Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
File: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft (raw, json)
Hash identifier: MWawGulADCc/fljBQ3mKBtXE7z7SWNoV05NbcIgK6Nw=
Subject key identifier: D4:FE:BF:F8:63:DA:84:A0:AD:53:5D:B7:36:1B:31:22:C2:C2:B4:77
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Certificate issuer: /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial: 019D3865AADA3A1A2A3E90E75489EF4850C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl (hash: T/vX6prL2uNo0EYZOwluTynlozKSxjPHR4gV4uCU/nE=)
2: tO9v7iTX50tlfuqxxssYC-eagA8.roa (hash: 3ktQe8bKd+z2Ww8PO33mte778OAShNwmN0Svd4eJMUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:aa:da:3a:1a:2a:3e:90:e7:54:89:ef:48:50:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=d4febff863da84a0ad535db7361b3122c2c2b477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:d9:52:4a:4a:88:b2:ed:22:37:bf:95:ea:
ec:90:d6:69:af:82:55:34:09:94:fc:85:53:ed:2b:
8f:e5:75:92:c9:a9:9c:d7:e8:6a:4a:a2:18:72:2e:
2f:b7:0b:1f:3c:d5:77:ca:9a:c4:7a:86:54:82:19:
5b:10:9b:b2:95:35:fe:de:57:42:fa:3a:69:88:eb:
3f:ad:3e:9c:8d:11:10:ec:ca:57:45:9b:1a:e3:58:
ed:fd:c3:01:5b:f6:f8:60:58:04:3b:0f:d8:fb:4d:
47:0e:19:31:c8:f0:b2:c2:51:0b:4d:c8:e3:41:37:
43:82:c7:16:d5:54:3f:3b:ea:1d:95:8e:bc:9e:42:
46:94:ab:af:3e:4d:a4:2f:f5:36:c4:86:2d:a4:26:
f5:8b:0a:57:30:c9:f3:25:0e:fa:98:7e:9e:01:28:
aa:7b:d7:a3:1b:fa:4b:1f:c9:63:7a:7c:e8:7d:06:
15:c4:96:72:46:ad:1b:1d:75:21:ec:db:71:43:4b:
66:f5:9d:f7:40:8b:d2:fd:ba:58:58:5c:e8:09:ef:
b1:9c:3f:d1:57:73:be:96:7d:fe:ff:33:cb:ae:0c:
8c:f0:2b:a0:3d:c3:6c:37:6f:09:f8:21:b7:da:c8:
2f:b9:6e:c9:cc:f1:49:58:23:71:69:d5:f3:a7:6e:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FE:BF:F8:63:DA:84:A0:AD:53:5D:B7:36:1B:31:22:C2:C2:B4:77
X509v3 Authority Key Identifier:
keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6c:5d:4f:91:32:c6:e0:8b:b5:f8:30:bb:71:0e:49:24:f8:
6a:80:3f:7f:0e:f1:d9:d6:de:85:b4:ec:cf:54:8b:03:d4:86:
57:c8:c4:72:dc:78:e7:c2:54:3e:65:8e:ab:93:05:72:fb:43:
f6:9a:08:88:2b:e9:f4:99:47:25:8c:fe:91:2a:a8:38:6b:2c:
9f:09:34:72:0c:06:2a:7e:e5:e6:30:e6:8c:02:4e:5e:d9:3a:
9e:56:73:5e:a9:c8:1a:e6:b0:0f:a5:fd:55:c7:08:d8:fb:2c:
34:b9:96:a7:d4:61:c7:8e:6a:16:66:54:a5:5b:d5:43:18:2e:
74:47:81:30:cb:3d:35:da:d3:28:09:66:4f:4d:49:52:3f:7e:
99:76:ab:36:a4:32:db:59:6c:a0:0a:a7:8c:23:9c:6f:6a:a1:
68:16:a0:d7:29:f1:5c:c2:cc:4b:79:75:0d:17:02:c5:f9:aa:
28:15:d7:9a:ab:39:fb:3d:3e:90:76:d2:ec:f9:61:62:85:db:
5e:b3:35:c0:84:38:19:cc:a5:6f:3d:54:d8:a4:e6:b9:23:f2:
23:b7:2b:da:89:72:79:b4:5b:da:a2:32:76:ee:90:9d:c7:94:
cf:7f:74:be:d4:21:a4:3f:e8:af:05:3a:d2:a7:26:dc:84:56:
48:4a:e7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:40 2026 by rpki-client