Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: KaF4vryhsCvzR5gs1HbjDhBLg6vmkrTS0WUMNEX0yjg=
Subject key identifier: 57:A5:10:8C:82:70:36:84:44:34:AF:0F:26:A0:39:97:CA:E5:6F:89
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 019CB926B0E14B4E99A5A945233E8E62F60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 1174
Signing time: Wed 04 Mar 2026 14:00:46 +0000
Manifest this update: Wed 04 Mar 2026 14:00:46 +0000
Manifest next update: Thu 05 Mar 2026 14:00:46 +0000
Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: MCS4ZUegKcU4RMK3Kk0wK8Fx2jWJkWe1uoupuGdGY2I=)
2: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
3: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:26:b0:e1:4b:4e:99:a5:a9:45:23:3e:8e:62:f6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Mar 4 14:00:46 2026 GMT
Not After : Mar 5 14:00:46 2026 GMT
Subject: CN=57a5108c827036844434af0f26a03997cae56f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:9c:f6:3b:74:6d:27:23:70:23:2f:5b:99:
39:50:cf:c2:1d:81:bc:9b:9c:8b:d8:26:43:3a:c7:
a8:c2:5c:df:80:fc:4f:f4:7f:44:f0:b4:a9:1d:9d:
68:25:7c:8e:92:0f:ae:cd:19:f1:c8:b1:a4:68:cf:
62:67:ad:9d:3c:3b:39:b5:7b:8f:a0:5a:71:92:53:
af:51:5f:30:40:21:de:b6:0e:25:eb:2b:d9:de:43:
3b:5c:a9:91:42:09:ca:63:b4:51:4f:d0:0f:bb:16:
0b:dd:75:ae:37:96:b8:ae:a5:7c:0d:27:e3:14:aa:
ff:e1:89:c1:d1:f8:6c:a2:a1:38:2c:12:c1:70:11:
e8:c9:10:49:5d:b8:45:b9:b0:9e:dc:6f:9d:13:89:
62:fa:a5:47:8a:52:bf:76:ff:f0:e5:99:9a:eb:ef:
de:57:ec:8d:a6:e7:40:4d:fd:2b:69:74:de:16:7d:
17:8c:91:0a:81:fa:fc:41:32:e2:85:db:dc:fd:a8:
63:08:e2:ec:42:13:c4:89:be:63:f2:5e:9c:4f:05:
37:1b:54:e0:7f:91:f2:92:ff:f7:57:47:5f:6f:24:
2c:f6:5f:d2:3e:0b:45:4d:57:20:08:67:92:0a:4c:
c9:b2:a5:50:74:b9:a2:7e:1f:28:a9:a3:14:36:23:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A5:10:8C:82:70:36:84:44:34:AF:0F:26:A0:39:97:CA:E5:6F:89
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:01:c5:7c:e0:7a:bb:cb:08:d8:16:b1:0c:0c:3e:a2:14:e6:
ef:d3:03:e5:4c:fb:dd:8a:ec:fb:6c:32:b9:c8:1f:c9:78:f0:
d8:d2:57:7b:fb:d2:cb:af:9d:bc:f5:d0:ce:10:39:4f:0c:47:
7a:ce:86:55:6f:fd:df:e3:f5:ad:c6:fa:b3:b5:62:05:71:71:
83:e6:6e:9b:c4:c9:56:be:60:e3:c4:49:9d:32:ff:48:31:7d:
6f:b0:2c:d8:55:4b:91:4b:1b:78:fd:96:01:3c:a1:f0:2d:b2:
12:d3:9b:16:3f:6a:a6:51:ec:2f:81:33:b4:bd:73:19:6b:af:
ab:4b:bd:59:8e:a8:7a:fe:3f:58:9b:6b:c0:76:35:e2:c1:f2:
ed:1d:b8:8d:23:c7:98:56:1a:5f:ee:b0:4a:2a:9d:bf:35:ab:
ae:39:c4:f5:65:c4:83:6e:f4:cf:eb:d6:e5:de:2f:e4:be:6b:
30:15:fc:ee:b2:6d:ce:0a:ed:1d:91:73:16:ca:fd:f7:53:2c:
2c:60:f6:b0:a7:ec:85:42:83:f1:85:b9:5b:2e:b7:fe:58:bd:
32:09:59:08:24:18:48:84:7d:ad:18:2a:db:fe:63:06:e5:2d:
52:56:ae:58:2f:0d:b0:7a:b3:f3:4b:29:f3:74:e7:ff:9e:6b:
bc:44:83:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:48:26 2026 by rpki-client