Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File: YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier: 8oAHXJtswGLdF6MiadvLDVBm9cufK/as7iMHgsaMmQs=
Subject key identifier: F2:AE:CD:F0:8A:18:68:D8:FA:D0:E4:9E:A9:93:ED:61:49:33:85:EB
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial: 019D382E6F6DCE130212870FFF5A936C0496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number: 176E
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: /nHfFECuhOpeZeKYudzC3zEMWZtHTktP40p4FkjbjDA=)
2: _i3dzwW_EszihKFaFxYgzMY5p6w.roa (hash: C9SSGdcc7YzzmpkvenG+iGlQfE2KKjV6QnZm59ExRA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6f:6d:ce:13:02:12:87:0f:ff:5a:93:6c:04:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=f2aecdf08a1868d8fad0e49ea993ed61493385eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:c4:89:63:4b:5b:86:16:89:36:f8:58:fe:
6e:c9:56:ab:7c:cd:b0:71:5b:85:56:48:09:99:31:
d1:f4:7b:bb:d1:8d:57:77:f7:9e:36:7e:27:34:b9:
92:2d:e5:4b:96:0f:17:94:3b:21:d7:ee:73:75:76:
1b:e0:22:33:60:3c:bc:67:7c:bb:66:08:f1:b4:87:
83:3b:3b:02:2f:57:96:19:a8:2f:03:c1:a4:d2:66:
88:ca:17:d7:ef:64:a6:61:65:96:e3:5f:3b:b0:11:
74:a5:4d:55:6b:00:bb:13:ac:86:e6:a1:46:e0:b2:
0d:71:48:ce:a3:43:24:18:7f:d3:f8:e3:24:68:ad:
1d:df:60:19:c1:b8:94:8d:a0:3b:71:74:25:cb:ba:
e2:2a:8e:7e:5d:30:57:10:9f:fb:1c:fa:37:85:dd:
f7:f4:57:bf:4e:9a:d0:74:ed:44:4a:8f:fe:84:81:
fc:c7:73:f1:1d:9f:13:35:5d:17:cc:75:93:01:a8:
49:d9:d8:30:9f:5a:3c:e8:dc:fe:38:bc:de:52:c0:
87:a8:76:cf:28:3a:10:3f:74:b3:53:01:06:f8:94:
9e:78:53:d1:0d:62:d6:fa:4a:61:61:d8:58:52:d3:
a5:48:4f:f6:35:fb:70:41:7b:63:d0:0d:86:9f:c3:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AE:CD:F0:8A:18:68:D8:FA:D0:E4:9E:A9:93:ED:61:49:33:85:EB
X509v3 Authority Key Identifier:
keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:a8:1e:bc:ae:bf:15:89:bb:35:2f:6d:32:d5:74:c4:5d:99:
63:09:fa:bf:c0:9f:84:bf:eb:75:86:ad:62:7f:4c:8c:21:5b:
b3:29:69:5d:9a:8c:b8:0b:47:e0:12:05:cc:d7:65:c1:18:df:
4b:04:4e:ed:1c:3b:0e:40:39:fa:00:34:9f:e9:9b:bd:d3:cf:
fc:47:8b:d4:75:fd:79:0a:1b:a3:bc:5d:56:39:93:b3:45:89:
bf:2d:84:41:bf:ed:91:d3:5a:db:a7:0c:c6:a4:11:31:a8:d7:
22:c2:c1:49:3a:9f:fd:0f:f2:37:62:19:b9:b9:47:c6:84:7c:
6a:59:80:99:76:7e:d9:bc:42:00:ed:95:15:ef:a3:0a:78:03:
4f:a8:98:e8:e0:51:1c:07:d3:8a:57:ce:86:5c:3b:2d:91:03:
14:c8:93:cd:f3:b0:5d:05:e4:b3:81:82:1b:03:db:c8:6b:c5:
16:49:fc:09:af:06:93:9d:bf:a3:f4:c8:f6:42:f3:e5:3c:8b:
04:73:c1:e7:6a:47:22:67:a2:72:73:3a:a1:17:ef:69:0a:10:
7f:ac:99:5d:63:5d:8a:8f:72:18:7d:4a:b5:ad:04:be:9a:09:
b3:d7:10:d2:e0:19:f4:f8:25:a3:db:a4:60:e7:28:b2:85:8e:
32:6d:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:09 2026 by rpki-client