Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: 7c9WydqX7aky0aDLgcla347Xq8XBzqnFtGKj086UAtU=
Subject key identifier: 37:7B:54:31:1C:59:0E:76:5D:7C:33:03:39:DF:A7:80:47:35:A6:48
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 019D26CD5461AAA0B3C34A2E2ACFBAF9C311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 175B
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: rNEbxNJvNIkQg0gH3l7iZBSPwcdSrpX0Rh0/Iil+GDs=)
2: ds0HwgnE1wK4tusqij2iDAo4C4w.roa (hash: AV7GAfjJkTxxVqb/RhgxTIb2SMDdBmXXWKpB5XXq9g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:54:61:aa:a0:b3:c3:4a:2e:2a:cf:ba:f9:c3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=377b54311c590e765d7c330339dfa7804735a648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:00:b1:36:71:ee:01:c3:5a:87:69:63:c6:
ef:d5:d3:ee:b6:85:95:05:de:80:5d:d1:25:df:e7:
c2:b0:7e:a9:5f:ec:5d:8f:22:70:24:3a:ee:85:6e:
5f:79:be:70:6a:73:f8:8d:d6:c3:a7:65:21:6b:50:
6c:60:c8:99:73:f0:85:d5:25:de:6b:6f:ed:fd:0a:
e0:2c:10:2f:49:2c:86:e6:ed:50:66:93:45:22:ed:
65:21:70:7d:33:e0:57:e0:24:ac:2b:96:5e:5d:1b:
74:16:26:f1:27:a5:48:16:f3:26:d5:da:ec:68:6c:
8b:54:cc:05:74:5a:6d:0a:80:e0:b5:b1:ad:a7:c1:
55:5f:5e:98:19:9e:74:c5:e5:99:3b:b6:a8:b3:54:
c3:04:2e:51:a6:d3:d9:6a:19:ba:c9:cc:6a:ca:47:
1a:12:44:a7:3e:c7:12:6c:07:e6:cc:e6:22:af:c6:
d7:04:cf:a4:68:ee:e6:7a:f6:f6:44:bf:14:ad:f0:
b3:93:c1:01:aa:41:8e:69:c9:00:98:c3:79:7c:d5:
82:91:86:17:60:46:bf:ae:5d:29:b2:df:d6:18:0d:
fd:40:11:79:47:4a:78:d0:73:cc:4e:8b:69:52:c3:
da:49:cf:75:33:aa:d2:8e:56:a3:cc:e2:79:bf:45:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7B:54:31:1C:59:0E:76:5D:7C:33:03:39:DF:A7:80:47:35:A6:48
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:83:f8:f1:b7:d4:2c:79:fe:c9:ee:ea:44:16:fa:02:bc:51:
ba:64:2f:4b:3d:0e:83:37:c3:25:0b:1e:26:04:9e:8d:ac:cc:
e4:0b:e6:69:bb:e4:1d:95:3e:15:dc:7d:20:12:c3:32:10:bf:
58:47:4c:c0:fd:67:63:ce:2e:b6:f2:f7:e2:d2:c2:78:99:a5:
29:30:51:ff:4e:40:0d:23:1b:a9:7a:ea:ad:3e:ff:e3:bf:9f:
ea:cc:c0:94:66:60:3e:44:8f:4e:86:95:08:8f:d0:2e:5c:5a:
f1:b5:97:47:5f:65:df:7e:e9:2f:e3:be:66:b0:4b:58:4b:36:
c7:cc:5c:67:b7:12:d5:41:d2:7b:a4:7a:5c:04:84:95:cb:ca:
d5:b9:e3:cd:90:a0:e7:dd:9b:73:42:3e:c1:80:f0:fb:e3:60:
e9:4b:ec:f9:12:55:85:d8:e0:c6:54:ad:52:09:82:24:b2:20:
86:c6:b7:f2:b0:a2:91:fc:98:df:d8:0e:28:7e:60:cd:ef:45:
5d:be:a5:d5:b1:07:2d:b5:b2:0a:d0:fe:1b:ea:27:97:96:33:
a0:96:17:c7:cc:04:71:d8:b8:26:e6:c0:5d:6c:90:4a:c7:75:
96:5a:1e:c1:36:3e:31:74:5e:50:cd:1a:ce:ff:15:28:d5:2a:
f2:ed:2b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:18 2026 by rpki-client