Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
File: YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft (raw, json)
Hash identifier: XMl/MBhiNhj60oulCbYU3oHLqCNu9vJRrn/ib3iT1YI=
Subject key identifier: FC:C5:39:04:2D:66:83:D7:B4:4B:0A:7E:D7:F6:51:0D:ED:21:4B:E5
Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Certificate issuer: /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Certificate serial: 019CC93E8B64F035712A1903AE6676389D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
Manifest number: 0FFE
Signing time: Sat 07 Mar 2026 17:00:45 +0000
Manifest this update: Sat 07 Mar 2026 17:00:45 +0000
Manifest next update: Sun 08 Mar 2026 17:00:45 +0000
Files and hashes: 1: 7kMdYp5roGfF1VU63Cc4JGcx5Js.roa (hash: uj86j/OpDs/f0Rygt+3blYLNRZRYXffCKOesowzFlqw=)
2: YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl (hash: Ux2422kbuKHWVVhHxrFCdrAGen1a0VUfIDvL/yAYjiw=)
3: mB6ctQ7JDyjcQ3pzEiNkX3oG_lc.roa (hash: eNl+c0XuwCaTPy+dCHBabXrocGDi3GDbO258cnnWPK4=)
4: mET4_I0vQujHayV2JM5NI5ita-A.roa (hash: e7Iitk3hYpEL0ONAjD0IO1Ux9f6z5Emc5/EOv6IJZlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:3e:8b:64:f0:35:71:2a:19:03:ae:66:76:38:9d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Validity
Not Before: Mar 7 17:00:45 2026 GMT
Not After : Mar 8 17:00:45 2026 GMT
Subject: CN=fcc539042d6683d7b44b0a7ed7f6510ded214be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:43:4c:59:a7:4f:8f:ad:de:98:db:60:26:
f1:25:03:48:3e:96:65:31:f9:6e:ac:6b:ff:77:91:
d0:02:2d:c7:c6:41:ec:88:b4:c0:28:76:13:d7:95:
64:8a:9f:f7:48:ad:a2:fc:44:2c:07:b8:b7:90:88:
d5:32:a7:d2:9c:6d:57:fa:c5:66:e4:7e:0e:32:d6:
9c:2f:fb:31:cf:f9:6d:c7:f8:81:97:7d:31:49:79:
1d:53:c3:e0:35:aa:e8:a6:36:23:0c:81:7b:80:76:
08:3b:a8:62:89:42:20:35:fa:e9:72:27:52:9f:6e:
c5:b3:9c:c6:69:7e:86:81:fa:2a:f3:de:7d:68:f3:
1f:3f:33:20:9e:fe:27:dc:08:78:a7:7d:02:a1:57:
0d:ca:f1:ad:3e:42:98:0d:0b:fa:1f:68:b2:da:4a:
6b:60:28:fa:98:d0:29:1c:d5:61:ff:cd:89:d2:0d:
b5:db:17:a8:7b:50:28:84:1e:70:54:45:4e:33:a1:
26:2e:95:42:91:14:85:75:10:ff:e6:ef:28:90:48:
33:8d:d6:f7:ef:e8:7d:3a:d8:f8:55:d5:ee:cd:1e:
a6:f2:89:42:97:dd:05:89:61:2f:ab:9d:a3:31:31:
37:b4:c5:2a:d3:9c:28:a0:cb:a2:31:e4:ae:30:55:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C5:39:04:2D:66:83:D7:B4:4B:0A:7E:D7:F6:51:0D:ED:21:4B:E5
X509v3 Authority Key Identifier:
keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:27:17:dc:03:51:2c:32:10:90:0a:84:a5:f6:ec:be:12:14:
3c:46:a2:03:06:6d:1d:86:a5:d7:71:92:83:48:93:de:b4:e2:
4b:be:a6:d2:7f:6d:d3:81:1a:b0:bb:d0:b5:01:99:ec:94:99:
4a:ba:44:59:83:23:0b:cd:f5:21:87:f3:a7:bd:42:81:ba:e2:
c8:40:90:30:8c:fa:7c:3f:2e:ad:c6:96:0c:2b:b7:7d:0f:b0:
a8:41:ca:a3:5d:df:3d:dc:eb:dc:96:96:cb:fe:c4:84:62:bd:
30:8f:52:c6:96:68:ac:aa:94:16:4a:d1:f0:21:15:b6:52:f6:
06:b7:e8:d8:7c:5a:f4:19:c5:e0:bf:c7:4e:d2:75:5a:b4:80:
19:10:a4:43:a6:8e:ec:38:9a:0d:0e:49:ef:76:2a:74:3d:5a:
09:e8:b2:72:9f:43:e7:1e:8e:f9:7d:61:e3:1d:44:21:d0:cc:
51:13:04:aa:c7:30:b2:46:07:69:a0:17:86:1f:91:68:12:37:
47:67:0b:53:ff:6b:12:82:40:04:b8:e3:bd:0f:f0:39:26:f8:
88:8b:db:92:15:a8:67:e5:20:db:b8:0a:64:04:44:e9:69:69:
74:67:f1:87:e2:e1:e7:3a:fb:bc:5f:c0:33:46:4a:6c:d5:87:
7a:b3:8f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:03:30 2026 by rpki-client