Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
File: YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json)
Hash identifier: nLwpOJXhjNF5brDD96xsKvwybJVM45SkMl+osKvvSdo=
Subject key identifier: AA:1D:BB:F3:A6:E8:38:BA:72:05:33:0E:98:26:77:E1:DA:B6:D1:B2
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Certificate issuer: /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial: 019D37F78FE70B35A6556BFBF0FE8CAAB709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
Manifest number: 147A
Signing time: Sun 29 Mar 2026 05:01:04 +0000
Manifest this update: Sun 29 Mar 2026 05:01:04 +0000
Manifest next update: Mon 30 Mar 2026 05:01:04 +0000
Files and hashes: 1: B8RqG2Xxq5WGdSf7iNky-uGz4Vg.roa (hash: 9xOR3g7oJ2XNkjebEjWOcXDQwkDYeYBj7pv03VZ8aS8=)
2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: ky/EQ5zowLlmHoq1enCr9c6q8s1oxGCur1h2dQKiyHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:8f:e7:0b:35:a6:55:6b:fb:f0:fe:8c:aa:b7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
Validity
Not Before: Mar 29 05:01:04 2026 GMT
Not After : Mar 30 05:01:04 2026 GMT
Subject: CN=aa1dbbf3a6e838ba7205330e982677e1dab6d1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:84:80:2c:45:25:b5:c3:03:1f:d9:a9:89:
fa:d5:65:9a:48:0c:3b:81:68:08:d3:e5:06:07:20:
bd:fe:30:f9:36:a0:a6:b0:96:8c:0d:ae:66:0b:08:
3e:99:ac:02:85:72:b1:7d:55:19:77:84:20:4a:81:
98:38:91:cd:27:23:4d:7a:87:f5:78:ae:ee:f1:66:
8d:5a:fc:ad:bc:ec:d1:f2:b2:36:63:a9:ad:31:00:
71:47:0a:9e:d9:01:33:b9:c8:4f:5c:a0:5c:29:ec:
5e:b8:4a:df:69:8e:5f:99:ca:e1:66:67:61:fc:b4:
39:a1:60:20:59:07:bb:d4:fc:44:fb:c3:49:5a:46:
dd:43:16:da:67:2c:23:fa:13:17:48:50:5e:a7:6d:
b9:5b:0b:88:d2:73:92:c8:f3:22:44:38:4d:40:53:
3e:d2:06:46:8a:23:5a:14:02:04:cb:c2:19:f0:c9:
7a:84:05:e1:5d:e2:db:bc:51:0b:27:59:b7:77:97:
e4:e5:3f:67:55:83:2f:46:54:11:bd:89:70:0e:dc:
3c:9e:73:d5:bd:38:56:d4:7f:49:0f:2c:09:41:69:
2c:e0:8b:01:d5:30:de:d4:5f:19:0d:0a:21:ea:c6:
66:eb:42:97:28:87:32:f1:ca:d4:62:2d:ad:61:ff:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1D:BB:F3:A6:E8:38:BA:72:05:33:0E:98:26:77:E1:DA:B6:D1:B2
X509v3 Authority Key Identifier:
keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:90:04:39:fe:56:35:98:5f:a3:c9:1c:e7:b5:9b:56:ec:b8:
00:ac:30:f0:4a:00:7a:51:51:04:61:1d:67:21:c9:b9:c8:eb:
47:d4:4f:e2:61:e3:2f:35:41:bc:ac:30:9b:5a:3c:0f:3f:16:
e2:f7:b3:95:11:55:93:a1:c3:d5:03:99:37:38:3e:3b:80:af:
35:53:06:3c:e7:54:14:d7:a9:9c:54:ee:2b:d2:4d:8b:4a:e0:
5b:30:5c:ed:91:90:f6:a5:d7:af:76:73:52:b3:60:8f:d7:de:
50:79:5a:cc:cb:1c:a9:7e:48:91:55:80:88:aa:9c:ce:ff:03:
c2:38:f0:56:f6:8e:2a:85:9b:86:51:d7:73:f4:cb:b7:f2:49:
25:50:e6:82:f3:ab:05:a2:2a:77:64:d4:8c:88:49:1d:f4:9e:
3f:6e:83:fd:77:e6:b4:33:27:2f:40:36:c4:5e:ae:88:d2:fd:
6f:94:37:0b:74:85:ab:6d:80:89:6c:a0:cb:b1:40:10:64:ed:
08:81:b9:82:97:a4:b8:7a:83:9b:e0:8d:22:9a:59:49:72:b3:
61:f2:0a:23:60:62:f9:bd:6d:87:33:af:4a:f4:a7:41:db:32:
2e:56:ea:75:fa:6c:36:15:86:77:1c:7e:e5:06:f3:e1:5f:60:
f6:5e:15:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:28 2026 by rpki-client