Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: OvBDs/Vs8d0X9Lf+IzjpK0QBdnBvJ0l9UrdztqlYQo0=
Subject key identifier: 25:DE:4E:62:89:48:31:71:0E:27:7B:91:B6:83:8B:AF:74:E4:7A:4F
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 019CB8820F4631AB6CBA92C1353DB92EC732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: 0242
Signing time: Wed 04 Mar 2026 11:00:57 +0000
Manifest this update: Wed 04 Mar 2026 11:00:57 +0000
Manifest next update: Thu 05 Mar 2026 11:00:57 +0000
Files and hashes: 1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: llI8zfdG1ICiXDGZdtVvQx6F/dgN7DU76zOaW7TmiVU=)
2: dlAKs2OGLWJirE63ZpdfiOJ1IDw.roa (hash: 1fH4y0wj0PpFc5LsMAZ3oXLqRp58JujDDG0+JToDmTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:82:0f:46:31:ab:6c:ba:92:c1:35:3d:b9:2e:c7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Mar 4 11:00:57 2026 GMT
Not After : Mar 5 11:00:57 2026 GMT
Subject: CN=25de4e62894831710e277b91b6838baf74e47a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:a1:e7:25:bf:f0:4d:00:60:8d:59:cc:ac:
95:9f:ac:f9:13:a8:0d:8f:48:06:83:17:44:1c:97:
ee:f3:1a:87:64:86:d5:07:2b:c3:03:9c:99:d4:29:
a2:80:f4:3c:5e:51:d6:19:4f:e6:c9:7d:3e:15:c0:
1e:37:57:23:c8:2d:a0:0f:da:8d:21:4d:04:a3:c0:
b4:ee:bf:13:1c:08:db:6f:6e:2a:8e:0b:c1:9d:b1:
82:e0:d4:12:22:9f:fb:15:35:21:52:24:c0:2d:59:
e7:ac:83:2b:cd:b9:51:b1:16:8b:de:2c:ba:00:a8:
a6:2b:12:27:34:86:f3:82:64:07:37:a5:02:82:63:
ac:fa:a0:9c:71:07:73:b2:3e:3c:84:a9:b4:3e:57:
ec:d0:11:9e:bb:70:54:78:8a:1b:c9:4e:03:68:74:
3d:fa:57:2c:7f:38:e7:87:5f:42:2a:da:82:d7:67:
33:16:2b:55:73:f3:94:07:69:92:ed:fb:59:e5:e5:
f6:ea:fb:21:1a:fd:57:96:36:05:e1:d5:42:c4:7f:
14:83:49:12:44:9d:b8:e5:36:5e:d8:34:72:0a:0b:
96:2d:95:b6:61:5d:40:87:53:ed:f5:ab:9f:68:4c:
9a:64:02:22:21:27:f2:14:55:27:b2:83:40:ae:72:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DE:4E:62:89:48:31:71:0E:27:7B:91:B6:83:8B:AF:74:E4:7A:4F
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:42:ac:12:d7:aa:13:ef:9b:57:58:41:6f:85:31:9a:23:57:
9d:de:43:9d:26:eb:63:26:46:a8:64:82:03:89:00:c8:10:40:
ca:a2:f4:13:78:1b:c2:6d:b6:2c:34:5f:e8:19:4a:8c:13:71:
1c:f9:10:f2:ff:a3:13:71:5d:15:67:92:9b:ef:d5:e7:94:7d:
11:f4:58:fa:7f:c2:fa:8e:c4:74:81:35:48:25:a0:07:2c:55:
0a:1c:30:b3:72:aa:47:0c:3c:3c:00:8a:d2:b2:e5:f4:b6:d7:
0d:2e:9d:bf:2d:a3:5a:cf:14:5f:47:6d:03:5e:ed:3d:54:39:
5d:aa:a5:f6:af:18:c1:1f:47:ee:e8:6a:0b:ad:74:26:cc:18:
c0:0d:ec:5e:25:39:17:d7:33:d8:53:df:ad:11:87:7c:a6:ce:
40:d2:59:2f:ee:dc:c0:d3:69:8e:ed:28:87:b5:25:63:59:c9:
00:2b:06:0a:90:28:b9:f7:7d:d1:57:4c:d1:24:27:23:12:fb:
99:b6:a5:89:6c:86:b6:3b:55:1e:52:b3:58:e5:30:60:40:d3:
62:0f:c8:3d:fd:6f:5f:de:13:3b:84:42:85:61:54:9e:5a:3e:
c6:f6:79:71:0a:2f:9d:e1:57:1a:ae:a4:9b:a3:41:4b:91:e1:
f7:be:8c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 21:06:36 2026 by rpki-client