Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier: q/UBSY6KC1W05aRrWKXjdbCNF6b9eGLi/z2No+g7am0=
Subject key identifier: C0:D7:6B:F2:B1:0F:DF:08:0B:DE:AE:7F:07:13:F3:52:66:EB:EE:EF
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial: 019CAB6BA274F6FCE6ECF13DD2D7DD0A5315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:01:23 +0000
Manifest this update: Sun 01 Mar 2026 22:01:23 +0000
Manifest next update: Mon 02 Mar 2026 22:01:23 +0000
Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: /dN9WPX/lggkv8vWyR2Lj9+pgWP7BiLzdhHHuKxEvCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a2:74:f6:fc:e6:ec:f1:3d:d2:d7:dd:0a:53:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Validity
Not Before: Mar 1 22:01:23 2026 GMT
Not After : Mar 2 22:01:23 2026 GMT
Subject: CN=c0d76bf2b10fdf080bdeae7f0713f35266ebeeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8c:46:ae:a7:fb:dd:34:91:1a:f3:18:27:9c:
21:65:36:13:c8:74:28:25:17:95:cf:8a:ff:f4:7f:
5d:b7:1a:9c:7e:8f:35:c5:23:0f:54:ee:39:00:c8:
d2:6d:0c:a9:1d:24:95:6e:b5:79:46:12:e6:dd:c9:
a4:fe:5f:a9:8e:f5:bc:94:b1:30:bd:5c:f1:fc:22:
8d:5f:c8:af:77:10:5c:5b:41:e1:fa:89:eb:9c:c5:
55:3a:bf:9b:29:91:52:21:2e:35:2c:83:f7:f7:d4:
e1:fe:e4:ca:d9:5b:f1:b4:f0:28:20:c6:c1:a5:bf:
67:c1:22:dc:79:92:ff:7d:86:02:ac:4b:d8:e6:a4:
f5:1c:23:e9:69:7d:83:de:f9:89:90:37:88:5b:a5:
0f:92:03:19:18:26:e3:20:fa:1b:e7:e1:62:a6:a8:
53:02:7e:3f:c5:c9:be:0e:07:d7:d2:cb:25:4e:23:
1d:86:6d:f1:c2:4b:0d:80:5d:7c:f7:88:bf:13:2a:
e3:d3:31:20:62:cf:26:d3:66:b8:b8:04:9e:ef:5c:
5a:09:32:5e:cd:95:d8:1d:21:7b:43:96:8b:c7:33:
56:de:86:93:93:75:2d:05:d3:52:67:49:ba:88:a8:
2c:04:c8:1d:2c:63:bd:c1:67:1a:67:14:f8:2c:0e:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D7:6B:F2:B1:0F:DF:08:0B:DE:AE:7F:07:13:F3:52:66:EB:EE:EF
X509v3 Authority Key Identifier:
keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0a:73:d7:26:59:28:2a:4c:ab:76:f8:79:af:32:ff:a0:5b:
24:ef:15:e5:1b:49:a6:c4:9b:17:5a:a7:bc:9d:7d:2b:a3:bc:
af:8e:bc:78:f5:e0:90:e4:04:5d:05:8d:60:9d:c7:ed:ad:fd:
00:f6:b1:7a:ff:99:45:d6:7c:6c:e9:f7:00:4a:6d:b7:a2:c5:
e9:42:89:4a:8b:77:89:55:a2:f8:53:55:91:a5:da:01:93:4e:
13:52:6f:74:71:79:dd:1d:e5:c0:06:4f:8f:f2:5a:3c:13:83:
8e:18:fc:78:fa:5c:5b:ce:53:82:05:9a:0a:56:1b:18:54:2d:
de:f8:24:c9:b2:e9:8e:b1:30:69:3c:2f:c0:6e:52:0b:74:dd:
4b:dd:05:cf:46:71:63:b3:79:53:1d:59:be:62:e3:72:62:2c:
ef:fe:ac:39:1b:81:9f:d4:17:5d:a7:5e:69:73:b5:1e:00:84:
55:43:23:41:82:6a:69:08:a8:31:7e:9b:db:65:a6:a6:6c:e9:
93:77:4e:f6:ae:c7:1e:ae:c8:30:13:07:a8:96:36:f7:f7:73:
15:ea:f4:7e:13:c0:1f:7f:3d:c3:69:cc:f5:33:c3:c2:1f:85:
97:7a:3a:65:f0:ea:b7:2c:75:d4:d2:0c:cd:02:1d:d1:45:4f:
62:c6:40:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra6J09vzm7PE90tfdClMVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNWRkYjc3Yzc5MjZmNTc3YjAwYWJjZDNkNTJmNDJjOTIw
Mjc5Y2QwHhcNMjYwMzAxMjIwMTIzWhcNMjYwMzAyMjIwMTIzWjAzMTEwLwYDVQQD
EyhjMGQ3NmJmMmIxMGZkZjA4MGJkZWFlN2YwNzEzZjM1MjY2ZWJlZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYxGrqf73TSRGvMYJ5whZTYTyHQo
JReVz4r/9H9dtxqcfo81xSMPVO45AMjSbQypHSSVbrV5RhLm3cmk/l+pjvW8lLEw
vVzx/CKNX8ivdxBcW0Hh+onrnMVVOr+bKZFSIS41LIP399Th/uTK2VvxtPAoIMbB
pb9nwSLceZL/fYYCrEvY5qT1HCPpaX2D3vmJkDeIW6UPkgMZGCbjIPob5+FipqhT
An4/xcm+DgfX0sslTiMdhm3xwksNgF1894i/Eyrj0zEgYs8m02a4uASe71xaCTJe
zZXYHSF7Q5aLxzNW3oaTk3UtBdNSZ0m6iKgsBMgdLGO9wWcaZxT4LA6XtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDXa/KxD98IC96ufwcT81Jm6+7vMB8GA1UdIwQY
MBaAFGFd23fHkm9XewCrzT1S9CySAnnNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMDViOGEtMzU2OS00ZTMzLTk0MWYt
YjBkYzJlMjIxMWViLzEvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMDViOGEtMzU2OS00ZTMzLTk0MWYtYjBkYzJlMjIxMWVi
LzEvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgpz1yZZ
KCpMq3b4ea8y/6BbJO8V5RtJpsSbF1qnvJ19K6O8r468ePXgkOQEXQWNYJ3H7a39
APaxev+ZRdZ8bOn3AEptt6LF6UKJSot3iVWi+FNVkaXaAZNOE1JvdHF53R3lwAZP
j/JaPBODjhj8ePpcW85TggWaClYbGFQt3vgkybLpjrEwaTwvwG5SC3TdS90Fz0Zx
Y7N5Ux1ZvmLjcmIs7/6sORuBn9QXXadeaXO1HgCEVUMjQYJqaQioMX6b22Wmpmzp
k3dO9q7HHq7IMBMHqJY29/dzFer0fhPAH389w2nM9TPDwh+Fl3o6ZfDqtyx11NIM
zQId0UVPYsZAnw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:10:17 2026 by rpki-client