Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier: Po1CJdJuPrdG8Qbaq4KSGVsDpAMOcdvn/5kk+lbuRS4=
Subject key identifier: 22:89:6E:B1:28:30:69:7C:8C:66:1E:D3:8F:95:D7:0B:6B:BC:23:16
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 019D29CDB634C51FF924D6BAB48C26867D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 11:00:40 +0000
Manifest this update: Thu 26 Mar 2026 11:00:40 +0000
Manifest next update: Fri 27 Mar 2026 11:00:40 +0000
Files and hashes: 1: RF-tJIO2NICablpWJ0rxXstB-5E.roa (hash: B2eozTRe5cg7SctioXDuhV7y1QMBLlq9hEQ1DOOBwlc=)
2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: 9cWbqY/GdV3myHOJOOH60ztyOTlgJ5VVMYkiw7Zpx0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:b6:34:c5:1f:f9:24:d6:ba:b4:8c:26:86:7d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Mar 26 11:00:40 2026 GMT
Not After : Mar 27 11:00:40 2026 GMT
Subject: CN=22896eb12830697c8c661ed38f95d70b6bbc2316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:63:8e:76:6e:e4:de:84:e7:8b:07:82:7e:
2c:b3:50:d6:65:41:ae:0d:9f:68:c9:c7:09:4b:4c:
f5:73:d1:87:61:04:ea:d2:98:52:3d:f6:1a:66:a6:
8a:8c:6c:6a:be:ff:02:59:9c:09:0d:cf:c4:28:8e:
c7:e9:d3:12:22:12:85:7e:ed:4e:23:73:36:f5:1a:
03:27:b1:4a:64:1b:0c:d2:82:e8:88:9e:dc:a6:a2:
fc:25:9e:63:c8:23:1e:cb:09:fe:6c:27:00:9c:12:
bc:40:c0:a6:13:4a:8c:e3:8b:2b:6e:66:f3:1f:dd:
63:6a:5b:a4:0d:19:21:32:5e:21:a2:6f:5b:d4:2a:
65:a6:d7:f4:55:17:7f:50:e3:97:2a:89:b0:55:4e:
29:47:76:e3:d3:2b:0f:73:70:bb:f1:0f:d1:2a:d9:
a7:e1:93:cb:32:d9:2f:30:7c:8e:7c:59:c3:b8:d3:
e0:08:99:52:1d:b7:6b:3a:99:33:0e:f7:3a:6c:53:
f2:cc:b3:48:08:b4:5a:0e:a6:23:78:63:8e:fd:35:
c1:54:4d:94:76:39:63:01:e4:cf:58:dc:d7:62:f9:
cb:4f:2c:e7:f1:ba:d2:f4:5a:f3:1a:f5:e0:42:48:
4f:f9:c4:d4:5a:61:3c:d1:a2:62:e8:a6:ff:52:6c:
a0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:89:6E:B1:28:30:69:7C:8C:66:1E:D3:8F:95:D7:0B:6B:BC:23:16
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:68:40:71:1e:ca:38:04:83:32:06:55:d5:f7:97:6f:88:fa:
b0:bb:93:82:19:32:b1:1c:f5:9d:1a:cd:9d:1c:8b:d4:bc:27:
24:c9:0f:a0:00:ce:a6:77:b4:b0:a8:64:a5:02:bd:3b:4d:83:
c5:0f:c2:a3:b6:86:6a:d8:ce:cf:03:30:a6:07:67:a4:fe:d6:
31:72:4b:dc:d9:26:4f:73:11:ba:d7:77:e1:14:60:17:99:0a:
d2:b2:23:54:03:80:09:9e:17:e9:82:a9:a1:9b:5c:c9:28:47:
f0:a3:68:4c:02:40:af:c8:61:2d:4f:2f:4c:c9:a7:21:ba:92:
d6:fc:30:89:bd:19:93:88:64:b9:fd:c9:43:6c:7d:44:d7:0a:
65:d1:58:f1:35:1d:ac:94:e0:4a:ed:56:5a:57:f5:84:18:d8:
dd:a2:14:e5:c7:12:6e:52:45:49:cf:29:7f:b6:ee:06:d7:1a:
ca:89:f2:76:49:3b:84:7b:37:de:4f:4d:da:ed:23:fa:73:7c:
9c:11:9a:db:1f:bc:ae:a5:8f:e8:83:46:d3:d6:c4:16:fb:15:
65:1c:bc:34:32:e2:01:ef:f0:5c:48:2b:a7:e7:a8:63:dc:4b:
a7:83:9b:eb:ee:3f:c9:9b:a0:11:84:9b:d4:a5:a3:6a:e1:c0:
e8:ac:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:15 2026 by rpki-client