Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: HScaWVfVeNC2gpeP21GPvlz08nCBSpAWx+LHovPfFGs=
Subject key identifier: 16:D6:9C:6F:73:27:B7:5C:05:67:13:BE:4F:83:5E:9D:7C:4C:1A:B0
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 019CAA2169834FE6F865E5DC121E61A6273D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 16E1
Signing time: Sun 01 Mar 2026 16:00:42 +0000
Manifest this update: Sun 01 Mar 2026 16:00:42 +0000
Manifest next update: Mon 02 Mar 2026 16:00:42 +0000
Files and hashes: 1: 9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa (hash: DwCSayZkRcTecU+QYNWzkQO84K94CzpgnweIdh3T7XA=)
2: ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa (hash: SYbuwV9RF98H2wnwET3rqVG/OV1l8TgwPl32TdMZOp4=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: CI5bH8RmdYek0kH1RYv5nmsw1bui55DbtGJY8/voMSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:69:83:4f:e6:f8:65:e5:dc:12:1e:61:a6:27:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Mar 1 16:00:42 2026 GMT
Not After : Mar 2 16:00:42 2026 GMT
Subject: CN=16d69c6f7327b75c056713be4f835e9d7c4c1ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:af:cc:92:ff:52:85:c3:f1:82:94:e8:58:
5f:60:90:18:6b:b9:59:c8:e1:c2:45:fe:2d:c8:d4:
49:08:b3:7f:49:e0:52:94:38:ff:ee:47:77:91:33:
ec:53:bf:23:c5:80:1f:05:dc:ca:93:50:2e:bc:be:
36:f6:ed:c3:5e:43:36:a1:17:28:d5:ca:65:ca:38:
9b:72:e4:81:5b:5c:f6:2f:53:68:40:1b:40:cf:6e:
ea:71:50:63:a5:f2:1c:fe:9c:72:ab:5a:c7:e9:1c:
6b:9d:f7:35:e6:80:be:ab:77:66:db:b6:ac:82:8a:
be:8f:0b:fe:51:90:d0:1e:3a:93:12:f4:49:1d:71:
b7:2a:0e:65:cd:de:1c:dc:8b:30:31:46:18:e5:b5:
23:93:94:aa:eb:d3:b0:fe:f5:b7:b7:f6:2b:7b:3b:
58:77:18:6f:90:6e:5c:e3:d0:09:f6:5e:f0:58:5e:
b1:05:f6:6f:52:07:45:98:ab:04:29:3d:9e:6b:64:
67:f3:d3:cc:b7:9b:96:b8:2c:df:67:fb:e1:f8:e2:
59:2b:33:97:01:d0:53:3d:8c:03:7c:a1:37:74:0f:
4b:88:53:b4:fd:85:c5:26:29:6c:fc:52:23:48:39:
f9:08:49:1d:12:73:d6:c1:0d:63:bd:a9:97:0f:0f:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D6:9C:6F:73:27:B7:5C:05:67:13:BE:4F:83:5E:9D:7C:4C:1A:B0
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:99:db:b4:09:0f:c5:10:7d:59:82:54:e7:9c:c4:d8:90:05:
d0:b8:23:2e:9d:ae:96:a9:bf:cf:ab:b9:69:79:8e:8c:ed:8a:
04:01:f2:98:a9:58:07:57:26:42:47:de:83:c8:19:d9:46:77:
cf:92:e9:2b:12:b4:13:bc:97:7f:52:81:43:eb:6d:b4:de:fc:
55:93:c4:6e:02:2a:fc:5f:bd:6b:a8:9d:62:4b:6a:8e:78:58:
cf:5c:ca:c1:0b:58:1c:70:f2:33:45:91:4a:ee:9a:6b:cf:43:
4e:59:f5:85:fc:00:aa:04:2b:1c:3f:df:4e:39:fe:80:b4:42:
73:73:f5:8a:eb:49:26:e5:ae:2b:42:42:d9:b0:3b:c2:61:78:
4b:da:35:a2:05:3a:fd:80:38:64:4d:ed:f6:a7:ae:fa:f5:38:
88:e8:e3:80:f2:8b:77:f4:39:96:35:52:4b:08:9d:52:56:8a:
98:93:f6:a7:cd:8d:66:74:5a:ad:27:c9:6e:8f:60:0c:5b:92:
32:27:3c:50:97:9d:db:cc:5f:c2:19:86:1e:9a:65:9f:40:65:
f8:db:1d:8d:c6:0e:f8:0c:98:61:25:ac:c0:71:b8:ab:f5:6a:
44:0f:66:5c:55:fc:1e:d3:0f:62:98:1b:a6:7e:3b:0b:eb:e3:
1e:59:d1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:44 2026 by rpki-client