Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft
File: YtHWd-U82GA27g-wYpBs1C-8G-E.mft (raw, json)
Hash identifier: kUz/cSW20S8xkf/mXC9bPjZXkzXKoeAIvLT7LmZdRtY=
Subject key identifier: 49:56:0C:2F:02:78:3C:E5:0D:1E:31:13:6B:70:1E:C3:BC:57:7C:CD
Authority key identifier: 62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1
Certificate issuer: /CN=62d1d677e53cd86036ee0fb062906cd42fbc1be1
Certificate serial: 019D38D3C916108717A098BBAAC1D0209303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft
Manifest number: 014E
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: 3puevpXxEmPtA5DHMhDWBwlZRcs.roa (hash: suu5X2zzvMTRS+3D69Fq6bFOqedWTYazOQgmkhD5+Mg=)
2: YtHWd-U82GA27g-wYpBs1C-8G-E.crl (hash: cHn5THbmtY53N/xPsdlxxHG4UyBKgSJ0JTLBAp0aD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c9:16:10:87:17:a0:98:bb:aa:c1:d0:20:93:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d1d677e53cd86036ee0fb062906cd42fbc1be1
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=49560c2f02783ce50d1e31136b701ec3bc577ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:2f:b2:9c:92:36:22:77:78:5d:2b:1b:c1:
50:03:51:0b:15:dc:d1:44:f2:7a:c4:6f:33:f7:94:
ec:11:e0:a8:8e:87:6c:91:c6:61:71:cd:3d:46:b4:
4c:fd:42:05:3d:1f:ff:28:af:6f:ff:f0:b1:de:5d:
f4:a9:89:f4:c8:99:59:2f:b3:38:db:90:c3:fe:9f:
7b:9e:f9:63:ae:43:9c:79:68:fe:30:01:34:07:ae:
35:b7:53:a0:46:c5:9b:ef:49:d1:c9:e0:af:34:4e:
a5:3d:5b:86:73:7d:a8:c6:38:f2:36:33:b5:1e:2e:
d0:38:20:f1:bc:8f:11:15:84:5c:7f:a8:2c:76:6f:
a6:cc:a2:40:08:3c:a9:e1:67:39:1e:97:89:bf:11:
e8:66:e3:af:4c:e8:73:57:07:dc:e2:8d:56:6a:e6:
1d:d2:00:61:53:bd:9d:de:a5:ff:48:b7:f7:d6:93:
84:ea:17:73:f6:74:4f:47:a3:c4:1f:50:75:68:fe:
27:72:a4:e5:a4:bd:60:01:d4:03:0c:31:c2:8f:41:
91:57:49:40:b0:11:73:f6:95:b9:78:a3:e5:4a:e3:
6c:f8:e1:45:a0:d2:ed:b4:0c:b1:fb:9c:6c:cd:bd:
07:e1:6d:c0:71:7a:b8:ff:0b:63:6e:94:42:bd:b1:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:0C:2F:02:78:3C:E5:0D:1E:31:13:6B:70:1E:C3:BC:57:7C:CD
X509v3 Authority Key Identifier:
keyid:62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c3:6f:d1:2c:56:af:ff:3e:ff:a9:9f:ff:69:36:d5:91:b4:
94:08:d1:74:f2:57:80:f0:92:ac:30:c1:dd:59:c5:a1:17:b6:
83:a6:47:83:5a:9f:c3:2a:cf:19:ea:12:3d:08:86:94:a6:11:
00:a8:a3:ed:94:72:39:da:42:d3:ea:b4:51:01:7c:e8:89:bb:
6b:88:11:b4:b6:14:dd:bf:85:cd:9e:d9:ca:a5:e4:2e:44:7b:
0e:e4:ef:74:21:f2:df:21:a6:a7:22:c5:ce:47:81:fb:c0:f8:
82:84:ec:ae:be:4b:62:d5:99:0b:f5:a9:51:e6:e0:87:ad:b0:
61:63:4b:d1:00:13:9e:32:a9:00:13:38:ef:0c:89:7d:51:65:
62:ef:12:fa:77:52:7a:ab:09:d6:6d:73:e9:16:3a:93:45:d3:
be:15:18:b7:ca:bf:7f:83:c6:90:ec:26:1c:61:36:78:ad:46:
0c:f8:79:d5:65:12:b0:c0:69:c7:fc:84:f7:79:04:70:fc:1c:
dd:42:e7:b1:76:7b:ac:93:a9:d0:d0:f9:8f:37:6c:1f:7c:e0:
94:08:16:d0:bc:90:be:ad:b1:75:2a:e1:35:4e:d5:75:cd:11:
0f:dd:fb:84:56:16:6f:0a:80:97:b3:09:42:35:99:61:02:b8:
79:d0:e0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:18 2026 by rpki-client