Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: QHL/OciGECYDhhs0uhXDIQYV/12ZKzLcqny3OKFfD8Y=
Subject key identifier: F2:B3:CE:91:CF:D5:6D:CA:E9:72:52:69:76:3B:DB:27:19:25:87:09
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 019CAAFD2A3255F615709C06FDB9DF01BBED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0D2E
Signing time: Sun 01 Mar 2026 20:00:43 +0000
Manifest this update: Sun 01 Mar 2026 20:00:43 +0000
Manifest next update: Mon 02 Mar 2026 20:00:43 +0000
Files and hashes: 1: 1lPDb-Qc7dgd58_k0ugXvgO36w8.roa (hash: up0wKM+by5cZA7R34zmGPf+ho8Ei16Ys0MiWkd/R1jk=)
2: NbUyaKZBv1RnKePQIxmyxsT9zGw.roa (hash: YfuIIb8IL5a5Ql6qciTZgKEuG43i9WjmWByHoP25V3M=)
3: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: d8yxyEj+ZPvaber5vkdGv9/hJne1SVYt6ATbozFZe6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:2a:32:55:f6:15:70:9c:06:fd:b9:df:01:bb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Mar 1 20:00:43 2026 GMT
Not After : Mar 2 20:00:43 2026 GMT
Subject: CN=f2b3ce91cfd56dcae9725269763bdb2719258709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:f5:55:20:2a:2b:a0:77:ed:87:3c:46:7e:
cf:24:e5:35:e8:06:8d:26:ff:5e:8d:6b:d5:8d:e3:
d9:22:49:db:26:0f:77:b3:c0:0a:51:42:09:66:21:
a1:fd:38:b3:f3:78:36:8a:a6:26:b5:08:cc:b4:01:
4c:a4:bd:e8:26:ee:f1:c8:bd:34:b7:f5:bf:57:23:
52:a2:5e:da:30:f0:e4:50:ed:6e:e4:c7:d7:b8:46:
1c:68:95:e4:b0:97:56:01:2a:0f:63:41:6e:10:a2:
30:ac:dc:91:1e:66:56:ce:da:d1:3d:94:33:62:6b:
bf:e9:fe:b6:62:34:39:06:df:41:72:15:fe:35:3b:
44:05:36:78:9e:24:ef:8a:b4:cc:42:f1:16:76:e8:
d4:c8:8b:e6:e6:60:2a:61:41:17:83:c8:da:49:46:
12:82:03:fb:45:ef:34:3b:d4:99:86:43:a3:a9:a2:
4b:e0:73:de:ab:35:01:96:b5:8b:cb:00:ca:42:05:
e3:86:fe:41:7d:40:87:a1:f6:eb:99:0e:76:80:b3:
56:81:23:1f:b0:bc:8a:cf:2a:52:be:ef:45:2b:21:
41:aa:3d:15:15:b8:33:e3:d2:15:51:32:99:90:90:
8b:a5:e3:28:44:f0:38:9c:cc:33:40:86:ee:75:4c:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B3:CE:91:CF:D5:6D:CA:E9:72:52:69:76:3B:DB:27:19:25:87:09
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8c:01:58:71:5f:af:8d:23:79:2c:e4:19:9b:69:6a:43:0e:
f7:de:57:5a:87:8d:a3:83:8a:c2:97:1b:66:55:a9:88:3d:f7:
1b:30:c5:63:5c:75:29:9c:05:f7:f8:e8:0c:25:25:cf:61:c5:
f0:2b:c6:b2:b9:32:1c:9f:98:66:fa:84:7b:7d:28:1d:2c:9f:
00:e7:3f:75:32:ad:f0:d3:73:36:e6:a9:c5:9d:96:ee:8a:9e:
13:91:9e:a1:48:a9:49:1f:c0:90:83:2f:c2:44:62:26:9a:ff:
44:75:ee:8c:47:d7:f2:93:32:50:75:4b:fa:85:78:18:c3:3f:
28:96:d5:35:15:9b:90:dd:07:af:8d:15:d7:d8:39:83:2a:19:
91:e2:33:88:14:5e:2b:ce:e9:d6:69:9a:da:70:13:69:8a:80:
7a:7f:04:4b:0d:e1:6d:07:ab:bc:c9:cf:5f:01:24:c3:da:89:
d0:a3:8a:ee:a7:23:0b:de:19:2b:f2:2b:bd:c6:5b:38:c2:db:
3e:95:30:dc:37:79:1e:8f:9b:5c:dc:44:6a:9b:ad:80:40:9e:
1e:0e:15:ad:c6:07:3d:a2:57:29:1f:27:ea:bb:80:17:f7:71:
da:95:e1:34:0f:d8:0a:5b:56:c0:51:a8:cf:34:40:0e:a5:60:
ea:1c:3a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:29 2026 by rpki-client