Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier: QXCVlKKGMyBphZxb3RlpBVBzdxAxhTYFAAMPWX1EUas=
Subject key identifier: 61:01:8E:D6:40:CA:F4:CB:A2:AC:0B:E1:32:EF:EA:C8:49:AE:92:5B
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial: 019CACB53FFA5E899A0658A629DF79885FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 04:01:25 +0000
Manifest this update: Mon 02 Mar 2026 04:01:25 +0000
Manifest next update: Tue 03 Mar 2026 04:01:25 +0000
Files and hashes: 1: 1-iaQVGIRiX5iu1fv45oI-_0UAMs.roa (hash: UJsZfJvQEHGoE3GSbiyNR/EqoxSd0S1YeBtQv8m62RM=)
2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: p3/k/D4YhNlpxnyftEgpK5new4ZX3YierxOGH7apVJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:3f:fa:5e:89:9a:06:58:a6:29:df:79:88:5f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Validity
Not Before: Mar 2 04:01:25 2026 GMT
Not After : Mar 3 04:01:25 2026 GMT
Subject: CN=61018ed640caf4cba2ac0be132efeac849ae925b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9a:dc:65:59:83:67:f3:a9:c1:71:60:4b:f2:
96:d5:2a:51:26:41:3c:8f:ed:8f:0e:6f:20:80:20:
26:0a:37:5c:bb:88:99:6e:6c:54:a0:41:27:78:c5:
8f:3e:4b:0e:8d:23:34:0c:95:35:f6:7f:cf:8b:b0:
6c:e3:ad:ab:6b:b5:02:27:b4:5d:db:7c:f6:bd:5b:
ab:92:a6:20:22:b4:17:1e:df:21:56:8a:d8:5b:5f:
46:57:35:74:05:92:97:ec:2f:0d:2e:88:4e:fd:7d:
fa:e7:3b:5e:7c:36:08:2f:e7:89:2a:ad:fa:ac:b0:
ec:2d:5f:03:64:55:d3:aa:22:f7:40:4f:d3:a1:94:
02:b7:11:1d:b1:40:6e:89:33:a9:43:aa:34:a4:e9:
4c:81:24:bb:5b:82:12:2d:a2:cc:f0:95:cf:ce:b8:
d4:c1:94:bc:22:08:0c:a6:0f:15:ba:28:6a:cc:42:
3d:c2:e5:f7:94:97:e2:cf:6f:8d:26:3b:bb:7a:4d:
c5:36:35:68:bd:47:13:5a:ca:8e:0e:ce:00:3e:e8:
5d:e8:f3:24:3d:7f:73:4f:e8:11:fe:37:6c:84:20:
c2:30:03:ab:b8:1f:db:54:77:52:61:3e:6e:49:6a:
97:6e:77:47:1d:b1:eb:b6:ad:19:c4:5e:70:c0:f6:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:01:8E:D6:40:CA:F4:CB:A2:AC:0B:E1:32:EF:EA:C8:49:AE:92:5B
X509v3 Authority Key Identifier:
keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:34:54:72:2a:19:88:81:62:b2:d9:ce:82:d3:83:fe:6f:2a:
4f:69:4b:05:ba:e4:37:ce:3a:cd:e0:69:df:18:90:44:4c:6f:
8a:c7:43:b9:89:85:52:a7:c7:63:15:9a:69:95:78:1f:17:24:
7b:7d:ad:18:2a:51:85:5e:9b:b8:94:58:a5:5e:43:39:ac:56:
c0:ff:36:2a:74:d2:c4:af:66:07:02:f2:aa:4b:a9:ab:31:68:
e5:71:c1:dd:30:34:8b:42:e5:e9:f3:b5:5c:8b:44:78:20:fb:
85:34:57:3a:b2:65:fa:97:63:3b:4e:b5:d5:5d:72:78:a2:13:
12:6c:13:cf:c8:ae:59:6d:32:e1:15:51:e5:0d:95:6c:d9:0d:
59:ee:e4:0b:45:b0:db:cf:6d:e6:57:d0:f2:14:b2:50:0f:1f:
83:af:d0:cf:7b:62:bf:b3:ed:2a:56:ef:aa:9a:3a:3c:92:59:
60:29:9e:df:00:24:1e:7c:95:da:9a:f5:64:35:e6:5f:d7:a4:
54:75:44:2a:89:aa:91:2c:a6:59:6c:f6:54:98:ee:42:aa:65:
75:d6:db:70:88:1a:25:ea:a6:11:75:28:ef:ce:ec:c6:62:8a:
19:41:52:42:ad:40:a9:84:36:c8:b7:b3:2d:d8:bf:c5:cb:58:
e8:de:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:43 2026 by rpki-client