Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
File: YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft (raw, json)
Hash identifier: FbIGjAJCzC5Qm66bb3sU9PwrL6QWO0p+Bm/k8nSEtVI=
Subject key identifier: 19:D6:2F:83:B3:38:97:E7:B7:16:51:E3:A4:DE:77:40:64:BD:00:85
Authority key identifier: 60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
Certificate issuer: /CN=6034561c039ac6450bec8fd595c148cc770aa036
Certificate serial: 019D322BD546C8D8C892B11EA53A5DDB068B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
Manifest number: 056B
Signing time: Sat 28 Mar 2026 02:00:26 +0000
Manifest this update: Sat 28 Mar 2026 02:00:26 +0000
Manifest next update: Sun 29 Mar 2026 02:00:26 +0000
Files and hashes: 1: YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl (hash: fWK0jUBLR8f/wWXCPVtvUbYbuY4oJ0Rt0WYz7/t/fOs=)
2: gcVNUuUdoSo3U3pakJzDIPh24c4.roa (hash: 7JCmU5EFsrp83gdEC4TMm8cosiIzFZVUHWLg8MKyDJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:d5:46:c8:d8:c8:92:b1:1e:a5:3a:5d:db:06:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6034561c039ac6450bec8fd595c148cc770aa036
Validity
Not Before: Mar 28 02:00:26 2026 GMT
Not After : Mar 29 02:00:26 2026 GMT
Subject: CN=19d62f83b33897e7b71651e3a4de774064bd0085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:f3:ad:14:17:22:40:fc:85:c4:c2:47:c4:
d6:bf:98:b3:ed:ae:08:89:52:57:e0:e8:00:da:9a:
de:1a:01:6a:0a:d3:bd:9e:1e:1f:ba:47:fa:a5:f5:
00:7f:65:62:2c:e9:3a:87:a9:2d:a9:56:83:75:c3:
fd:36:72:02:20:e7:60:d4:01:06:7e:d8:7e:83:6a:
81:62:b3:54:66:c9:0e:7e:f4:55:37:6b:23:1f:7c:
43:6f:32:60:6f:3b:bd:9b:15:2b:a5:d6:d9:34:27:
6d:d5:5e:24:43:ee:95:e5:cc:af:42:ed:40:ce:65:
55:3e:79:ad:b3:b6:00:5c:1d:66:96:12:e1:74:28:
f8:f5:1e:c9:1f:7f:a1:77:11:94:f8:b5:cf:38:a0:
d7:68:d6:65:48:b4:4e:00:9a:2f:c6:14:00:9d:ca:
fa:94:6a:ee:92:ca:e8:00:60:b8:78:18:66:f1:57:
19:3b:76:32:96:f0:2a:6d:46:c1:23:5c:03:9b:b1:
fc:bb:42:ff:4c:e8:66:ff:c1:e6:f1:f3:9a:d4:e9:
1e:00:88:d4:35:4e:78:f7:7c:0d:a4:eb:15:89:41:
91:92:70:87:01:cc:6f:18:92:fe:02:b1:36:41:5b:
7e:80:f1:4b:14:b3:ca:c0:37:fd:dc:00:28:3c:8a:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:2F:83:B3:38:97:E7:B7:16:51:E3:A4:DE:77:40:64:BD:00:85
X509v3 Authority Key Identifier:
keyid:60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f0:7a:43:32:21:1f:9a:d8:b4:d5:30:39:e2:71:ab:7e:ea:
d2:97:e7:64:7c:0f:b5:60:fa:63:05:98:f1:3c:28:2c:3a:2d:
de:95:29:b4:bb:e0:c6:98:3e:e7:01:5b:a3:f1:b9:ec:4b:d8:
34:d2:41:a9:35:0f:d4:d7:d1:3b:70:40:cf:48:00:db:a0:e5:
26:08:98:a8:eb:87:3b:f3:f2:81:bd:05:3c:a0:63:4b:37:20:
52:b2:c7:34:50:37:7e:5e:bd:fb:41:d7:58:ea:c1:53:f9:c1:
36:23:62:1c:53:94:af:5f:42:98:86:8d:d9:03:31:52:f7:1b:
29:73:c2:e9:3f:ff:93:a6:4b:e9:d7:fd:ce:03:7a:b9:c9:c4:
b1:86:ab:a6:17:cb:2d:61:88:02:78:8f:26:21:b6:45:47:26:
2e:c8:ee:87:39:a4:f2:30:68:ab:09:77:82:bb:d0:c6:d6:78:
86:00:5d:ce:a5:53:bc:e6:29:7d:bb:da:98:f4:03:ad:a7:9f:
97:0b:7c:ee:96:a1:59:a2:18:a0:4b:17:ef:86:7e:51:fe:2c:
71:95:79:22:d9:8b:a5:29:5d:57:13:49:03:09:d2:f7:5d:9d:
27:22:65:7e:37:42:de:51:94:ad:6e:7a:54:3a:c5:32:22:0c:
14:11:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:08:06 2026 by rpki-client