Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier: XQgwtp/SNN0t9IeSgTtJ+PZKFR1Gs/c/V5Sc8FhBQ9k=
Subject key identifier: 2F:50:70:D0:AA:DC:7A:A5:6B:E0:BC:95:A4:66:FD:C9:0F:0D:B5:E2
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial: 019D371BD111DEBDEAD102F7D329C19B3152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number: 054D
Signing time: Sun 29 Mar 2026 01:01:02 +0000
Manifest this update: Sun 29 Mar 2026 01:01:02 +0000
Manifest next update: Mon 30 Mar 2026 01:01:02 +0000
Files and hashes: 1: TVT4_OBKA-2I4FrIkhh2iW24oPw.roa (hash: U1OVtJgMOPc/4XYbv8bLSVgA0GMg+CX+suR8Va/RqoY=)
2: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: fvbrXtfzRHqe5BnM4ukvIPjupuZvx4A4lc7ujw5hgU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:d1:11:de:bd:ea:d1:02:f7:d3:29:c1:9b:31:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Validity
Not Before: Mar 29 01:01:02 2026 GMT
Not After : Mar 30 01:01:02 2026 GMT
Subject: CN=2f5070d0aadc7aa56be0bc95a466fdc90f0db5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:6e:ac:c9:e1:9c:c0:b4:f9:4f:47:e8:5a:
0c:64:d3:b4:6d:f5:64:0d:30:24:14:a8:8d:21:2f:
55:22:f5:70:9c:30:6d:54:6c:8a:39:da:2f:72:d3:
86:e7:ea:c7:f1:3e:f7:76:00:82:0e:10:14:2b:ad:
83:ac:24:76:8c:11:17:53:d3:ee:eb:35:9e:06:7f:
c6:a3:fc:57:4d:58:8f:af:03:1a:07:e5:34:b1:8d:
74:c8:34:9b:eb:78:cc:12:bb:c5:73:78:c8:44:42:
e7:1a:cc:29:56:ad:1c:3a:77:67:43:2b:4b:55:8f:
a8:23:d2:9b:85:1a:79:9d:9c:f8:a4:b6:d8:60:db:
05:80:b6:c9:0a:71:19:15:4e:b9:db:b5:32:00:41:
e4:72:8d:37:b7:28:3f:4a:dd:4a:1d:db:8c:b9:02:
55:f9:3f:f6:85:a2:fe:dd:8d:aa:72:9c:32:94:96:
f0:1b:ff:fa:bc:fe:8a:72:80:91:cb:b5:45:9b:37:
bf:02:b4:13:15:3a:f4:58:c5:16:c6:af:30:ac:83:
7c:ab:b7:e1:41:6d:20:21:f4:7b:1c:7e:fe:c4:3c:
ca:b7:2d:53:de:59:75:bc:bf:0f:ff:59:48:6f:ff:
ec:0a:11:ad:e8:36:8c:a9:19:86:80:dc:ba:49:da:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:50:70:D0:AA:DC:7A:A5:6B:E0:BC:95:A4:66:FD:C9:0F:0D:B5:E2
X509v3 Authority Key Identifier:
keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:90:90:5b:5f:8e:d2:aa:cd:ed:35:be:12:31:39:10:be:9f:
36:72:cc:99:66:e9:31:c1:06:6c:8c:72:b6:44:68:4c:fc:ef:
8b:33:92:d1:47:a4:ca:c6:bb:d6:06:af:66:d6:1d:19:f5:17:
da:0b:b9:5e:0f:35:c2:36:3d:a4:16:ea:4f:69:ad:c2:fd:30:
89:7a:02:a2:fa:4c:38:f7:b3:47:03:c4:45:12:be:6e:63:3d:
4a:0e:50:ce:1a:1e:b0:97:82:a7:ae:ac:b3:62:5a:89:54:09:
04:02:b4:97:6d:d6:c1:b2:e6:4c:02:75:81:47:24:eb:fa:22:
ad:89:9b:97:7b:bf:93:b0:ee:f2:a3:97:68:95:ef:4d:c3:09:
ed:92:ba:a1:9b:4d:de:82:60:4d:11:58:3e:1d:cf:74:3f:12:
d2:0a:89:a6:98:e9:94:8b:61:06:fb:2e:9e:6a:42:d1:66:23:
a8:7e:ce:ec:94:fb:69:68:cd:74:e7:5e:e5:e9:09:6e:7e:4e:
ae:a2:07:25:67:52:87:d8:dd:24:6a:84:fe:af:0a:45:67:8b:
45:00:cd:e4:fd:c7:2a:cf:4d:a5:54:0d:31:d4:aa:fe:db:0a:
cd:16:41:3b:14:f8:3e:01:38:86:9b:f3:30:9c:6a:fd:05:94:
64:3c:0c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:39 2026 by rpki-client