Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json)
Hash identifier: 1qABCuFaknJbVU/8ct3RAugyh4gvxuJkbwkgnwsZDp4=
Subject key identifier: A7:9A:69:6D:6F:34:75:45:F6:7C:59:15:F8:DB:C7:03:24:8C:86:75
Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Certificate serial: 019CE4ECAB4CB8AB08F653AE908D7E17D503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
Manifest number: 054C
Signing time: Fri 13 Mar 2026 02:00:41 +0000
Manifest this update: Fri 13 Mar 2026 02:00:41 +0000
Manifest next update: Sat 14 Mar 2026 02:00:41 +0000
Files and hashes: 1: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: lmCwnBJCZ8WJVf3AWgmwklpocRF3CMsjC94L8aE1wxs=)
2: iDtpVtTwYVksijrN6HIEl5X0bek.roa (hash: LToGh6bU1qAlZ0kYUZ6vCkNysm+SzStfP+9TRnHtZXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:ab:4c:b8:ab:08:f6:53:ae:90:8d:7e:17:d5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Validity
Not Before: Mar 13 02:00:41 2026 GMT
Not After : Mar 14 02:00:41 2026 GMT
Subject: CN=a79a696d6f347545f67c5915f8dbc703248c8675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:5e:af:63:f5:07:f6:07:a9:85:b2:a0:b3:
9c:f8:19:a1:2f:e6:61:95:7b:1c:b8:2c:8c:fe:bb:
25:3f:f5:46:a1:55:53:73:37:7b:0c:b1:15:49:a4:
b9:81:96:35:d7:ad:66:26:a2:01:89:04:75:23:70:
32:03:6b:e3:cf:c0:18:4f:b0:48:41:94:bd:3c:b7:
a6:2b:a6:2c:94:97:fb:2a:7b:f3:88:29:7b:5a:25:
23:84:d8:27:6c:7d:a6:52:bf:7c:a7:57:8c:c5:43:
7a:23:27:aa:4b:94:c4:b2:33:cb:da:51:ed:e9:9b:
ba:55:f6:69:72:6a:88:c1:15:bb:ac:c7:5f:e3:97:
d2:ff:23:38:5b:21:fc:e2:9e:f5:d9:a0:79:dd:e4:
b9:3b:59:62:09:c8:ab:b1:c0:1a:fe:1b:76:43:70:
45:24:2a:2c:72:8e:50:b1:dd:48:00:d7:95:90:34:
fc:28:b1:31:72:56:4f:b2:16:1b:11:0f:77:be:27:
2a:4a:45:eb:e5:68:a3:26:f0:21:a8:43:86:5f:3e:
1d:79:54:d1:52:fe:d1:a8:91:c0:66:4b:31:c5:db:
c7:2b:e2:66:d8:4f:98:93:80:5a:d4:1c:8c:67:df:
34:7f:16:4e:7f:92:3c:21:e0:6d:fd:7e:f9:76:5a:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9A:69:6D:6F:34:75:45:F6:7C:59:15:F8:DB:C7:03:24:8C:86:75
X509v3 Authority Key Identifier:
keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:51:f4:7e:14:12:ae:2d:f0:d0:8a:af:80:24:28:ac:40:9d:
62:27:0e:dd:bc:0e:79:94:f4:b4:40:5e:69:ab:cb:a1:5d:0a:
92:1e:68:ac:e3:73:f0:ee:53:c1:d3:63:d9:2d:5d:95:4c:ea:
0a:a2:c3:df:73:0b:f0:0a:ae:71:c6:ad:9c:a9:34:df:0e:8c:
11:56:0f:1b:02:8a:87:1b:99:44:89:4e:c2:8a:94:a3:d8:6e:
60:8f:65:77:4e:91:2a:b7:9a:8e:45:8a:d0:e6:20:19:7e:ee:
56:b2:8a:83:81:a3:67:63:b7:4e:78:dc:88:67:38:a7:c9:1b:
c0:b0:a2:6b:8f:36:8d:77:88:ce:11:52:5e:b4:e3:c8:04:d3:
a6:ef:3e:b0:8d:60:5e:75:ce:2a:82:d9:89:60:83:4f:f7:3e:
68:7b:1c:0d:4c:ad:9a:99:75:eb:f6:d4:4c:c0:cf:00:dc:f4:
56:31:a9:76:d1:7e:ec:b5:5f:8a:1c:4c:92:ce:a3:ef:7a:76:
04:f0:4f:90:33:63:26:bc:03:80:12:2c:78:96:27:a0:44:7c:
95:58:ed:0d:a5:5a:75:23:26:42:2b:a8:f6:e0:a0:84:55:dc:
28:f5:7c:20:0b:ef:59:64:e0:29:36:1a:ac:34:1c:cb:c8:86:
7e:53:5a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:49:51 2026 by rpki-client