Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier: kGLNWQlqiat1mnkwh1vDhDZoA/FyagX2d2XiqD2uclA=
Subject key identifier: 67:0C:E4:DF:FD:B2:EF:1F:B6:9A:42:F8:5B:52:9F:9D:90:D1:1A:63
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 019CB0C8BAD7360478694D8A8A9826057146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 23:01:10 +0000
Manifest this update: Mon 02 Mar 2026 23:01:10 +0000
Manifest next update: Tue 03 Mar 2026 23:01:10 +0000
Files and hashes: 1: X_VAzsonJf2-Y0J7PUgtiVvr18s.roa (hash: omFujTcefEd3WWyYkvlLAE/INtwxFEvZh0pqgOeoURc=)
2: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: mBL9D9yX0C19T0YJmuM3zwEK5hZJJL9CAMxIaPsZySA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:c8:ba:d7:36:04:78:69:4d:8a:8a:98:26:05:71:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: Mar 2 23:01:10 2026 GMT
Not After : Mar 3 23:01:10 2026 GMT
Subject: CN=670ce4dffdb2ef1fb69a42f85b529f9d90d11a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:13:ac:3f:84:d3:64:37:71:6d:03:9b:93:
d5:19:42:24:d0:a9:dd:05:ba:f2:fd:95:68:d2:9b:
58:4c:7f:1e:ab:79:9a:fb:13:1f:b9:8d:7c:8b:02:
a6:fc:dd:1d:3a:7c:60:79:e1:d1:ae:6c:0f:4f:4b:
d5:59:a5:a8:cb:ce:3c:03:52:45:6a:8f:41:18:69:
cb:56:a1:c1:17:bd:16:7f:23:df:12:48:ed:ff:28:
a1:62:bb:e3:15:fc:3b:82:0c:93:39:c2:b3:df:bb:
c7:15:bd:a5:c3:42:63:62:f4:5d:74:37:8d:3e:e3:
ef:af:96:84:92:df:da:58:30:e1:fc:db:cd:4d:50:
11:04:70:3e:43:50:84:e5:3b:0d:8c:e6:8b:4e:c4:
4a:cb:80:0e:6d:d2:98:19:2c:09:72:7a:04:91:69:
c7:8d:7b:a0:64:62:96:23:e2:9e:90:41:4f:31:ae:
f6:dc:78:dd:81:06:c2:06:21:5c:42:4c:5c:2c:ae:
57:bb:30:75:bc:4f:9c:52:da:c1:c7:5d:fa:50:83:
1d:ae:81:cf:99:a2:53:b9:fe:56:10:00:4d:e4:e8:
b3:9d:aa:aa:a6:a0:62:e6:31:3c:43:37:75:9b:5c:
37:06:1e:12:92:20:35:4c:98:5d:f6:61:e5:f9:0d:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0C:E4:DF:FD:B2:EF:1F:B6:9A:42:F8:5B:52:9F:9D:90:D1:1A:63
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5c:94:60:24:de:c1:80:fb:06:22:c0:b0:ef:d7:f9:0e:fe:
6c:0c:5a:22:97:f3:33:ad:f3:9b:84:31:e7:fd:2f:fa:97:be:
aa:44:2f:d1:22:91:aa:73:a1:1a:07:b1:52:95:f8:0b:ed:39:
ea:15:ef:33:5c:30:7a:16:00:e4:7f:16:2c:c8:54:8b:ea:52:
39:ea:58:d8:68:17:11:a3:75:f9:7a:72:a9:9d:be:6a:d1:9e:
fb:3f:37:94:8c:47:d9:9a:e1:96:d6:c5:3c:cc:fc:3c:59:5c:
24:d7:7f:92:7d:f2:87:ac:5d:66:c8:20:40:df:2a:60:19:a0:
be:21:1e:e2:6b:14:d1:65:a0:b4:8d:86:41:ad:cc:51:40:eb:
76:b1:41:56:1d:4a:ff:99:f7:50:a8:e8:3d:46:31:ca:27:6d:
a2:b0:97:58:ee:d9:3b:26:97:93:c1:10:9d:30:e4:6a:58:07:
e8:f4:de:4a:26:e8:31:9d:05:2a:78:92:7e:8e:70:cb:81:a9:
d3:e4:57:fb:d0:28:30:b2:4a:34:18:a9:c9:ac:71:ea:42:bc:
84:93:e3:49:3e:5a:e9:bd:e2:a0:b2:65:2f:b6:d1:b7:87:4a:
bd:17:b1:17:61:43:17:44:e2:e7:6a:cd:b4:96:5f:8c:c3:bf:
a2:92:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:45 2026 by rpki-client