Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier: U8rFVfy/HPSHIxaoq/U4pkchmH7F76H4kiiPeqIcwj0=
Subject key identifier: 2F:5C:BC:E1:74:F9:AD:2B:21:F7:FF:1E:CE:BC:4B:66:FD:D3:39:F3
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 019CE1EB65CAC5964784103A4F5E1723965F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number: 12F3
Signing time: Thu 12 Mar 2026 12:00:26 +0000
Manifest this update: Thu 12 Mar 2026 12:00:26 +0000
Manifest next update: Fri 13 Mar 2026 12:00:26 +0000
Files and hashes: 1: ObjrmTselcOgfHeqKSeC3ZkZE8M.roa (hash: h15edxf80NHDBsD89JncvBzL8sjznUrSp3Fp172V3UI=)
2: WrTCSuQUvxPpAUF0e5vDgZhjo64.roa (hash: +oAgf/l41Uj9PIOaXoHSTwcfDAsCiAHjtNGVMj4O9AY=)
3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: q4UmRQleX8YxkXfFQv1lIgVICekc62Yza2Nl+4Onzzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:eb:65:ca:c5:96:47:84:10:3a:4f:5e:17:23:96:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Mar 12 12:00:26 2026 GMT
Not After : Mar 13 12:00:26 2026 GMT
Subject: CN=2f5cbce174f9ad2b21f7ff1ecebc4b66fdd339f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:de:f2:7e:f9:39:ad:a6:b1:f4:a0:ec:e4:
ff:c0:70:ec:b2:2c:e9:41:06:9f:d5:ff:55:b4:1f:
20:dd:71:c7:f4:48:51:36:1b:88:60:3f:c5:17:69:
ee:78:5b:f5:b0:9c:b0:81:94:92:84:2a:cd:c3:47:
1d:17:57:0e:93:c2:4b:a3:27:14:d2:03:ff:3f:58:
97:4d:a6:99:be:cf:65:0e:92:a0:dd:97:1a:a4:b2:
d0:71:b2:69:b1:f8:e6:0b:a8:3c:6d:32:93:c1:29:
61:e0:20:7b:60:6a:d5:29:b2:b6:6f:7f:1d:1c:f4:
d9:4d:b3:f6:fb:1d:1b:16:3f:56:c1:28:50:0b:2f:
af:f7:9e:57:f7:ee:65:a5:f9:0c:8b:6c:85:73:67:
a2:2d:5d:19:c5:e5:b6:72:bc:ae:b4:f8:8e:7e:61:
4a:d5:0d:99:71:65:67:32:b3:0f:db:9e:e0:47:54:
45:a9:6e:8e:ac:f6:76:24:5c:17:b4:19:93:9b:38:
5e:24:50:ac:0a:bc:52:8d:5d:71:37:49:1a:f0:1f:
93:13:80:4e:63:2a:b1:51:7d:2c:4e:27:5c:1f:7d:
af:19:8a:a0:6e:e0:b5:e3:64:1e:11:8a:b5:9c:5e:
b6:87:a5:b1:e2:99:cc:e0:d5:a7:e7:93:f8:02:36:
fc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5C:BC:E1:74:F9:AD:2B:21:F7:FF:1E:CE:BC:4B:66:FD:D3:39:F3
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e6:22:2e:ec:a1:6e:fe:b8:ef:20:b6:84:04:cc:5b:a7:4a:
57:4c:71:27:5b:d9:a5:36:5c:73:fe:35:cc:d1:27:c2:19:33:
f9:cb:2a:40:0d:e0:7a:de:f6:4e:1a:b0:5f:9f:cb:b4:a4:db:
f1:e2:98:3c:29:e6:f7:d3:7e:52:46:fc:43:e3:ff:b1:02:8c:
1d:d4:44:f1:c0:83:c0:d5:f1:05:68:16:74:09:af:bb:c0:6e:
63:26:71:77:05:82:8c:b5:8e:97:b3:b1:25:32:52:06:4c:df:
9d:bd:35:f0:20:5f:12:5a:0e:14:e5:99:a5:32:a4:f0:ba:ac:
d8:88:b9:e3:e4:9e:9a:ea:7f:59:b2:83:17:89:a9:26:15:f4:
16:da:64:9e:bc:d5:ea:f3:5a:e8:62:86:c1:14:3a:48:6c:5c:
9c:a6:2b:9b:e3:73:17:2e:99:c7:1a:0b:c6:ee:34:69:7b:3b:
e7:50:88:7a:b6:6f:95:56:40:01:7b:f8:21:eb:66:2f:84:02:
bb:d5:04:65:1a:fc:dc:94:65:b0:a2:d5:ac:4a:1f:91:3f:e8:
e9:7b:64:e8:7e:63:d8:2a:6b:fc:6a:c6:4d:fd:2e:76:37:60:
2f:83:91:40:aa:22:28:c7:c9:d2:df:c9:5c:c3:7d:a8:ef:2a:
55:5a:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:27:26 2026 by rpki-client