42:0a:aa:73:fb:
71:28:af:1b:7c:dc:07:d1:5e:09:11:21:17:ec:5a:51:dc:fe:
e5:03:8d:54:89:17:d2:b4:86:3f:37:b6:51:c3:6f:02:d7:8a:
c4:a6:c2:e7:06:a6:02:85:00:24:11:5a:33:0e:89:f7:ea:07:
15:1a:1c:fd:34:0e:ba:14:1f:75:53:96:89:bc:30:8b:fa:ec:
68:64:d7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:34 2026 by rpki-client