Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: LWEu3NcAmJDfit1Mujm1z/eNYqhXube6kh/5TViKkac=
Subject key identifier: 07:8B:D7:73:F7:2A:96:AD:AC:51:F3:42:9F:03:16:E6:41:FA:67:33
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 019CABD9ACB23217159513306BA9C15570F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 04C7
Signing time: Mon 02 Mar 2026 00:01:35 +0000
Manifest this update: Mon 02 Mar 2026 00:01:35 +0000
Manifest next update: Tue 03 Mar 2026 00:01:35 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: BrSy7i58rdjw7BTGGyky+t4IuUXe325LMALDwfv5lp4=)
2: yjWJBP_-NJfhexDZzlwqedaPyY4.roa (hash: SkEjGblzIkRFnt59eOfa2NG/dhlC1N31bem5GR7D9p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ac:b2:32:17:15:95:13:30:6b:a9:c1:55:70:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Mar 2 00:01:35 2026 GMT
Not After : Mar 3 00:01:35 2026 GMT
Subject: CN=078bd773f72a96adac51f3429f0316e641fa6733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:48:72:df:fb:3d:8f:90:f4:f0:7a:5d:a4:
ea:7c:e2:d7:0d:47:5c:64:0c:39:dd:bf:21:e2:d5:
66:be:c9:af:1d:5b:9f:d6:fb:9b:a0:cc:f8:f7:25:
fe:90:7e:28:fe:cf:b1:aa:07:12:5a:e9:4c:33:79:
1d:0b:88:09:82:64:d0:86:d7:2b:45:db:37:5c:70:
96:44:f2:a4:bc:62:92:8f:7b:63:e7:3e:8f:58:0d:
5c:40:1c:ab:e0:40:bb:2b:bd:06:8c:67:26:af:b2:
e6:3b:21:3f:0d:13:19:e3:ba:06:58:88:fd:5e:35:
3e:80:44:13:01:40:73:70:4f:ac:c2:a8:c5:88:fc:
f8:4a:14:17:fd:c9:57:8a:cc:13:2c:8d:d2:63:a5:
d9:c1:28:7d:18:1b:25:3e:ab:3c:d8:dd:e1:0d:e6:
fe:ac:60:3b:95:61:ed:1b:85:80:aa:fe:1e:93:f2:
d8:57:18:6f:c2:a0:6e:66:cd:9d:ef:e6:8c:2d:a5:
b7:32:70:29:8d:dc:67:aa:01:47:f5:30:c2:8e:29:
9c:42:fe:09:b1:b3:7a:10:74:05:4c:36:20:b5:42:
5f:51:aa:65:29:40:fb:ca:2a:7e:c1:3f:f4:50:ff:
9d:7b:23:a4:d6:5d:48:b5:c2:e3:88:6d:ca:29:fc:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8B:D7:73:F7:2A:96:AD:AC:51:F3:42:9F:03:16:E6:41:FA:67:33
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d3:ba:f7:a2:d3:21:6e:fe:9d:99:6f:8c:5b:0c:f3:c1:0c:
ae:0f:0f:45:db:4c:85:ca:16:e8:db:e0:84:7c:84:cc:ae:bc:
b0:14:b7:a5:fa:2c:57:f9:6b:1e:0b:1e:d7:c7:47:71:37:a9:
99:32:d3:cf:eb:d3:73:0c:f6:20:fb:3b:a2:ae:65:c5:3a:2d:
21:4a:d8:09:e2:90:da:ba:39:81:4f:51:01:4e:ed:57:af:92:
0e:c7:08:57:26:b0:a1:ce:49:1a:5b:3b:0f:1c:2c:a7:4f:23:
53:44:4d:07:7b:12:66:2a:e0:0b:9f:bc:a5:e4:63:08:0b:e3:
4d:48:ec:d9:c7:85:3e:53:1c:1e:c7:46:67:69:54:e4:fd:d9:
1d:c4:8d:38:b5:9c:9e:10:51:66:32:af:dc:de:07:39:2e:3c:
34:77:30:19:9b:76:a5:bd:88:b0:7a:9e:0d:ca:3a:78:79:40:
1b:97:9f:aa:2a:b9:1e:4c:5d:b1:46:89:b0:88:02:73:b9:0f:
6d:33:f5:9c:47:5d:b3:7d:56:ca:6b:8d:df:68:3a:8a:92:18:
ab:4e:03:27:0c:d9:20:5a:a7:d5:9b:6a:cd:90:82:49:b6:2c:
4b:be:3d:b2:b1:f5:8c:fd:e8:fe:55:d9:44:76:55:87:84:e5:
07:c7:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:56:54 2026 by rpki-client