Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: BVhFMT4thzRQ++tvyvN937pmjxXuL6D9MgH0guuk2gU=
Subject key identifier: DE:EC:24:A6:31:27:33:6A:6B:9F:F6:A7:A5:B8:F2:7B:81:91:AA:5A
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 019CABD9A8221A5B45D16B5DCD3E685CF768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 0FD6
Signing time: Mon 02 Mar 2026 00:01:34 +0000
Manifest this update: Mon 02 Mar 2026 00:01:34 +0000
Manifest next update: Tue 03 Mar 2026 00:01:34 +0000
Files and hashes: 1: BOEi7NrSCNnbOJagz6PacwPyCow.roa (hash: gcJkZ8tsvtRiMSl8JsUfBFpQEizMhx1qFKi60dWgXD0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: HDwot6V0xKCsrL+cqshAUrUQ4zmwlfkV0nnYZg0xxbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a8:22:1a:5b:45:d1:6b:5d:cd:3e:68:5c:f7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: Mar 2 00:01:34 2026 GMT
Not After : Mar 3 00:01:34 2026 GMT
Subject: CN=deec24a63127336a6b9ff6a7a5b8f27b8191aa5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:56:df:72:ed:7a:44:b6:8e:3e:f7:3c:92:
17:03:36:68:02:21:78:c0:06:23:0b:98:e7:a6:f0:
85:d5:58:78:97:3e:59:8e:80:b4:f2:30:fa:6c:ef:
13:41:8e:21:5a:f3:02:c3:f2:4c:4f:7e:14:6c:13:
3b:80:5e:11:9d:d6:80:d5:6b:29:91:dc:3c:35:9e:
61:c5:ad:45:f6:d5:c0:52:4f:4f:47:ce:bc:85:84:
e7:d1:47:29:07:2b:cf:85:bc:5e:cc:67:5d:a2:11:
23:81:21:0d:1d:97:d5:67:4e:d9:07:74:29:4e:2e:
8a:79:ec:34:3d:12:5e:de:e4:0c:d7:d8:c1:ad:93:
7a:f8:17:50:e0:43:91:43:06:44:b9:7f:26:0b:a5:
91:4a:f0:d2:d9:7c:f0:21:38:ab:f6:f1:8d:37:4d:
dd:52:d2:6f:9a:b4:a5:f0:0d:92:79:21:6f:ee:21:
0d:67:a9:21:83:6a:76:48:d5:d4:dc:37:89:80:7c:
cb:2a:39:4a:cc:0d:a1:ed:b7:3b:2b:1d:7c:95:48:
47:d6:35:c9:04:c3:35:ec:56:36:ec:8c:89:68:cb:
96:3e:df:75:83:ea:c0:f7:32:10:d6:82:2b:07:d7:
fa:f0:2b:ba:dd:8b:17:2b:94:77:90:5e:53:66:df:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EC:24:A6:31:27:33:6A:6B:9F:F6:A7:A5:B8:F2:7B:81:91:AA:5A
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9a:61:51:36:77:07:ee:3e:2f:11:14:18:0e:3d:19:a9:69:
cb:95:2d:1a:2b:9e:8a:22:10:fc:23:b7:2e:f0:c6:ca:e4:d4:
fe:26:88:0f:4a:64:c7:06:1d:b8:fc:67:da:76:9e:c6:71:83:
a8:3c:6f:a1:81:54:04:3b:08:9e:98:bf:57:ae:69:4c:8f:c5:
fa:7a:58:0c:21:56:dc:30:db:03:ad:60:5f:0a:51:ce:bf:f9:
a0:37:92:c8:f8:5d:fe:75:79:b4:fa:c1:1a:60:a8:25:63:ec:
1a:e0:1f:1a:99:41:d3:af:87:81:12:04:d2:46:3d:c9:6b:d1:
b5:02:9d:ad:ff:5d:92:d9:9d:da:4b:7e:26:d8:08:b5:54:21:
e1:fb:0a:7a:1e:71:dd:2d:73:c0:e0:81:bd:49:c8:e1:22:8f:
25:bd:61:bf:d9:17:e2:e4:de:df:6b:65:7c:29:b5:3f:93:d7:
27:ef:c6:b4:7f:59:3a:6e:2c:7c:6e:cc:c0:82:98:d6:1b:f7:
c0:a1:52:5a:88:db:8d:36:1e:1c:aa:42:49:e1:7d:d3:f7:73:
aa:6b:3e:f6:b7:ea:52:ba:ea:66:ac:72:33:9a:15:32:62:2d:
63:39:e9:06:b8:0d:22:b7:3f:d5:1d:c8:cc:5c:2f:8a:44:0c:
de:16:5e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:57 2026 by rpki-client