Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: fDAVqTAAbKGDN9SELd4V8xvGfpjdEZ1CrPbQk+k/RW8=
Subject key identifier: 80:AB:9A:87:4D:51:0F:7C:7A:7E:BD:38:C1:A6:1E:CC:E3:3A:9E:53
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 019D09D4D1D0840DABA38C8826D6F217FEC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 180A
Signing time: Fri 20 Mar 2026 06:00:35 +0000
Manifest this update: Fri 20 Mar 2026 06:00:35 +0000
Manifest next update: Sat 21 Mar 2026 06:00:35 +0000
Files and hashes: 1: Lft1TVXiYVdikjn_A01iU-k02DE.roa (hash: AUhYpOdbzarhMkv1M+Fv4hjTQh+rQF7twSf3TVX7HXM=)
2: PejTwsBdKH5-f3Vp_HDi2lV40HI.roa (hash: sQMSKyXDXZzbEaxAsB9c8v4n+R0LYVRrVo36SmpYF40=)
3: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: LhsyNptY9xkPrTFvCn6b+d0fJ+2C6/phz7Eu2HE7viw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:d4:d1:d0:84:0d:ab:a3:8c:88:26:d6:f2:17:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Mar 20 06:00:35 2026 GMT
Not After : Mar 21 06:00:35 2026 GMT
Subject: CN=80ab9a874d510f7c7a7ebd38c1a61ecce33a9e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:fb:54:03:0e:a9:c5:22:2d:40:58:b2:aa:
e7:ab:44:e1:39:81:d5:b8:16:fe:29:2a:7b:ae:5b:
48:1b:64:04:c7:04:4e:3a:31:ae:e1:26:fb:1b:1a:
78:a1:15:36:96:a4:1e:bc:f0:0c:ce:e0:77:2e:65:
f5:74:66:d4:c7:4e:5c:65:a4:f4:73:e5:3c:60:72:
22:07:4d:f7:f8:6e:8f:f4:30:a1:ca:90:12:a6:8d:
8e:be:a9:d6:08:61:8e:3b:3c:71:29:c3:ff:de:98:
ad:7a:fc:ec:d2:4f:df:8e:af:c0:65:35:97:5e:bc:
13:4e:fe:23:8b:55:79:35:a3:33:be:6d:f1:46:0c:
fc:41:af:35:f5:b7:e0:9e:f9:3d:8b:14:7e:0c:c8:
ec:80:b9:f4:2c:08:43:5a:bb:c5:2f:4d:5e:8d:ad:
cd:70:03:17:55:0b:0f:a2:ef:70:88:14:24:d5:ad:
e2:43:31:07:09:2f:52:d3:a0:a2:2c:e7:a0:b8:18:
e4:81:f2:56:c8:97:2e:93:f4:65:d9:99:13:e5:08:
51:81:56:16:26:89:b1:5f:12:5a:f3:47:3c:3c:ef:
26:c6:8c:a4:5f:f7:3b:e0:72:b0:e7:f1:71:15:79:
de:de:00:d9:d7:3c:49:f9:03:45:5a:80:b2:10:f4:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AB:9A:87:4D:51:0F:7C:7A:7E:BD:38:C1:A6:1E:CC:E3:3A:9E:53
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:77:db:21:51:b4:88:ae:51:e4:0e:ea:dc:ca:4b:67:17:b4:
c3:d6:54:e4:e9:ac:f5:c9:58:b4:5d:ad:ea:6e:2e:9e:f6:7c:
cf:8e:cf:50:4b:9b:3e:1e:3a:0b:6a:f2:ce:73:97:27:c0:09:
8d:f3:15:b0:60:4f:a4:aa:8d:d0:23:3d:76:3e:6e:e9:11:83:
c0:c5:44:3e:30:a6:f3:8f:51:1c:f0:ea:cb:67:cf:9a:bd:03:
f0:5d:f2:d4:9e:48:9c:22:bb:17:a5:2b:6c:7d:e9:95:a7:a3:
7a:2b:37:9b:d6:6d:cc:14:6a:68:61:d5:ee:f7:ff:ce:c8:74:
41:77:69:01:4e:3c:c9:d2:4a:5e:c8:23:a9:bf:3e:fe:9b:d8:
e7:a7:0e:e7:6b:be:0d:ea:d9:04:a9:e2:cc:8a:94:f1:87:1e:
b4:ba:10:6f:4b:f6:72:2b:08:4d:72:8c:d6:ff:dd:65:6e:02:
2f:74:0a:7c:8a:97:7d:e4:92:0a:28:e8:66:23:43:bd:8b:6f:
a8:6b:d7:15:4d:d0:95:f8:10:4b:dd:4a:47:44:29:ff:7b:99:
0f:dc:d0:eb:7c:2f:bb:35:8b:3c:49:63:3c:3e:63:df:f9:8b:
f7:54:6f:bb:13:1f:f8:8b:1a:33:14:e9:7a:35:99:37:0c:0b:
98:dd:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 15:44:22 2026 by rpki-client