Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: /BNfvERLwdBMR6+ZCY9x/ylConxUiAlGXDNQCKh8zds=
Subject key identifier: 08:41:F5:E8:92:9E:87:4A:03:48:8C:27:B6:BF:DA:F3:F6:2C:A1:D0
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 019D288425F572F4F3655B7739A2A62DC3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: 027C
Signing time: Thu 26 Mar 2026 05:00:42 +0000
Manifest this update: Thu 26 Mar 2026 05:00:42 +0000
Manifest next update: Fri 27 Mar 2026 05:00:42 +0000
Files and hashes: 1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: svkUUqMJtp5xnHqSQjmDt2QU98gPLcLhxSYu+kKWrxA=)
2: dlAKs2OGLWJirE63ZpdfiOJ1IDw.roa (hash: 1fH4y0wj0PpFc5LsMAZ3oXLqRp58JujDDG0+JToDmTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:25:f5:72:f4:f3:65:5b:77:39:a2:a6:2d:c3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Mar 26 05:00:42 2026 GMT
Not After : Mar 27 05:00:42 2026 GMT
Subject: CN=0841f5e8929e874a03488c27b6bfdaf3f62ca1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:07:17:20:32:57:7c:6d:74:4c:f3:67:85:
7c:fc:15:96:dc:e7:79:f5:03:f1:67:c5:4e:a1:fe:
2d:2a:a3:c1:55:b6:76:63:1c:e3:ff:93:37:5b:41:
75:ba:8f:70:30:5f:41:ae:7f:40:6a:92:66:c1:e8:
5d:83:6d:a7:d8:48:cd:2c:81:f3:bf:e9:7f:54:86:
82:e8:ea:59:56:cc:84:4f:ce:49:28:42:a6:71:0f:
0b:e0:ea:c8:fd:2b:d5:71:c7:f9:28:ba:ad:29:9e:
10:6b:27:0c:4c:5e:97:7f:84:b3:6b:9d:62:ba:7a:
5e:cb:68:94:c1:bd:3f:74:03:9e:27:e0:3d:52:12:
e7:bd:32:d0:07:fb:44:74:09:0f:27:7b:4f:cb:14:
9b:fb:b0:1d:9e:c3:d6:3d:fc:66:f9:a0:40:66:d8:
04:0c:1e:07:b6:05:e8:9f:17:75:35:58:ae:e9:ce:
09:f5:f5:7a:27:d4:68:76:d9:2e:46:7e:39:0d:bb:
a6:b5:b4:f3:13:96:2f:1a:70:56:1d:74:bb:06:07:
b5:20:b4:2a:12:e5:11:87:1b:a2:1e:b1:2f:0a:8e:
f5:77:37:40:5d:bc:ba:aa:71:02:c0:e4:d7:ca:8b:
97:ee:1a:86:15:5f:90:fc:fe:3a:62:33:1f:76:ff:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:F5:E8:92:9E:87:4A:03:48:8C:27:B6:BF:DA:F3:F6:2C:A1:D0
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f5:8e:6e:77:b7:c4:fc:b0:2f:e1:af:0b:d3:d5:a0:ab:eb:
e6:33:6d:22:27:b5:17:61:6e:ba:a0:8f:80:7e:df:10:a3:81:
a5:fb:5b:4a:2c:29:c5:6e:4d:50:42:ef:7f:ae:61:6c:7b:fc:
1e:cd:69:05:85:19:d5:28:7e:98:d5:af:4a:5f:49:05:45:e0:
cc:70:92:30:7e:98:4f:35:33:0a:9f:72:fe:08:9d:d2:38:70:
6e:43:04:44:0a:2a:8b:de:ad:43:da:ef:f1:6c:71:2b:2f:9c:
dc:52:ac:25:72:ac:96:5c:47:d9:78:79:b6:9a:04:3e:4e:62:
5a:52:0b:e4:e9:fd:0a:0b:fe:5f:ab:1b:d5:17:e3:b9:08:85:
0e:78:06:35:1f:54:46:4c:2e:7c:8f:c9:0b:b6:3e:b5:e3:a9:
f1:1f:90:9e:84:10:07:7c:1a:ba:ed:5a:e9:d4:30:b5:09:31:
eb:6c:fe:aa:df:00:d6:35:4d:70:67:4d:dd:77:e8:cb:5d:d3:
7b:c7:00:33:45:d3:1e:92:7f:6d:ff:a9:75:ee:90:9b:13:f2:
3a:9a:5f:3b:6f:a8:33:2b:df:43:21:5d:8e:c0:b1:34:a1:5c:
12:6d:a5:f5:a3:50:ee:a3:27:f9:58:26:91:ee:87:9a:8b:92:
50:49:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:42 2026 by rpki-client