Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
File: YXvGPTvl98AszEqZ_C8vVSiKLWc.mft (raw, json)
Hash identifier: fd0ue9aTAT/r8WTwBot7xYI/NV4KhI5y24W+NZVB9Tc=
Subject key identifier: 13:AF:7D:48:DC:16:4F:28:83:18:F4:BF:AA:6A:A9:48:0E:E6:55:F0
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 019CE5C962216493B465BA2D60793BA740EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
Manifest number: 3F
Signing time: Fri 13 Mar 2026 06:01:46 +0000
Manifest this update: Fri 13 Mar 2026 06:01:46 +0000
Manifest next update: Sat 14 Mar 2026 06:01:46 +0000
Files and hashes: 1: YXvGPTvl98AszEqZ_C8vVSiKLWc.crl (hash: rI9QGDGKuBl0N2pxklJ3bYHV9Ux4RoE0Z1AxuZDI3os=)
2: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (hash: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:62:21:64:93:b4:65:ba:2d:60:79:3b:a7:40:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: Mar 13 06:01:46 2026 GMT
Not After : Mar 14 06:01:46 2026 GMT
Subject: CN=13af7d48dc164f288318f4bfaa6aa9480ee655f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:d7:ae:81:7a:39:95:10:ee:35:6e:69:e3:
bf:f2:39:57:40:64:d7:2c:79:b7:33:98:78:f0:85:
2e:7a:c8:9b:97:0b:26:b3:d0:5e:c8:c2:37:c3:e2:
1c:d6:28:2b:17:3a:0b:f1:76:fa:52:1b:2d:92:20:
21:71:69:4b:1d:46:9a:ed:5c:76:92:cf:76:03:32:
c1:17:a0:13:28:91:67:55:11:10:10:4c:9e:ff:38:
52:e4:50:d7:cf:78:60:46:14:47:21:3d:bd:8a:21:
fa:16:3f:3b:ab:b7:e8:1f:71:3e:e1:a4:54:0f:9c:
6d:d2:cb:69:21:e9:10:18:b9:e8:6b:06:51:0c:04:
22:9f:74:e4:39:58:aa:4d:a5:45:70:f4:29:54:98:
c6:ac:71:e9:06:94:45:6e:ef:15:08:9f:af:83:f5:
7f:6a:9d:a1:36:ae:e3:75:04:97:ce:49:09:65:85:
3d:ed:20:af:00:aa:21:54:70:72:ca:b3:0d:e4:b9:
08:8a:28:6b:ab:11:6f:45:fd:d2:c0:68:00:77:e0:
af:fb:12:68:36:9f:b7:a5:6c:48:d9:fe:16:fc:bb:
06:b4:ce:25:53:9e:f8:16:42:47:14:79:66:e2:60:
b7:d1:0e:64:be:a9:1c:ec:dc:f7:c7:00:8d:82:ed:
54:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AF:7D:48:DC:16:4F:28:83:18:F4:BF:AA:6A:A9:48:0E:E6:55:F0
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ed:45:2e:fe:68:b3:99:18:8e:3b:b5:48:93:38:db:68:68:
55:6e:28:5f:d4:27:c5:32:e6:ed:ec:03:d7:e2:05:77:0e:d4:
30:a7:3f:03:ee:32:09:d4:eb:c8:fc:18:59:b5:85:ae:23:d3:
9f:81:70:77:bd:f5:ab:e8:f2:f4:64:9f:af:28:60:e6:82:c7:
f0:1c:e9:61:e6:85:fe:a9:cf:44:79:e7:5b:6f:0b:3f:f7:a3:
42:f4:3c:1c:82:a9:63:f6:1a:67:d4:5e:45:df:47:58:b3:c7:
31:4d:24:47:e1:d9:9b:07:82:4f:3b:77:88:eb:19:51:a4:5c:
65:5f:d0:ba:c7:11:c3:38:3c:7b:d6:21:84:9e:51:a8:9e:55:
27:95:2a:31:3c:e2:5c:75:f1:34:32:74:b9:ce:d5:9d:18:26:
39:97:3e:2b:cc:87:8c:df:f1:dd:d4:ad:ae:47:f2:06:fd:18:
0f:33:49:14:d6:57:a3:26:8b:a8:f4:e1:f3:d4:a1:c0:7e:53:
ba:a9:29:f3:9d:6d:c2:43:64:2a:00:fc:4e:95:8a:68:35:79:
1e:3e:94:15:d9:c1:3f:85:17:2b:83:5e:7f:73:4b:bb:78:f9:
dd:1a:ef:87:37:d1:84:43:f9:0f:26:95:f0:e7:fe:af:5b:f6:
de:5f:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:45:52 2026 by rpki-client