Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
File: YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json)
Hash identifier: 6TchoVPeiWOQSrl39pvbJ14JcJCfZeOXCxhnBjTLtS8=
Subject key identifier: 1C:4B:A7:FB:A5:76:5D:41:AA:49:10:19:10:4F:6E:BA:3B:4C:01:AD
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial: 019D26CD82F541E6E6ABF282E8E55012A2C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 21:01:35 +0000
Manifest this update: Wed 25 Mar 2026 21:01:35 +0000
Manifest next update: Thu 26 Mar 2026 21:01:35 +0000
Files and hashes: 1: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: 3KSo0Q7YILFpRddRjhSRVXsi5dWAz05e7aJbeDOs/CI=)
2: ex_xJpK_CdSqACSQtdB9gjUSuD4.roa (hash: MIYxDXr1ZqH9Kq+ZDYqcGhxuESuPqOopC1Yf9yS3HhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:82:f5:41:e6:e6:ab:f2:82:e8:e5:50:12:a2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Validity
Not Before: Mar 25 21:01:35 2026 GMT
Not After : Mar 26 21:01:35 2026 GMT
Subject: CN=1c4ba7fba5765d41aa491019104f6eba3b4c01ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:af:59:ec:b6:2f:b2:02:5f:9b:d6:c3:70:d1:
13:d3:8e:11:53:bd:9d:cd:18:78:a2:dc:dd:86:c4:
cb:c7:2b:cd:15:60:ff:4c:47:e2:b5:e1:ef:c0:25:
4f:d6:6d:e3:c9:53:65:c6:06:c7:97:e8:a1:6b:1b:
10:9c:46:53:16:9b:06:f4:85:96:bd:98:99:2f:00:
a2:00:1a:f6:7b:49:c6:88:8f:31:7d:4b:65:d8:cf:
f0:61:26:15:72:11:94:d9:94:08:d9:21:a2:0e:80:
d3:e8:ae:15:75:97:d3:b5:7e:07:d7:1d:3e:ed:ff:
97:62:80:ad:03:1b:c4:cb:03:76:2a:66:5b:3a:da:
9c:8f:b4:e4:ce:86:9d:05:d1:80:a0:a2:9d:45:98:
15:95:1d:b9:ec:3e:61:06:d0:86:92:7c:71:62:32:
da:ca:7c:ed:15:18:cd:cb:db:75:0a:e5:c6:49:63:
42:06:0e:7b:17:bc:5b:b6:43:15:2b:d6:d2:12:b7:
48:68:3d:05:ab:5f:2d:ac:85:b0:7a:5f:74:4f:e6:
b2:18:fd:a0:38:9b:c2:67:86:a6:96:c2:80:e9:fe:
11:06:f4:60:32:26:a3:1a:8a:59:96:df:cd:5a:f5:
ba:ae:34:4a:91:0a:b5:fc:1b:eb:9c:f8:eb:5a:b0:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4B:A7:FB:A5:76:5D:41:AA:49:10:19:10:4F:6E:BA:3B:4C:01:AD
X509v3 Authority Key Identifier:
keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:52:30:ff:72:dc:fd:44:f0:a7:e1:12:e7:06:93:3a:d0:3a:
80:97:bd:36:c6:f3:c5:88:1c:8c:f0:0e:6f:a9:1a:a6:e7:ee:
0c:8f:78:e1:29:68:55:2e:29:2f:56:06:23:96:0c:9d:0f:30:
48:13:4b:da:4b:e6:46:37:5b:94:25:bb:9a:39:91:03:c5:3f:
e7:09:48:84:17:1e:b1:97:84:51:11:b8:9b:eb:cf:06:22:b0:
bb:62:3b:d5:ef:9a:e3:f6:d5:b4:1d:d3:7e:15:11:25:3d:94:
95:ce:d5:53:d2:8a:e0:97:f6:b7:4a:09:ff:bd:89:a8:d0:9c:
ad:70:a7:37:e0:2e:b4:6a:1c:87:c0:0c:e5:c8:2f:ee:af:76:
c8:e5:08:c2:22:62:ff:53:b8:3a:c2:55:e7:a5:c3:2c:ce:a1:
1d:57:2e:fd:83:8f:b9:0d:4a:46:46:fd:30:65:c7:77:04:74:
12:76:e4:46:2d:cb:62:db:6e:df:37:a7:f0:09:d0:02:50:cd:
07:3c:b5:af:b1:c6:f5:c5:dd:41:96:05:cf:2f:85:c3:ba:88:
29:b9:cd:e6:1b:35:e1:b9:b6:24:42:b0:6b:ac:17:8c:fe:2d:
4d:d4:e8:8c:52:ce:fa:0e:c4:13:2a:73:1d:76:ff:9c:03:62:
5e:6c:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:17 2026 by rpki-client