Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: chA1fMsg1xq2fXQjcPkyfioWy6uX8s4LHizuwmg2sYA=
Subject key identifier: F1:C4:44:50:C2:4F:4A:18:97:40:E2:F2:28:A1:72:83:6E:5A:52:29
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 019D29975DA03D962234158EB6111EBA856E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 1083
Signing time: Thu 26 Mar 2026 10:01:18 +0000
Manifest this update: Thu 26 Mar 2026 10:01:18 +0000
Manifest next update: Fri 27 Mar 2026 10:01:18 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: slzxwBxUA6LSuAVFxSqHw5dteOoTEWfgUnT7NWnIL8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:5d:a0:3d:96:22:34:15:8e:b6:11:1e:ba:85:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Mar 26 10:01:18 2026 GMT
Not After : Mar 27 10:01:18 2026 GMT
Subject: CN=f1c44450c24f4a189740e2f228a172836e5a5229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:d2:0d:a6:0f:52:08:7e:7c:99:72:73:99:
d4:2c:41:4a:91:d5:39:d2:ed:50:c9:83:24:b6:9f:
a7:f4:5d:bc:bf:37:e4:70:03:c9:56:c0:80:e9:35:
6c:4b:53:31:c9:75:c9:79:e9:e7:d8:3a:d4:dc:88:
4e:9d:04:bf:90:ab:17:7a:66:43:4d:9a:37:44:d4:
05:84:e3:e5:03:e2:91:43:e9:7b:81:b6:96:a7:57:
95:76:82:99:f8:c0:d1:1c:a8:f5:00:2e:fb:5d:13:
14:32:48:6c:3a:f4:96:d4:f5:ed:a4:6a:be:34:69:
bb:c9:96:d1:28:af:0b:72:37:f2:65:b9:76:07:e6:
9b:df:06:d2:72:62:98:74:24:d0:77:d6:30:0b:6e:
c9:9e:92:0b:9e:93:38:dd:cf:cb:46:f1:91:5c:db:
4f:0f:79:de:98:45:79:80:a1:03:af:b0:18:c9:6b:
63:b9:98:72:51:8a:e4:0b:d6:e6:96:b4:90:9c:ea:
a7:5a:50:45:dc:21:e7:ef:34:2c:6e:54:d6:22:33:
bc:30:28:83:33:e0:23:75:5d:db:70:b2:fa:bb:4e:
1d:b5:b0:79:f4:ad:65:a6:46:96:0f:be:bc:49:9f:
e5:cf:02:b9:f1:53:12:c3:ed:62:85:84:02:36:25:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C4:44:50:C2:4F:4A:18:97:40:E2:F2:28:A1:72:83:6E:5A:52:29
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:85:8a:11:19:e8:37:36:3e:78:bf:e0:1d:97:f6:7b:6a:44:
ac:8f:8c:e1:40:3d:82:1c:84:7d:39:54:ab:5f:b8:21:b5:f9:
25:82:1e:8c:0e:22:11:29:40:9d:73:4c:c5:cf:2d:48:83:ee:
4b:ab:f7:e1:52:27:41:55:f9:3c:80:ed:73:22:75:8b:2e:0a:
94:5b:64:0d:3f:4e:0e:92:29:f2:34:c5:d0:e2:a2:2d:85:8d:
fb:14:0a:fd:e7:77:84:cd:8a:42:8f:e4:cf:3f:90:84:32:71:
38:27:d9:c9:c8:f3:90:af:32:a8:64:53:9d:e0:d1:2f:62:13:
47:61:aa:07:03:72:39:17:f2:02:c1:86:5f:7e:0b:6e:39:12:
59:83:d6:44:41:a8:49:a4:78:65:87:90:78:55:4c:32:be:c0:
f6:d5:98:87:6f:4c:2c:32:59:a9:0d:0d:23:59:3a:d4:60:3e:
69:1a:e2:33:b7:65:f1:d4:f4:84:6b:c5:86:e9:7d:83:67:ba:
bf:4b:48:64:a9:38:ee:7d:1e:fe:45:4d:32:10:0c:35:a6:af:
66:6d:15:32:15:7f:18:db:76:80:e4:9b:35:e9:58:5c:b0:2f:
00:06:31:d8:e8:fd:bc:2e:2c:06:5b:7e:db:53:82:41:9f:20:
a7:29:f1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:29 2026 by rpki-client