Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: Fib2U0+G3OXfXcWsSqOCv3NiyQx/PPbf+fP175znNNk=
Subject key identifier: 04:B0:2A:CB:44:83:21:AF:DF:B8:B4:81:73:A8:C7:9A:B8:F7:9C:8A
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 019D28BB2555DD5A40061497BD8821E5B895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 06:00:46 +0000
Manifest this update: Thu 26 Mar 2026 06:00:46 +0000
Manifest next update: Fri 27 Mar 2026 06:00:46 +0000
Files and hashes: 1: Lft1TVXiYVdikjn_A01iU-k02DE.roa (hash: AUhYpOdbzarhMkv1M+Fv4hjTQh+rQF7twSf3TVX7HXM=)
2: PejTwsBdKH5-f3Vp_HDi2lV40HI.roa (hash: sQMSKyXDXZzbEaxAsB9c8v4n+R0LYVRrVo36SmpYF40=)
3: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: VqGhPzWr7tVQkCs3JkNu2ubpu6x+78TYMO6g8jAeeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:25:55:dd:5a:40:06:14:97:bd:88:21:e5:b8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Mar 26 06:00:46 2026 GMT
Not After : Mar 27 06:00:46 2026 GMT
Subject: CN=04b02acb448321afdfb8b48173a8c79ab8f79c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:5e:69:00:fd:5b:75:b4:fa:2f:19:69:8b:
28:25:03:bb:b3:4d:83:aa:e6:92:41:56:b5:15:99:
22:2b:f3:5e:43:ec:85:6e:ac:54:c5:bc:a7:02:e4:
3f:ca:9b:92:d4:5d:34:6c:8a:ae:2f:a0:bd:ad:8d:
7e:75:11:ed:7f:70:43:57:55:bf:f3:f9:1a:42:b3:
94:d4:a4:3e:66:bd:2f:99:5d:fe:9e:06:9f:37:a7:
c5:9a:8d:c4:a2:42:e7:af:91:90:b9:59:40:c0:8d:
7a:4b:83:20:84:47:68:ec:cb:67:d3:83:4e:d5:05:
b6:20:08:fe:0d:ca:cc:37:17:03:b1:39:75:f9:f7:
5d:8d:cd:d9:75:3c:7f:7f:d0:cd:73:ee:7f:52:58:
89:58:f2:e8:4b:e6:c4:26:85:9d:47:92:cd:d9:8c:
8b:f4:48:31:02:16:8b:23:d7:8f:74:db:6b:b8:75:
53:60:43:7f:4c:89:8b:9f:9a:69:94:f3:d5:ef:c4:
de:9e:9a:ce:eb:06:e5:96:ad:f0:6d:48:66:a7:19:
cd:34:d5:67:37:f0:f2:d1:f8:90:6e:43:77:8a:87:
34:b9:17:3c:47:c5:90:cd:35:88:88:ad:15:17:96:
e6:96:1e:92:fe:5f:b1:08:bf:10:8f:16:9d:98:97:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B0:2A:CB:44:83:21:AF:DF:B8:B4:81:73:A8:C7:9A:B8:F7:9C:8A
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:62:f4:02:5b:23:98:5f:af:e8:28:df:b4:c5:5d:6c:74:0e:
ef:38:43:b9:63:3f:cc:3a:c1:9a:68:cb:27:f6:ca:ba:9d:c3:
ce:fa:4a:08:0c:6c:37:ac:fe:b2:56:42:43:88:d4:bd:37:88:
2f:79:a4:77:7e:8f:8d:ad:6c:cc:1b:d3:09:f9:0d:7a:bf:9a:
aa:65:3a:7f:91:ce:e2:2a:48:be:49:1d:2c:64:64:4c:9e:0a:
16:d6:50:b9:bc:63:d8:c3:29:a2:09:d8:aa:f4:00:68:e1:eb:
a3:20:6c:2d:3e:ea:33:9f:46:18:77:2f:89:cb:cb:a8:70:41:
2c:f0:fd:9e:ba:5a:7c:6a:0d:e2:35:55:15:8c:bd:17:7c:6e:
f6:9f:75:85:0a:b0:9e:c3:3e:4e:44:25:11:c8:97:14:f6:34:
fe:ff:81:fb:bd:98:0f:61:a1:f0:7a:af:c5:b6:0b:cc:11:4d:
1b:c7:de:1e:61:97:20:05:70:e5:fc:61:23:73:91:38:20:a0:
bd:27:9f:fb:50:d9:0a:93:f8:09:b6:d0:38:f9:69:48:2c:82:
d0:a3:0c:a2:2d:f4:2a:2f:01:35:52:94:35:59:31:2d:02:7d:
94:97:5e:a0:a3:30:69:3e:1b:0c:9a:32:29:6f:85:69:15:7c:
d1:76:76:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:38:03 2026 by rpki-client