Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
File: YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft (raw, json)
Hash identifier: P9O18QizuON9V5fKpq4qUKgnzUDVi+WYHieOcyzVDXU=
Subject key identifier: F5:B1:F1:8E:9B:E2:21:72:2F:1B:3E:A7:E2:1C:B9:A2:25:D8:FC:D8
Authority key identifier: 61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
Certificate issuer: /CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Certificate serial: 019D386603A453377D24F338CD1F6C9C9920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
Manifest number: 1018
Signing time: Sun 29 Mar 2026 07:01:42 +0000
Manifest this update: Sun 29 Mar 2026 07:01:42 +0000
Manifest next update: Mon 30 Mar 2026 07:01:42 +0000
Files and hashes: 1: YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl (hash: MCzZpOLKQ86S5VA1KW4f2oab8IXYaT7Ia8r5dLDAzLc=)
2: gJQzhId802-YJNx0WWaWWkM-fD4.roa (hash: Lrav2MOtvej8ZsEdP9SgEjv5mWkDtP7CfAPS8l/cHkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:03:a4:53:37:7d:24:f3:38:cd:1f:6c:9c:99:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Validity
Not Before: Mar 29 07:01:42 2026 GMT
Not After : Mar 30 07:01:42 2026 GMT
Subject: CN=f5b1f18e9be221722f1b3ea7e21cb9a225d8fcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:4a:1a:bb:f8:b8:80:b1:2e:4c:ed:75:be:
5f:d1:88:bc:31:ea:5e:f4:ff:23:a4:25:6d:fe:ef:
54:81:64:cf:0d:cf:92:31:31:a3:f0:49:f7:26:9a:
72:fc:c3:7d:30:e2:df:01:7a:52:da:98:22:0c:81:
7f:08:dc:a8:3d:d4:3e:de:f6:22:99:21:7d:80:c5:
de:be:62:fd:f1:98:90:3c:99:fe:54:ac:37:0d:ed:
d1:b0:90:40:3d:75:e9:10:02:fb:c0:05:2f:67:87:
55:12:a0:5a:b9:ef:61:94:ce:59:d4:10:d5:c5:84:
48:6a:a3:ba:0f:49:75:bf:66:fc:71:ca:27:45:4b:
3e:18:85:f5:05:ff:35:64:42:4f:35:58:49:2f:06:
6e:d0:e5:e3:c7:e8:f3:a1:90:5b:f4:06:a9:49:70:
61:ce:6f:0b:a3:7d:3b:7b:37:87:f6:cd:ee:a8:ed:
07:53:aa:82:56:11:1b:4d:af:43:32:24:60:c0:98:
eb:45:7f:30:f0:92:ab:95:3a:21:16:8a:15:45:83:
96:6c:2a:d5:d1:3b:56:56:69:2e:f3:7e:aa:23:c6:
95:85:fa:f1:4b:9b:ae:d1:7c:e3:ff:53:d0:c9:f1:
bf:8b:bd:d5:8e:8e:37:1a:17:56:80:bc:5e:5d:41:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B1:F1:8E:9B:E2:21:72:2F:1B:3E:A7:E2:1C:B9:A2:25:D8:FC:D8
X509v3 Authority Key Identifier:
keyid:61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:08:a8:0c:4f:28:23:9f:a2:dc:0a:74:81:1b:ae:28:90:d2:
48:28:d4:a1:5d:15:3d:54:a5:df:d1:c3:c9:a9:05:82:1c:05:
7d:e5:89:1c:fd:43:fc:5a:85:22:1c:99:87:d7:17:ef:e2:8a:
07:89:71:68:ca:ac:6c:7e:7e:0c:67:6e:df:6a:6b:5f:8e:06:
9e:ba:e4:5e:e8:1d:34:2f:d4:a6:a4:a3:37:46:75:0c:20:c4:
92:6c:45:86:16:e5:d7:bd:6f:88:28:68:c9:31:cb:ef:d4:3b:
96:91:44:3b:4e:06:88:c3:3e:41:2a:8a:af:1f:47:30:fa:ff:
80:d4:26:b2:c5:54:89:9c:78:2f:ee:2b:b5:5e:58:e4:44:d0:
0e:fa:22:0d:72:65:c3:f2:50:b4:33:11:5b:d9:a7:d1:87:9b:
85:84:fc:af:fb:11:0c:29:92:e8:d6:d7:d9:bd:4a:0f:7d:0d:
02:5b:ae:6b:08:51:3b:72:8c:56:1f:48:94:bf:e4:79:17:2c:
d8:ee:9b:5c:94:0e:e4:85:c1:3c:0b:12:42:f6:a8:83:6e:b8:
41:09:dc:73:0c:b3:51:75:28:1b:67:7d:42:8b:f0:1f:88:0c:
e0:db:b6:96:6b:ac:d7:7a:71:50:0a:4d:78:cf:64:bf:b1:89:
95:c5:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:38:58 2026 by rpki-client