Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json)
Hash identifier: gHY/z+LarAEz0p3oagz2mCv16etFNscONXamUsPNGwI=
Subject key identifier: E3:12:EA:4C:9D:98:AD:3F:0E:E5:23:CD:25:78:14:A6:36:F0:24:C5
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 019D3865687250BE5B024BA6A82A2B09500A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
Manifest number: 0C55
Signing time: Sun 29 Mar 2026 07:01:03 +0000
Manifest this update: Sun 29 Mar 2026 07:01:03 +0000
Manifest next update: Mon 30 Mar 2026 07:01:03 +0000
Files and hashes: 1: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: fXOM6kQODU3UK8MzvnM/7yj+JYj5Ry11P47L41wR3oY=)
2: a51cXgxKSVntETY6pLsFiKPsOJo.roa (hash: o402E4LpPhqmAP+XyqCG1p/8riR3uOjtyT+/vmwZflU=)
3: nADULd3amnYGR0Tr5B09poIsE28.roa (hash: gJvUmAM3aJOUpRMN3qv/5KjDyZgYcOC2qsvGzHbLhP8=)
4: qfbS_MhHwZ5T9Pkm-e5XKyepAeI.roa (hash: O0H1y3N2wNZcfjYWRzPfGG78Vh6yNgbXWFsd+yyCqLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:68:72:50:be:5b:02:4b:a6:a8:2a:2b:09:50:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Mar 29 07:01:03 2026 GMT
Not After : Mar 30 07:01:03 2026 GMT
Subject: CN=e312ea4c9d98ad3f0ee523cd257814a636f024c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:30:31:fc:df:2c:2e:0c:79:7d:3b:6d:22:
83:26:22:8e:c8:54:3f:bd:7f:f9:26:be:4b:9c:94:
14:0b:20:3a:7e:72:09:60:11:33:6a:73:90:82:0a:
22:ba:71:bd:56:31:e0:1e:db:1e:0a:c8:6d:d4:b6:
52:db:99:ee:4b:42:aa:b0:4c:15:ef:ee:43:3d:c0:
2a:4a:66:fd:3b:d4:b6:49:b1:3f:32:58:20:aa:e0:
f6:f4:6e:63:fa:bb:85:ef:ea:c3:bb:d1:35:7c:8a:
84:11:0e:dd:56:0b:62:7c:c4:06:9a:0c:0d:3b:38:
d4:b9:5a:17:6c:33:12:cd:af:88:be:ae:ac:fc:15:
7a:3c:77:12:b1:f2:05:d4:02:2b:87:2a:3b:c6:9d:
9e:39:3b:fe:a9:e4:04:3d:63:90:90:6f:4a:2c:aa:
9d:2c:66:da:b9:aa:89:a9:43:0e:80:83:e6:37:13:
ca:c7:1a:0d:08:c2:6b:bb:23:d9:36:11:04:fe:a0:
fc:d6:3d:02:14:46:48:a7:32:8e:73:49:d1:86:48:
45:fe:13:c0:33:52:91:5f:4c:af:0b:a1:fe:dd:7c:
20:d5:c7:21:2a:e6:57:2c:46:03:57:08:6a:68:ac:
a4:73:d3:06:25:f4:12:a9:d7:3b:26:71:35:da:7c:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:12:EA:4C:9D:98:AD:3F:0E:E5:23:CD:25:78:14:A6:36:F0:24:C5
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ab:ab:ad:26:e4:02:b6:a2:c4:e0:2d:ca:89:96:ab:bf:0b:
3a:f8:52:2b:18:b8:d9:14:50:c9:d3:04:7f:2c:27:02:07:a1:
01:45:12:44:11:be:74:9b:f8:79:27:1e:f2:1e:43:ca:8b:3e:
b1:3c:86:49:95:79:52:fe:6c:e6:95:b9:05:28:2b:61:73:f5:
bd:7b:ad:03:e9:b3:f7:10:7e:7f:36:24:6e:7c:46:70:58:29:
8d:2f:7f:a2:70:44:af:c8:5c:ee:58:4b:1d:8d:fe:79:d9:b8:
9d:10:e1:e9:ec:b8:c4:92:b4:ae:ac:1c:d7:d5:dd:39:07:73:
d1:26:b1:38:4c:7b:98:43:6f:f7:a1:8c:cb:21:6d:90:3f:fb:
03:36:c5:26:84:cd:81:99:89:63:6b:e7:f1:3e:0c:7d:54:12:
79:10:62:97:5a:ce:16:8d:33:6e:fa:a2:b9:7e:3a:12:c2:83:
05:47:e5:8e:4a:a4:f7:b4:0d:3c:74:6d:7e:49:40:f0:40:97:
55:e6:b9:d3:b3:72:47:6f:79:b9:9a:46:a1:1d:21:82:0a:e3:
a1:28:ca:b3:4f:3c:1a:6d:eb:7e:11:5d:ca:e3:ea:1d:7e:59:
d8:5b:c4:43:f6:1a:56:57:d1:23:aa:1d:b5:03:42:f0:c6:1a:
07:ca:97:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:33 2026 by rpki-client