Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: myTv2Ip9OTPiLYqTFTvPQgCQqYZsg+WweA2IUlrf40o=
Subject key identifier: D1:9B:A0:54:C6:38:F4:BF:ED:D1:51:28:DC:5A:4E:60:AD:2B:55:FB
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 019D38661ED7921C92560BE3620E0A243380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 07:01:49 +0000
Manifest this update: Sun 29 Mar 2026 07:01:49 +0000
Manifest next update: Mon 30 Mar 2026 07:01:49 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: pEbvYU0BJ6GKtiIW28fR2ZFqxiZC4ELU8dRH4ujRvo8=)
2: qdhzDXuwEXMKIhcBtC--OVRDYRs.roa (hash: iT11iYdlbhQ14x4ERQHAeOODlysNDcwshKAALWJPnaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1e:d7:92:1c:92:56:0b:e3:62:0e:0a:24:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Mar 29 07:01:49 2026 GMT
Not After : Mar 30 07:01:49 2026 GMT
Subject: CN=d19ba054c638f4bfedd15128dc5a4e60ad2b55fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:67:d7:ee:70:47:05:00:20:4a:0b:1f:31:
35:a1:a3:00:95:ef:83:92:4e:29:7b:48:46:65:9c:
47:49:06:6f:11:36:ef:a0:1f:80:40:62:f3:c1:e2:
57:ec:4b:ea:ef:b1:49:45:5c:c4:26:eb:c3:0d:43:
eb:99:63:0e:db:ec:94:74:31:45:5e:1d:13:1a:36:
75:07:9d:c2:bb:fd:75:b2:81:bf:ca:a5:55:5a:1e:
eb:23:2d:8c:46:1e:28:01:00:53:70:cb:63:0e:25:
45:f0:70:e5:67:b1:d4:81:1d:df:2b:c9:9f:aa:f8:
cc:a2:91:77:57:03:af:18:7b:70:de:2b:11:26:d3:
05:6a:bf:c3:86:fc:b8:0e:b5:27:5a:7b:4c:6e:9f:
9e:50:1a:89:46:8e:1d:a2:48:fa:78:cd:ba:12:92:
7b:da:0f:50:33:1f:ca:e4:9c:4b:6e:5a:ba:b8:db:
1f:91:d3:63:a9:e6:c3:68:4e:fd:9c:0e:30:bd:00:
ea:a1:8d:e2:de:cf:e1:31:b0:88:e7:2e:91:08:3f:
39:d5:ce:df:13:83:19:8e:d2:10:e0:a0:19:99:3b:
b4:59:e0:84:3f:2f:f3:78:9f:17:97:ba:bd:86:02:
4d:37:4a:cb:59:21:94:99:c9:58:4b:a8:7e:2a:ee:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9B:A0:54:C6:38:F4:BF:ED:D1:51:28:DC:5A:4E:60:AD:2B:55:FB
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e5:20:06:2a:3f:8a:58:83:df:5a:ac:b2:1c:e6:4b:53:a4:
fc:e2:e3:91:f8:53:46:52:c5:88:b6:ed:49:6e:7a:f3:1f:e5:
4f:86:ff:df:3e:04:cf:fc:6d:d7:f3:85:c2:3f:84:0c:cd:e1:
32:00:21:f3:5e:b4:3e:83:88:91:a5:d6:a7:20:1a:61:a0:d9:
18:fc:64:b3:77:81:c3:b8:e6:02:7b:ab:6a:17:23:6f:06:f1:
91:7d:cb:79:2a:df:f4:93:c8:1a:b3:dc:83:82:2f:f5:cc:95:
90:e8:2c:a3:1b:51:95:bb:bf:16:54:d1:45:27:6d:1a:80:90:
68:55:a0:3d:e0:a9:dc:17:11:0a:ac:4c:a5:4c:b1:3b:ca:cf:
44:a2:d7:51:95:b6:2e:0c:1a:24:f5:97:da:64:b4:d5:e3:8f:
81:15:5b:20:52:78:b8:e6:81:60:0c:4c:65:24:0d:e1:aa:59:
ac:3a:11:1b:4a:b9:45:ac:54:0a:c7:a8:c6:a6:83:80:34:77:
6a:c0:ed:f6:25:68:7f:d7:5d:4d:84:51:56:a4:42:e5:3f:05:
5d:d0:b8:4b:d4:4c:29:f4:13:3e:eb:1b:5f:4c:82:21:c5:ef:
5c:ca:22:56:b1:69:2f:12:3b:98:fb:a5:59:39:e6:1a:2a:94:
5e:72:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:44 2026 by rpki-client