Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: L6BaSMPav18toW7UMGHBjKVPt5+ioxmykG/N9KXkhQY=
Subject key identifier: 1C:BC:B9:3E:6D:CE:D3:BA:68:62:31:36:01:6E:9B:C3:39:A0:5A:7F
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 019D3789095DF5648508D24427E0B4C78D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 061F
Signing time: Sun 29 Mar 2026 03:00:20 +0000
Manifest this update: Sun 29 Mar 2026 03:00:20 +0000
Manifest next update: Mon 30 Mar 2026 03:00:20 +0000
Files and hashes: 1: 52xBodduqIwcsYy_iwGrav8wNPA.roa (hash: OeV7zUR0TM+VXjljKVbrtHhPSwRtjc0RboLlqaQmwFA=)
2: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: usUL+vlY4szgFGD1fMRtjN6/urrlCGujVT0M809OdLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:09:5d:f5:64:85:08:d2:44:27:e0:b4:c7:8d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Mar 29 03:00:20 2026 GMT
Not After : Mar 30 03:00:20 2026 GMT
Subject: CN=1cbcb93e6dced3ba68623136016e9bc339a05a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:d2:45:94:d5:4a:ad:04:2f:86:4f:0b:66:
30:87:89:b8:f0:6e:af:24:e6:fa:7c:7b:63:08:e0:
fc:b9:cb:0c:ad:40:51:32:c6:4c:09:68:2d:33:cf:
e9:77:47:50:bd:aa:51:cf:41:4f:2f:7f:f7:45:75:
10:7f:76:73:e4:5d:63:3d:1a:1d:c7:b1:9f:4a:25:
3f:17:af:e7:2d:f6:45:70:f3:ee:f2:f1:79:ad:24:
61:92:46:c8:94:71:18:ef:d7:58:7d:37:85:71:50:
06:33:a0:3d:6b:f9:5e:c5:df:e2:d4:c1:56:77:f4:
26:5f:0f:13:a2:80:67:2d:67:49:20:7d:c0:5f:59:
e2:16:bd:d5:35:65:36:53:30:bd:ec:05:ed:4e:64:
dd:20:95:6c:74:50:b0:e6:0e:fb:6c:7c:ca:b4:a5:
11:b3:c1:a3:ca:cb:1a:44:1c:ae:22:11:6f:93:19:
07:5d:f8:62:02:de:1c:0f:71:4a:32:5a:28:0b:1c:
e9:ee:2e:e1:b2:df:38:58:7d:56:2a:59:f4:de:67:
ad:96:93:33:0d:bf:c4:d8:26:6a:c1:0f:9b:97:65:
5f:02:d3:45:6f:5c:a6:f7:ba:e1:7a:f2:b6:a9:68:
19:14:73:df:34:e0:40:b7:96:9b:9e:3e:97:e5:50:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BC:B9:3E:6D:CE:D3:BA:68:62:31:36:01:6E:9B:C3:39:A0:5A:7F
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:55:23:c9:32:bb:9a:89:51:42:8c:12:37:0f:a7:64:f4:6f:
8e:08:05:e7:51:ca:c9:d7:11:a7:7b:3e:93:7f:fe:b5:c7:49:
a6:78:6d:fc:fc:5c:ee:ec:3f:2d:5e:9a:26:a2:3c:f6:fa:09:
85:8f:1b:14:cf:4f:d4:dd:d1:b5:f8:b8:8a:5f:d2:de:43:5a:
73:bf:2f:1d:52:e8:25:2f:51:01:53:12:f8:a8:65:27:9f:13:
6a:00:6a:a2:9e:bf:60:b9:55:2b:0f:0f:05:c5:c7:da:37:88:
39:74:9c:4b:24:0a:9f:d6:00:a4:f0:a4:6b:33:d2:3c:36:4d:
c8:65:48:50:1a:72:7b:24:7b:8a:07:1f:1d:4e:66:22:88:de:
d5:25:38:06:52:db:07:00:68:bc:f3:9e:b9:2c:56:1d:fa:c8:
ef:2c:34:0c:49:51:69:a1:b2:32:7d:85:4f:7d:a1:18:04:45:
06:f7:69:05:3b:78:82:a4:a5:14:16:f0:28:ad:08:85:3d:70:
a1:ea:67:42:40:da:4c:26:d0:8b:24:9f:9b:13:94:8c:17:0e:
35:7a:32:9b:97:81:e6:84:25:5d:d7:ca:3d:b3:a0:12:2a:16:
3c:fc:d5:a3:85:15:44:a2:d6:18:49:50:61:65:0e:02:5c:05:
55:34:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:40 2026 by rpki-client