Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier: cLXvvV5wGL6tMhSFTkRSVXnxyjA7R80zlNPFawv8vcA=
Subject key identifier: F7:C6:49:85:D4:3E:68:E7:EF:F2:22:C8:2F:76:59:60:1F:12:24:BC
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial: 019CC3AA53C8D2C6A4D7F53EAB3EAE80A156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number: 0425
Signing time: Fri 06 Mar 2026 15:00:45 +0000
Manifest this update: Fri 06 Mar 2026 15:00:45 +0000
Manifest next update: Sat 07 Mar 2026 15:00:45 +0000
Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: yp+J6mx4VcQtJiA/RMjVQek7EWtI9XVjVDisss8ylUw=)
2: nsMVjB3dBsEs4QDP-UqrSgiiMZk.roa (hash: 4KH9ak7vbK8YvGmfh6MjtuXURmPLUowjhWOo+NHtQgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:aa:53:c8:d2:c6:a4:d7:f5:3e:ab:3e:ae:80:a1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
Validity
Not Before: Mar 6 15:00:45 2026 GMT
Not After : Mar 7 15:00:45 2026 GMT
Subject: CN=f7c64985d43e68e7eff222c82f7659601f1224bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:4f:3f:cc:7f:ea:12:96:d1:8c:7c:d9:2b:
c9:93:ec:cf:d3:03:54:3e:92:c1:9d:07:5b:2d:09:
54:c7:99:77:a5:58:01:7a:ed:36:bf:03:47:82:b0:
fb:3e:33:58:09:65:03:3a:a1:55:15:25:79:b1:b9:
cf:e6:19:e3:8f:1a:3c:09:a6:b3:28:cc:2b:94:77:
85:6b:46:9b:ea:7e:44:f3:ca:f5:ab:6e:24:a9:3a:
d9:0b:16:d1:81:f1:00:2e:51:c1:9e:bf:67:6c:90:
cf:a0:5e:ad:eb:40:f2:d7:08:63:50:0d:e1:1c:44:
4c:41:8c:2e:40:ae:fa:a4:04:b6:90:a1:c8:df:7a:
c7:47:bf:a5:33:ec:08:89:38:ae:39:fc:68:bb:b3:
10:13:1b:04:8a:c3:3b:cb:ed:6e:a6:a2:07:90:ad:
bc:15:70:28:6e:eb:eb:ae:14:cf:f4:05:9d:76:e3:
18:44:61:26:68:11:b7:a3:80:41:2f:8d:0c:49:75:
a9:14:bc:b1:a8:ba:f8:58:b5:f4:9b:ed:eb:0c:59:
8c:0a:3b:c7:0f:1a:d4:6b:b1:b7:d6:71:bf:4f:7e:
dc:15:0c:c2:d9:0e:c4:e6:48:e7:2c:91:c8:55:34:
d3:e2:e9:7f:93:4c:e6:d5:f4:9f:97:d8:9d:68:91:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C6:49:85:D4:3E:68:E7:EF:F2:22:C8:2F:76:59:60:1F:12:24:BC
X509v3 Authority Key Identifier:
keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e6:22:7d:13:b0:ed:f2:3e:e0:d3:cb:a1:75:87:02:fa:a0:
4c:78:9b:c9:a1:fd:eb:df:74:80:e5:1c:35:10:d6:7d:56:77:
ef:5e:d6:98:05:fd:34:a0:2d:f7:9e:f6:2d:a3:6d:84:13:22:
e4:55:ba:63:1a:45:b4:85:17:06:83:5d:af:52:c2:07:cb:4b:
7c:be:96:ac:aa:85:0c:12:2f:79:3c:d1:7d:08:63:38:96:a2:
f1:9d:b1:2c:6c:42:0c:f7:e3:63:8e:b0:7a:39:4f:9e:43:4c:
96:89:15:52:c7:f8:16:50:02:58:de:36:00:35:8f:5d:80:71:
ec:68:62:ae:8a:5e:4c:d8:67:57:a1:a9:af:22:75:a2:f8:f4:
7d:d7:c2:e0:2e:ea:a1:af:83:31:4d:a0:4e:15:d5:68:cf:b7:
d8:c6:b7:6f:ad:5f:90:30:1b:8e:e1:e6:e6:b4:c0:29:df:97:
0a:67:5d:d5:25:7b:42:a6:50:b7:36:a6:fe:2d:c9:3e:cf:ba:
d8:35:2f:10:39:19:e9:e2:4a:98:c3:d2:df:c3:eb:da:4e:b4:
ee:8e:20:31:18:74:74:7b:02:9e:eb:a7:6b:9f:e9:2d:25:eb:
b7:9c:dc:76:59:ab:e9:5b:64:2f:be:0f:c5:eb:8d:30:94:ab:
c3:e9:7a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 17:04:07 2026 by rpki-client