Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
File: YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft (raw, json)
Hash identifier: UUlkZS/q0UW2HUjnpzBo9IHAC4uTvksRvZAJzfsTTbY=
Subject key identifier: 01:F0:F7:E9:C1:10:47:16:BE:4C:E2:70:C8:D3:1B:92:8B:2D:9A:99
Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
Certificate issuer: /CN=61340818a8633908cf37ea145d66d92452fb73aa
Certificate serial: 019D2B4DF70572465E3469F2C7924CEA88EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
Manifest number: 0CEA
Signing time: Thu 26 Mar 2026 18:00:22 +0000
Manifest this update: Thu 26 Mar 2026 18:00:22 +0000
Manifest next update: Fri 27 Mar 2026 18:00:22 +0000
Files and hashes: 1: WLy09eFH3uc2aH0cddH4hg2SKEE.roa (hash: yx78w/OQnOQhJ5Wl9aNR6GNjQgIHzbW+TJH/0ydI0BE=)
2: YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl (hash: N3MCWicjKi9UgLkfJ3hdZ3h0yXrBRlumx4UyxHpR7a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4d:f7:05:72:46:5e:34:69:f2:c7:92:4c:ea:88:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa
Validity
Not Before: Mar 26 18:00:22 2026 GMT
Not After : Mar 27 18:00:22 2026 GMT
Subject: CN=01f0f7e9c1104716be4ce270c8d31b928b2d9a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:f2:9a:9b:cc:a5:b1:19:04:56:52:91:0f:
c9:1b:cf:b8:9f:4f:0a:2d:10:8a:0b:97:b7:cd:7a:
c9:67:6a:85:f6:17:6b:bc:42:78:0e:6f:d3:61:74:
a4:7b:1a:30:2f:4c:aa:86:36:fa:98:8c:52:49:b3:
10:c0:ca:bd:98:bd:bb:99:40:2c:44:ca:92:27:f0:
42:fb:8c:bd:73:69:d8:5b:c6:f8:aa:d8:5f:64:29:
72:64:ad:78:db:ec:37:ca:41:f0:59:49:1d:eb:da:
bc:d2:63:03:a0:6d:ee:22:e2:91:7a:b1:de:4b:9e:
3b:00:ae:f7:9d:da:4e:3d:99:f5:da:35:f2:d1:0a:
5f:6c:51:fd:de:68:20:28:80:34:20:66:7a:65:63:
e1:46:53:fa:4a:e2:fe:b1:21:70:ff:f0:7b:1e:2c:
13:0e:f3:2b:92:ee:2a:b6:97:a9:35:91:54:43:7d:
16:6a:a7:53:c4:8a:f2:28:8d:46:4f:90:16:54:56:
9c:df:c6:ad:61:04:90:e1:f0:54:1c:ab:10:6c:50:
7d:1d:2b:10:20:65:de:5f:c5:20:6e:f0:bf:38:72:
9b:0b:99:9a:52:34:cc:4d:7f:66:54:8c:f8:05:46:
18:85:30:da:bc:0a:88:ce:bd:bc:c4:40:de:9b:43:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F0:F7:E9:C1:10:47:16:BE:4C:E2:70:C8:D3:1B:92:8B:2D:9A:99
X509v3 Authority Key Identifier:
keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2a:4d:87:b1:ef:16:d4:c2:88:7f:90:95:46:60:30:24:cf:
cf:6c:38:cc:3e:11:f7:5d:91:e6:7d:88:98:66:b9:a0:24:d0:
58:15:54:ec:34:2a:bf:f1:78:7a:dc:ec:9a:b8:1a:dd:d8:34:
16:c8:5b:c4:12:81:57:d8:74:66:e4:21:b6:52:67:86:7a:62:
ab:c6:c7:ec:1e:56:32:9c:d2:7e:7a:9d:f7:cf:a8:2e:ff:e2:
47:20:58:53:bc:6e:b2:fe:b4:30:2c:78:f5:88:df:5e:1c:f1:
6c:00:f8:26:fd:c9:e3:b9:25:80:13:65:0b:59:aa:2f:75:19:
34:02:cf:f9:71:0b:e7:6b:bf:76:4c:89:28:12:d0:26:86:44:
2c:b5:08:d3:72:61:18:94:c1:6b:71:19:33:79:39:73:fb:5a:
3a:5e:cb:d2:fa:34:f5:73:3f:0d:be:96:0b:d2:62:db:1e:99:
67:45:56:e2:f8:3d:a9:83:84:97:b1:84:dc:91:46:2e:00:47:
b7:90:a7:b4:b9:c2:bf:15:d3:fa:27:3d:45:42:01:8a:a9:56:
f4:0f:dd:13:bc:49:ef:fc:5e:47:4b:1b:bd:8c:79:12:4d:b9:
4c:a8:ca:7c:e5:04:94:99:eb:fd:3d:a8:fd:0d:40:3b:08:37:
b1:2a:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:38 2026 by rpki-client