
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
File: fYtUoMG_jx-cTJVpuXXKRuuobOc.mft (raw, json)
Hash identifier: DAQxXWXF+QlPixWq8f4e+6g6ha4UGX334P/1l/G04r8=
Subject key identifier: A0:53:96:10:4D:5C:75:B9:EC:E6:AE:C1:48:AC:BB:C9:FC:B5:E9:63
Authority key identifier: 7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7
Certificate issuer: /CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7
Certificate serial: 019CB7DD353CF460BE49E18A6C0ACB115EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
Manifest number: D4
Signing time: Wed 04 Mar 2026 08:00:53 +0000
Manifest this update: Wed 04 Mar 2026 08:00:53 +0000
Manifest next update: Thu 05 Mar 2026 08:00:53 +0000
Files and hashes: 1: AXRVN_DR5BycQVCdRUvhSmejAc8.asa (hash: W8JeQq9+EkgLaIUZ5BFcb8k9jWkbcN2YzZXMIaK67Sg=)
2: fYtUoMG_jx-cTJVpuXXKRuuobOc.crl (hash: Z6xKMBFpP7tyCddgQaic8ekno6SJ2RNiWrxza3f+N+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:dd:35:3c:f4:60:be:49:e1:8a:6c:0a:cb:11:5e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7
Validity
Not Before: Mar 4 08:00:53 2026 GMT
Not After : Mar 5 08:00:53 2026 GMT
Subject: CN=a05396104d5c75b9ece6aec148acbbc9fcb5e963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:60:e0:0b:13:e5:8d:3a:95:81:96:38:2f:
cf:69:b0:74:2e:02:04:38:71:19:9b:64:25:3a:aa:
8e:e4:4d:7f:57:3e:4e:c9:8d:b1:82:7f:a8:03:7e:
55:18:29:00:3f:11:82:b8:89:d7:0d:91:18:42:94:
db:8d:69:24:1a:d1:a3:34:88:72:4f:79:79:e2:cc:
c2:d6:59:98:75:d4:f5:b7:db:2f:ee:4b:7a:6b:18:
38:a5:3d:a3:8c:16:80:b4:11:fb:59:51:e8:25:b6:
b7:44:28:9d:61:ee:70:db:32:94:93:b3:c1:19:90:
ea:ea:13:a1:7d:ba:55:ba:71:0b:32:d8:ad:91:f0:
42:be:f6:48:c5:8a:4e:d9:7c:61:84:9f:81:4f:0a:
de:c4:9b:7b:7f:53:19:33:ed:cf:fb:be:20:df:0d:
83:db:25:c5:a7:3b:5b:18:cd:ab:e7:9b:f3:04:65:
70:3a:c3:15:78:88:d5:6b:46:e7:d5:bc:6d:53:52:
5e:b7:bb:a9:03:c4:5c:32:e5:37:9d:20:06:70:a1:
04:21:af:46:b8:36:98:76:ab:78:e5:0b:11:f5:6c:
53:80:1d:8b:57:4d:b0:d8:bc:69:47:00:8e:ed:55:
0a:79:49:8d:4e:38:85:7c:74:b1:ff:29:c9:60:24:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:53:96:10:4D:5C:75:B9:EC:E6:AE:C1:48:AC:BB:C9:FC:B5:E9:63
X509v3 Authority Key Identifier:
keyid:7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:57:73:fe:30:0d:ac:13:cd:9d:e0:3b:3b:05:4b:91:df:4e:
a4:e4:8b:3d:22:f8:8a:00:38:7d:10:d7:65:bb:58:ea:35:00:
4e:6f:76:af:07:7f:4f:a5:f5:64:56:6b:0b:02:37:e5:b2:5d:
60:e1:94:f1:42:5e:3e:da:79:ec:2c:c6:f6:df:25:02:f4:8b:
d8:c2:f8:53:1b:30:dc:84:96:09:76:94:b7:13:50:ea:a5:37:
36:3e:f5:30:e1:3c:a5:ef:32:d8:f0:ee:ce:4b:3d:04:2e:3f:
ab:2c:92:11:e2:8a:a9:2a:e6:af:07:13:b6:34:1a:28:fb:4e:
a0:39:c2:e2:e3:d3:48:8c:c4:08:b9:54:1f:1d:66:fc:75:ee:
8d:47:47:b3:c1:15:c6:53:f0:9c:0c:e1:83:3a:1a:ec:a3:22:
86:94:fe:42:f8:b9:17:bb:de:6d:e6:83:ba:cc:e6:44:42:93:
8a:f9:96:c6:a5:c6:50:aa:e9:dc:f9:3f:87:c8:0e:54:d6:11:
21:74:ec:66:15:92:ce:52:d5:12:94:5a:74:1c:02:95:e4:39:
96:de:2d:5c:50:d5:eb:10:77:b8:79:ca:84:82:61:d1:78:ec:
33:f6:8a:8d:02:c0:09:41:12:f8:a8:ff:2d:c4:21:61:7b:06:
2f:d4:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:37:38 2026 by rpki-client