Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
File: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft (raw, json)
Hash identifier: gcjsvlg3b7iII706gz2HVMYCkRpmfOT1+n3WLs7s31c=
Subject key identifier: 74:32:AC:FA:24:A6:88:08:41:A1:47:0A:0A:C7:13:A9:51:EA:B4:0F
Authority key identifier: 63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
Certificate issuer: /CN=6325f514270167a43e65e27df9b3d26efb29c31c
Certificate serial: 019D2772DA442034D58026F92305ED97D1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:02:11 +0000
Manifest this update: Thu 26 Mar 2026 00:02:11 +0000
Manifest next update: Fri 27 Mar 2026 00:02:11 +0000
Files and hashes: 1: L5e2K8bgP91xhefaZp4Rp5H5b_g.roa (hash: roY9RVYQ4JVwY7koRQuiYfCYvH5WdQZUxTSOLdnBJDA=)
2: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl (hash: FSZyI7rR4pP24t+zT/z1UKe1odm+pdl9BvyZOBubYyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:da:44:20:34:d5:80:26:f9:23:05:ed:97:d1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6325f514270167a43e65e27df9b3d26efb29c31c
Validity
Not Before: Mar 26 00:02:11 2026 GMT
Not After : Mar 27 00:02:11 2026 GMT
Subject: CN=7432acfa24a6880841a1470a0ac713a951eab40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:32:a5:6b:2f:5d:57:ef:39:35:c8:4e:37:7f:
de:86:61:00:d4:77:6d:25:dc:d3:01:4a:2a:de:b9:
7c:1b:30:8e:05:85:d1:f3:b3:70:36:c5:7d:e9:3e:
52:54:2e:41:c4:ef:34:2e:2a:53:28:6e:43:f2:c1:
ba:7c:d6:87:52:5a:2d:ea:9b:97:da:82:62:3e:9c:
95:82:c4:01:7d:d2:67:e0:56:89:87:01:27:35:2e:
ad:25:86:36:48:b7:4d:f3:48:1b:58:3a:ac:18:73:
96:20:e1:5f:e7:63:18:16:60:ce:20:6d:36:4b:2f:
e6:b2:c2:ba:32:8f:26:9e:48:26:a5:03:a7:98:4a:
bd:04:4f:b9:78:eb:d5:3c:af:6d:80:e5:19:63:dc:
ea:98:38:2b:89:68:0e:54:94:f2:e5:9b:3c:66:d3:
07:2e:0a:02:39:20:0c:9b:96:65:5a:c3:03:22:b4:
f3:3d:bc:f5:67:92:92:5f:13:24:2d:0c:19:40:a2:
f5:65:90:39:fb:35:37:c4:80:f6:b5:4c:98:2e:e4:
15:c4:31:7f:0e:b3:d6:f3:89:49:4f:75:44:52:06:
b9:2a:47:a2:da:0a:74:04:76:cd:93:11:66:f0:a9:
ac:47:8e:39:ba:2e:c6:94:26:56:99:b6:51:71:25:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:32:AC:FA:24:A6:88:08:41:A1:47:0A:0A:C7:13:A9:51:EA:B4:0F
X509v3 Authority Key Identifier:
keyid:63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bc:1c:0c:d1:18:11:8c:31:a4:33:ca:79:bf:da:d0:de:96:
40:cf:8d:51:2c:be:d8:b7:87:08:41:94:4e:be:18:77:25:7e:
a5:80:43:d7:b6:89:a9:9d:7b:57:e0:f2:2d:7b:6b:0b:d6:16:
80:e2:95:6b:b5:3d:d0:40:83:fb:ab:aa:18:05:ef:51:9c:54:
b6:9f:96:56:56:c4:05:96:32:c4:d8:81:b7:ce:a9:55:28:9d:
9b:f0:e0:5f:14:f7:8d:7f:a4:97:36:e1:6b:51:e7:60:12:3b:
58:16:95:9a:ce:c5:23:77:42:8b:35:5a:2a:46:b9:ce:2f:79:
e4:4c:1a:e7:3d:d7:6c:11:2f:40:78:28:c1:6e:33:34:a6:c8:
b0:49:8a:f9:71:e2:87:1a:b8:cc:de:de:da:08:45:dd:48:94:
a3:7a:82:29:d5:03:65:ce:45:79:b2:bf:45:2f:6f:c9:bd:33:
c4:5c:83:db:92:fd:1e:48:4b:5b:d1:52:f7:b0:53:5a:33:86:
63:ef:99:f0:7d:25:87:f2:c0:f4:6a:14:ab:11:57:81:95:ef:
c7:15:1a:c0:a7:af:3d:c2:87:48:4f:2b:b4:6b:a1:54:62:2a:
a3:70:c8:83:53:fc:5a:a4:02:ab:88:a4:70:18:dd:d7:e2:5d:
6d:71:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:34 2026 by rpki-client