Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier: 0lhcyq4TQdBSW/iDvP/IiYLqOSmyL9nn3ExhxbKnIiE=
Subject key identifier: 13:7E:C9:CB:33:70:F1:92:D6:FB:D9:37:D5:BD:DB:69:63:76:39:BE
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 019CAEDA336CBAAAAC7E356501761ECB357E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 14:01:01 +0000
Manifest this update: Mon 02 Mar 2026 14:01:01 +0000
Manifest next update: Tue 03 Mar 2026 14:01:01 +0000
Files and hashes: 1: X_VAzsonJf2-Y0J7PUgtiVvr18s.roa (hash: omFujTcefEd3WWyYkvlLAE/INtwxFEvZh0pqgOeoURc=)
2: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: FVf2Xocnt/u5+63JfeLFDqoJwYVjy2xJtxxmNF/lIxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:33:6c:ba:aa:ac:7e:35:65:01:76:1e:cb:35:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: Mar 2 14:01:01 2026 GMT
Not After : Mar 3 14:01:01 2026 GMT
Subject: CN=137ec9cb3370f192d6fbd937d5bddb69637639be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:38:e9:e8:df:85:55:b4:7e:8d:d2:ef:19:
03:6e:02:0f:8d:eb:73:c2:3a:f8:18:3b:f7:92:49:
8e:e3:76:95:94:d0:00:b6:43:2d:12:03:d0:e8:58:
35:cd:26:54:ed:c1:db:ac:74:4a:57:cd:5d:a9:95:
3e:37:13:ca:6c:9e:dc:f0:70:cc:26:86:91:99:78:
2e:cd:cd:0a:4e:26:26:8a:0e:ee:41:d4:63:e6:9a:
45:9d:0d:04:f2:42:f9:67:64:d5:37:a5:25:b7:95:
8d:60:9b:ae:9a:fe:eb:78:59:6d:3b:ec:52:fe:c6:
04:7b:47:2a:53:95:3b:2a:47:33:66:e3:43:8f:e7:
ae:55:1b:73:d3:cd:6d:38:d0:d3:d1:e4:8e:a7:97:
b2:5c:0d:d8:7b:b2:93:ea:e6:0b:1a:ac:1c:5a:f2:
74:ac:d8:df:88:a0:f5:af:67:89:39:7a:9f:70:62:
54:f9:66:65:2b:80:d5:93:26:c2:db:50:7b:94:b8:
5e:91:9f:57:45:a1:5f:d6:72:61:04:fc:40:ed:61:
c7:ec:c6:b6:5e:0b:14:3d:4a:d5:0b:94:a2:d0:18:
7e:4f:ed:d7:4f:51:4c:58:0f:0f:08:bf:f4:91:96:
29:e1:a1:1c:31:c0:bb:5d:df:76:ce:2e:23:68:a2:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7E:C9:CB:33:70:F1:92:D6:FB:D9:37:D5:BD:DB:69:63:76:39:BE
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:82:e9:c4:aa:5f:d2:61:5c:f6:9f:83:d3:7e:87:52:ec:fd:
4d:99:bf:25:fc:e9:61:d9:41:c9:db:d4:92:9c:08:0a:5c:80:
cc:4c:73:bf:73:6a:63:27:8c:6e:79:e9:15:b2:fc:02:d6:9a:
dd:22:14:ba:36:f2:91:8c:0d:6e:e4:4a:19:76:da:66:dd:b9:
ff:bc:05:9b:0a:db:1a:44:7d:93:36:76:a7:4c:2c:98:3d:fa:
66:e9:32:8c:95:b8:bf:0e:57:86:1d:55:d6:2f:be:d4:a5:93:
c9:19:68:03:aa:4e:80:de:ea:b1:3a:ec:81:4d:9d:9e:15:89:
b9:39:91:40:74:c1:4a:5d:e4:4e:4d:91:aa:4d:72:20:45:6f:
24:8f:88:ca:d5:64:7a:f1:06:17:95:59:2e:5c:28:bd:f8:da:
7f:8f:98:a1:0b:37:9c:80:dc:cc:7e:37:7b:56:6f:cf:79:14:
89:31:bb:33:39:15:46:fb:7f:b5:a1:e2:d7:80:35:86:9f:71:
f0:2c:6d:85:ed:a8:61:1d:89:b0:62:87:a0:1d:99:a9:85:cc:
79:a9:4b:a7:8e:66:19:30:20:e0:f9:35:9b:17:15:19:a8:6c:
f5:0a:18:8a:eb:f9:82:e3:89:e8:2c:48:e0:4a:ba:5b:fc:44:
57:d0:b2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:40 2026 by rpki-client