Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File: YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier: niAO4iJc5kHvRyvrKhr2fjvAoVWBcnt6JPkfneFeDL8=
Subject key identifier: DC:F8:AF:29:EB:40:28:3A:C3:D5:C4:E9:86:EF:84:C6:03:AC:24:B5
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial: 019CAB3441A14B04C8642169678087678A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number: 1725
Signing time: Sun 01 Mar 2026 21:00:54 +0000
Manifest this update: Sun 01 Mar 2026 21:00:54 +0000
Manifest next update: Mon 02 Mar 2026 21:00:54 +0000
Files and hashes: 1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: /TCh5gJ1iKf9/M8B7MhJVemKlJ4v65SQRIkNHMBYzfA=)
2: _i3dzwW_EszihKFaFxYgzMY5p6w.roa (hash: C9SSGdcc7YzzmpkvenG+iGlQfE2KKjV6QnZm59ExRA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:41:a1:4b:04:c8:64:21:69:67:80:87:67:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Validity
Not Before: Mar 1 21:00:54 2026 GMT
Not After : Mar 2 21:00:54 2026 GMT
Subject: CN=dcf8af29eb40283ac3d5c4e986ef84c603ac24b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:96:c0:5b:b1:8d:4b:30:f4:13:93:ec:f9:
0c:c8:ec:b6:8e:0d:bb:0b:e5:97:1a:c5:b5:68:2b:
ec:4a:ad:ca:db:b5:3e:a1:a0:77:49:f2:31:9e:30:
c6:9d:ed:65:60:84:a9:6d:fe:a7:e4:96:b1:3b:d4:
31:ca:b3:25:05:98:e7:10:56:86:e0:ce:27:e7:5b:
fb:96:71:7c:0b:42:41:ab:30:62:04:8c:2b:24:a5:
b0:b4:fc:e3:c3:fa:92:7f:0f:90:ce:36:95:23:1b:
80:de:3c:da:c9:12:5b:c9:fc:6d:9f:97:40:68:d0:
ee:2d:37:d3:b6:2b:8a:16:fe:42:d9:53:2f:95:db:
28:ac:9a:aa:b0:b9:e4:39:ee:0a:39:f4:44:8c:59:
b2:d5:66:e6:6e:51:29:ec:d1:a7:96:9d:2f:ce:86:
be:e4:67:d7:b4:5f:ce:87:9b:fc:5a:10:16:49:ce:
96:94:04:a8:00:1c:37:a0:92:f9:6b:42:01:45:0f:
f5:b0:14:0f:f2:f8:81:7e:13:5c:4e:c0:39:98:d0:
7c:5b:a0:6b:5e:64:fe:c4:c3:06:e8:dd:30:be:ab:
9a:7a:6f:e1:2e:b0:75:78:a6:99:a3:c7:90:01:0d:
59:5d:43:32:8d:5b:49:92:53:49:43:48:d7:aa:90:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F8:AF:29:EB:40:28:3A:C3:D5:C4:E9:86:EF:84:C6:03:AC:24:B5
X509v3 Authority Key Identifier:
keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e1:bf:65:70:65:33:09:c9:d3:43:68:1d:72:47:c4:39:9a:
3e:07:4a:9d:8b:a2:a1:f5:f5:b8:8c:da:98:92:fa:5b:19:df:
33:dc:a4:13:74:f8:64:f6:66:24:65:ba:dd:0c:ff:5b:66:d4:
80:bc:59:60:6d:b1:94:57:82:1e:d6:97:59:3c:6a:f7:36:cf:
b9:1e:7d:fa:b0:ef:e5:ce:b0:01:f9:ad:19:96:d5:20:8a:f7:
17:17:d9:c8:06:f6:b5:1d:58:e9:e4:bc:b1:b0:a0:85:53:c0:
8b:21:0e:3b:6b:aa:c2:79:64:17:84:d4:78:d3:46:d7:d6:ae:
16:24:b4:53:5a:15:0b:23:59:ac:74:17:42:6a:5b:59:db:c0:
57:6d:59:ed:46:32:cf:05:e2:31:6e:75:fa:d4:da:e3:8f:8f:
c7:8b:f2:70:a0:5f:0c:29:01:e6:db:aa:83:ae:22:96:df:62:
aa:bb:83:08:01:42:b3:07:b6:80:cf:50:30:e7:e8:a6:e5:c0:
1f:33:d0:37:09:8d:d2:04:b8:fe:cd:60:b2:e4:6e:d0:a2:8a:
c8:5c:47:3e:7d:7e:8e:aa:7e:5f:3f:63:10:20:4f:21:2f:75:
7a:ce:40:10:85:fb:28:36:8a:44:0e:26:59:90:d4:60:45:a0:
35:76:a7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:08 2026 by rpki-client