Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
File: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft (raw, json)
Hash identifier: v882RavxMMWx4C1ks/7n/hrNpe7tK3Tipepz0K5uX88=
Subject key identifier: 0D:E5:35:DC:F0:D2:54:D3:BC:58:D7:82:9F:82:E6:3F:A6:2A:03:FE
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Certificate issuer: /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial: 019CAA8F7CCD3E8D9F1094D6D835BEDD1AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
Manifest number: 17B0
Signing time: Sun 01 Mar 2026 18:00:56 +0000
Manifest this update: Sun 01 Mar 2026 18:00:56 +0000
Manifest next update: Mon 02 Mar 2026 18:00:56 +0000
Files and hashes: 1: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl (hash: u0xP5YP6K9OU4dAkjTWzcyOeB6jjEId23wDuzbEzUoc=)
2: sw8tmXWb62c9gz1qsBrZbffyXTY.roa (hash: b0ehz9drkVBnOmXweW7dtXPuDg7z70w2Le8bMJVLAGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:7c:cd:3e:8d:9f:10:94:d6:d8:35:be:dd:1a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Validity
Not Before: Mar 1 18:00:56 2026 GMT
Not After : Mar 2 18:00:56 2026 GMT
Subject: CN=0de535dcf0d254d3bc58d7829f82e63fa62a03fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:4e:7e:31:49:a9:9d:68:14:78:3f:ba:e0:
cb:f7:3c:5d:60:34:5a:51:45:71:53:0b:4e:eb:c0:
c1:66:c1:d5:89:f8:9a:ce:f5:68:f3:8f:67:cb:76:
56:b4:f9:a7:7c:87:ab:d0:b6:d8:80:35:f6:cd:20:
4e:e5:a3:25:08:a7:66:f8:f3:00:74:61:33:8a:2c:
92:19:8f:14:9f:60:6e:38:70:3e:f1:e9:69:0a:86:
6d:be:3c:37:6c:b7:f6:b1:a9:da:d8:5e:2f:fd:42:
02:f7:33:90:a9:1c:e8:49:3d:e2:2b:55:35:05:89:
6d:8e:5f:90:55:e2:c7:83:0b:fe:88:fb:3a:1e:0c:
a4:bf:aa:97:5d:f3:8c:f3:2b:37:e7:4c:a9:70:ca:
92:4f:e2:47:b0:f2:c7:63:8d:c7:e4:f7:2e:50:2f:
45:cb:8f:0b:94:2a:98:33:70:1b:9d:6d:99:bd:73:
4b:ec:e2:18:74:f4:d3:b5:d0:29:09:c3:35:fc:98:
bf:26:a7:0a:a5:05:38:c0:57:82:c0:2f:05:b8:df:
5b:ec:e8:43:c6:3d:d3:20:15:78:a4:79:da:08:76:
7c:02:80:b3:5b:76:97:95:05:91:75:02:c3:12:05:
b3:bc:bf:20:7d:9b:18:8d:d9:40:1d:86:c0:d1:32:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E5:35:DC:F0:D2:54:D3:BC:58:D7:82:9F:82:E6:3F:A6:2A:03:FE
X509v3 Authority Key Identifier:
keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:36:5d:0f:54:4b:c7:a8:39:ef:89:f7:e4:34:1e:07:38:da:
77:d9:0a:9b:e3:b2:47:dc:8d:b7:45:d6:90:d6:27:0f:cd:56:
47:c0:f6:37:46:85:1c:69:23:21:a5:c5:b1:7c:d9:a3:5f:1a:
96:20:0e:f8:2e:74:40:36:de:c3:f7:f7:6b:02:a8:32:f9:30:
9a:9d:a2:d5:6b:c8:99:01:c3:00:16:1a:6c:da:32:7b:ae:17:
60:e2:59:2e:61:1b:3f:90:78:71:3d:d5:fa:1a:dc:e6:9f:a6:
d9:5c:d2:3c:28:2a:af:d9:ec:44:15:5f:78:3c:d1:54:8f:c2:
00:5e:29:0c:a4:2e:9a:61:c1:6a:84:5b:22:55:bf:90:1a:8f:
c1:0e:ed:7a:51:fe:19:70:b0:26:e7:32:d1:9a:c5:88:7b:9b:
1d:58:cd:af:63:61:19:19:d5:f8:ee:df:ff:c4:22:d3:dd:6a:
61:c8:02:f0:cc:e7:83:79:5b:af:2e:2f:a3:d1:f0:d0:3e:aa:
86:3e:27:62:f3:72:df:3e:d4:71:d6:dc:4a:4a:dd:f2:f5:42:
94:22:c4:58:28:8b:8d:c8:0f:37:64:8b:e5:c4:b8:fb:f3:c4:
d9:04:44:f6:32:93:fc:06:83:f5:2a:5f:a9:45:19:26:82:ab:
7c:86:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:11 2026 by rpki-client