Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: sLw/TmlSSE4UZ5O8E2PUgkuKVom3qDal8SKjQRvq0k8=
Subject key identifier: B4:76:35:78:92:4C:47:E5:73:88:84:03:E9:77:D8:AE:EE:C7:29:81
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 019CB76FA6B29DD1AD0E5ABFE823F25DA5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 0568
Signing time: Wed 04 Mar 2026 06:01:13 +0000
Manifest this update: Wed 04 Mar 2026 06:01:13 +0000
Manifest next update: Thu 05 Mar 2026 06:01:13 +0000
Files and hashes: 1: vli7nBMVVsmnP9pgh14ogSpMo5o.roa (hash: vG8+FAZpGpoQ8aVKGYzKfazZEnPs10bdq4+yw4mlzf4=)
2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: 4iEoCzpT6ARnwECLn66dmRrFWloLeW393hlMNSV7mdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:6f:a6:b2:9d:d1:ad:0e:5a:bf:e8:23:f2:5d:a5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Mar 4 06:01:13 2026 GMT
Not After : Mar 5 06:01:13 2026 GMT
Subject: CN=b4763578924c47e573888403e977d8aeeec72981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:3e:7f:7e:5f:3e:61:50:13:20:f5:b0:bf:
70:3f:cc:01:9d:91:9a:33:4d:91:69:0e:24:f1:d7:
33:d8:63:3c:f8:b3:0b:7f:26:f2:4b:16:5c:93:f5:
f6:7a:6d:00:5b:60:a6:3c:72:d7:e4:1e:80:1e:b6:
af:19:d1:d6:5b:4f:b3:a1:76:d5:89:09:16:f5:7c:
0c:b3:f2:6f:e1:3b:57:14:20:09:78:cd:37:2e:0c:
8c:83:39:eb:f9:58:4f:8a:14:f2:ce:28:19:5c:42:
e8:c8:0f:72:d4:91:9c:65:af:69:d3:f2:bc:d4:05:
8a:9b:05:db:93:63:61:97:a3:c7:46:aa:79:dd:df:
54:b7:46:28:ca:ad:f1:83:c1:c8:f7:71:fb:a8:10:
99:e0:3c:22:ab:2f:31:08:9c:f0:bb:7a:3e:74:91:
67:a3:4b:d8:9a:7b:d1:18:97:96:d3:43:40:a8:fd:
c0:1e:ba:a5:fa:37:d3:9d:e5:b3:c4:85:b3:6d:ad:
6f:44:fe:2e:c4:14:a4:65:b6:a2:fa:0e:2f:f2:bf:
e3:6a:6d:eb:b2:6f:d0:03:08:3f:f2:d6:73:d6:49:
64:38:4b:c4:8f:55:a1:26:b4:e6:20:e6:dc:d3:dc:
c6:12:5f:a7:b7:4b:d0:90:90:60:39:fb:3e:95:35:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:76:35:78:92:4C:47:E5:73:88:84:03:E9:77:D8:AE:EE:C7:29:81
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6e:f1:30:13:0f:ee:3e:74:f1:f8:86:2c:9b:ff:c5:23:fb:
1b:bd:a2:18:21:fc:bc:78:23:8c:4c:ec:3b:11:bc:bf:e8:0f:
7a:af:93:33:0a:26:91:4d:6b:32:9e:66:85:d9:5e:26:09:fc:
fb:5f:39:a5:00:cb:ca:15:64:25:41:4d:0e:8d:58:dd:78:79:
99:99:d9:21:4a:4c:f6:a0:8d:8d:45:bc:a0:87:76:d7:d7:83:
2a:9f:ad:16:69:ec:30:fa:33:72:38:90:e8:c2:ea:5b:89:f7:
0e:20:1f:c8:b6:86:c8:1b:b0:56:61:56:cf:8c:91:81:70:57:
76:d3:38:53:bd:da:dd:6d:0a:82:04:e6:20:6d:2f:5d:4b:1b:
81:9a:5b:49:de:94:5c:c1:79:3a:8c:fe:13:e2:16:ef:3c:91:
9d:80:2b:d2:f8:d2:68:c6:03:f8:15:69:67:ff:67:9c:f9:e8:
61:28:92:f1:72:ad:a3:35:a7:8b:d9:7e:fd:0f:cc:21:71:6f:
3a:d0:8a:75:bc:5c:f4:69:f5:20:bb:ae:35:6b:fa:e6:43:eb:
f1:11:07:1c:0c:45:44:6e:32:e4:34:f5:73:45:37:70:21:fe:
00:cd:a8:8e:50:02:1a:63:3c:e3:91:20:52:26:8c:39:d2:d5:
26:0a:c0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:11:15 2026 by rpki-client