Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
File: YAG5U8a-H5GDHWilwBFcIODNf5o.mft (raw, json)
Hash identifier: Kz2Fee8phFHTpsQXJGZhrPD05EvZ8SobX2qBqEIf4W4=
Subject key identifier: 12:7B:76:F2:4E:FD:7E:E3:59:36:D3:D0:24:47:2E:11:11:E9:B5:F7
Authority key identifier: 60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
Certificate issuer: /CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Certificate serial: 019D386642552C74C14FC5F0CF15CC35A02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
Manifest number: 0873
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: YAG5U8a-H5GDHWilwBFcIODNf5o.crl (hash: 5H9OP6XSB7f+RRcIM3KtLn2tu4weitj7Of2Jkvf+ld8=)
2: sWQ5MFr-3Y0UZG4yuW0yjqbQ7Eg.roa (hash: I4OaI58SiKbwgQhwOAwtZE0NHDRmM5MSDXp++yDS4Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:42:55:2c:74:c1:4f:c5:f0:cf:15:cc:35:a0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=127b76f24efd7ee35936d3d024472e1111e9b5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fd:c4:ac:45:42:43:65:8d:34:94:91:4a:28:
5b:b3:77:f4:c4:8f:71:24:10:e5:0d:c4:a0:a3:4b:
e5:7e:fd:25:3c:16:bb:85:55:0d:9c:ec:85:fd:8e:
94:da:b6:d0:2b:eb:5c:ef:83:75:61:9b:34:3a:49:
c2:a0:c3:4c:d4:e7:ab:bf:61:db:70:1c:bd:79:fd:
ee:58:1e:92:1f:72:1e:87:cc:41:c0:ec:44:77:84:
03:65:00:63:38:2e:6e:6e:cf:06:ed:5e:25:a4:95:
51:17:00:3b:6f:f5:81:c3:33:ea:51:76:cc:11:58:
d4:52:4c:ad:20:68:41:b5:4e:e7:e3:5f:5f:bb:d3:
68:62:32:0d:c8:23:b6:6e:50:29:97:72:3c:9f:30:
3f:f5:92:60:72:10:94:a8:62:73:bf:51:82:57:99:
06:4e:79:30:44:54:38:a5:a6:b3:a9:1c:83:ff:a7:
78:84:0d:cf:3e:a2:dd:7f:14:53:68:42:2a:a6:91:
25:56:93:77:9b:f0:a6:4e:bb:6f:22:f3:2b:cf:07:
9b:d8:07:eb:b2:c2:2e:79:19:3e:59:8d:ac:c7:bc:
ef:38:94:a4:2d:3f:53:12:e2:6e:b8:77:81:cb:a9:
51:1f:0d:e7:cd:d9:9f:57:e0:a7:a7:fe:84:0c:e1:
97:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7B:76:F2:4E:FD:7E:E3:59:36:D3:D0:24:47:2E:11:11:E9:B5:F7
X509v3 Authority Key Identifier:
keyid:60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ed:2d:df:c1:aa:40:89:be:82:b2:f2:c2:a6:36:12:e1:7d:
5d:6a:a7:35:84:64:b2:d5:cb:4c:0e:af:12:fa:19:1c:9f:f8:
8c:cb:26:9c:1d:39:fc:a3:36:c3:5f:0b:ca:ca:14:ff:ae:69:
41:c5:25:85:42:28:b3:44:28:a4:09:38:f9:4c:61:5d:8c:a2:
a5:69:08:d8:bb:b5:94:d9:36:64:76:7e:d0:a6:77:ba:31:32:
09:b0:a1:cc:54:70:74:95:2d:24:80:ec:a5:e6:1b:c9:c6:a1:
18:b4:25:68:eb:6b:69:39:44:e7:51:00:1c:1f:c3:11:38:dc:
03:64:74:44:68:a2:75:1c:c8:3f:87:10:0a:ae:41:c0:52:5b:
eb:2e:9c:c2:44:7f:a7:3c:d6:97:f8:d2:49:3f:72:2d:c6:40:
51:ad:bf:6c:da:e5:e3:a7:3a:2e:18:59:8c:44:8b:f3:ba:6e:
90:d8:e4:c2:c5:fe:66:65:a3:78:bb:f2:82:f5:ca:2f:e7:cb:
20:0e:06:0b:6f:8c:1c:be:5a:f7:52:f5:f1:f1:6d:94:a4:7e:
a6:20:33:7d:8c:fb:6a:d4:2d:d1:cc:03:eb:7f:a3:29:16:04:
b9:09:4d:a9:e4:ec:65:89:30:57:00:28:4f:92:ba:fa:18:78:
c6:c7:57:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:20 2026 by rpki-client