Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
File: YSQjU25R-U-r_FCs-UTXmKrPQD8.mft (raw, json)
Hash identifier: gkHBgfKafemDkhVyaAbVwIHk1zF+ckuATIKQNN+MetI=
Subject key identifier: 5F:DF:28:DD:43:4C:C5:AD:3A:0F:D8:94:A1:29:01:12:63:17:5D:AA
Authority key identifier: 61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
Certificate issuer: /CN=612423536e51f94fabfc50acf944d798aacf403f
Certificate serial: 019D39AF59862E24ABCEC10F8EFCA2B4BE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 13:01:26 +0000
Manifest this update: Sun 29 Mar 2026 13:01:26 +0000
Manifest next update: Mon 30 Mar 2026 13:01:26 +0000
Files and hashes: 1: YSQjU25R-U-r_FCs-UTXmKrPQD8.crl (hash: cRwwRt10NM3Dph6AP6V2pJwmAOOtHi2SOYrws2ZJOkA=)
2: hXdgp8zgmG7JYs_k37tuaNt0law.roa (hash: XCDaAPor8tbWo85ZTNfTXsO+zViuoLRUnnO/NnA5uPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:59:86:2e:24:ab:ce:c1:0f:8e:fc:a2:b4:be:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612423536e51f94fabfc50acf944d798aacf403f
Validity
Not Before: Mar 29 13:01:26 2026 GMT
Not After : Mar 30 13:01:26 2026 GMT
Subject: CN=5fdf28dd434cc5ad3a0fd894a129011263175daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:69:a9:24:fa:4d:9f:bb:57:ac:8f:7f:c2:
5e:51:1f:9b:4b:39:3d:90:73:27:f5:ba:d7:12:01:
5f:2e:68:9e:2e:89:e6:4f:5e:ef:43:b5:a5:ed:e5:
67:8b:27:74:92:19:23:cb:5b:79:d6:5c:e0:fc:f2:
5d:69:6f:c9:95:9d:ea:c3:de:c0:fa:97:92:b1:f9:
b9:38:1e:a2:cd:d8:90:a3:57:1a:5f:97:38:b5:f8:
ed:b3:4c:ce:cf:38:e4:35:09:d4:5e:b7:8e:73:cb:
c3:2d:c9:ce:bb:74:d9:b5:2c:d2:c0:70:5c:97:c1:
dd:ef:19:b0:69:42:78:00:3d:7b:cc:29:f6:9e:de:
b9:19:07:98:3b:c1:26:74:86:4b:10:6d:b6:f3:84:
3c:7f:14:86:ea:ae:35:15:ad:89:61:94:84:e7:1d:
16:f4:89:71:83:6a:a7:50:89:5a:7f:e1:cb:85:1d:
c7:20:e3:6a:73:b1:8e:72:b8:1a:ec:22:9e:0e:97:
59:fd:0a:ef:b6:dc:16:b8:6c:5f:a5:71:1c:36:1d:
cc:8d:00:01:ca:cd:a1:b8:de:6d:21:66:2b:d8:d3:
41:c2:ba:41:ea:8b:42:ee:75:bd:b1:50:4b:ba:69:
49:0c:82:b2:21:9e:ea:8e:21:a1:f8:cb:37:c7:c9:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DF:28:DD:43:4C:C5:AD:3A:0F:D8:94:A1:29:01:12:63:17:5D:AA
X509v3 Authority Key Identifier:
keyid:61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:89:ed:a3:7c:47:87:57:90:32:25:ea:10:6e:e8:95:bd:ef:
0b:10:b6:fa:cf:83:99:c5:82:e5:58:bb:18:a2:1e:aa:b0:08:
04:a3:e9:c5:56:06:eb:f9:95:57:b4:36:55:70:21:2c:5b:a3:
a7:b1:0a:33:07:3d:7c:60:1f:35:46:8d:0a:b1:be:3c:c6:a5:
56:1e:04:62:9f:9e:aa:d2:7d:1c:4a:d7:3d:0a:8a:2d:7f:d3:
99:d2:d4:a2:1b:c7:4f:c4:7c:e8:4b:1d:0c:11:13:36:a4:ce:
ea:df:ea:9e:82:c2:0f:79:15:6f:e9:0b:e3:5b:d9:80:ab:92:
f9:46:bc:36:f4:51:a7:26:76:e0:6e:5b:69:1b:17:c2:cb:46:
8a:95:ab:e2:80:1b:a4:67:8e:0d:64:13:4b:ad:f3:7e:7c:d8:
f6:6e:6b:bd:36:0e:28:1c:6a:c9:fa:9c:53:3f:83:43:71:5e:
84:0b:e1:af:25:a8:32:d9:02:11:cf:46:6c:05:a3:7f:38:ce:
4c:de:d3:a8:ef:01:9f:a2:7f:4f:84:f7:27:c4:fa:58:8b:4c:
ff:bc:84:0e:c3:1b:d4:f8:39:41:1a:7e:f9:65:d6:ea:3a:f8:
3c:bd:ba:33:85:bd:9e:ee:e2:18:cb:e3:6e:03:0d:60:0d:2f:
98:b5:18:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:55 2026 by rpki-client