Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
File: YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json)
Hash identifier: zzWsPO9eqLcytdulmOOZ+eWXzc6rfBdAOcFY9DGefnY=
Subject key identifier: 90:AC:FC:89:39:4C:8B:54:84:BD:3E:6C:22:2F:7A:35:69:0B:93:6D
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial: 019D25F1D3B4288CB8A0031FEB23DEB7CB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
Manifest number: 08E2
Signing time: Wed 25 Mar 2026 17:01:38 +0000
Manifest this update: Wed 25 Mar 2026 17:01:38 +0000
Manifest next update: Thu 26 Mar 2026 17:01:38 +0000
Files and hashes: 1: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: bUw4rS+gFq6D/WpISFyeg5w6BfqlqfRgALFVzAp7xeE=)
2: swT65AQfg5j1CjF54uaPL0J1BFQ.roa (hash: Qq1a2xtb59pWBz8BgcZHcgh++l5kZtY7auRzUv1jzUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:d3:b4:28:8c:b8:a0:03:1f:eb:23:de:b7:cb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602d570b542e7302885d367418df802f99494f26
Validity
Not Before: Mar 25 17:01:38 2026 GMT
Not After : Mar 26 17:01:38 2026 GMT
Subject: CN=90acfc89394c8b5484bd3e6c222f7a35690b936d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:77:b7:b5:e4:7b:ca:c4:0e:1a:27:33:5b:
52:f0:9f:dc:a7:02:88:f0:57:70:71:c1:96:6a:f5:
4d:8e:a3:cc:d4:90:46:10:b0:dc:a9:b1:e1:c2:7a:
6e:9b:4c:27:bf:25:57:40:99:6d:bb:4f:a0:c9:a6:
65:fb:f1:fa:3a:2f:b2:e2:06:43:4e:70:7c:0a:29:
ab:f4:c5:96:44:1c:ef:50:24:ff:cb:e4:65:58:30:
c1:18:ab:2e:d6:5c:58:12:b5:38:f0:58:0b:1f:b0:
10:18:c6:43:0d:a9:76:5a:3c:12:0b:76:3b:a3:6f:
b9:cb:11:2b:dc:ef:a3:b1:cd:5d:bc:b5:66:23:57:
6d:3a:a7:8e:85:cd:0f:1c:26:b6:86:d9:5e:47:0d:
4e:bb:d6:6a:07:55:b8:40:25:10:ef:3a:f8:f5:27:
94:0e:d6:53:36:73:52:39:41:b4:b7:1b:f9:83:31:
22:1f:3b:49:eb:ae:07:7b:3e:62:ec:46:1a:af:e8:
3b:64:bb:96:37:15:54:cc:4a:f3:a8:27:18:7f:54:
7a:11:62:a3:d8:99:2e:14:6b:37:39:25:f4:98:00:
c3:7f:24:31:27:fd:3f:bb:08:92:ac:b3:db:42:24:
f0:20:97:19:ed:45:09:f9:fd:77:fa:7b:4c:74:4b:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AC:FC:89:39:4C:8B:54:84:BD:3E:6C:22:2F:7A:35:69:0B:93:6D
X509v3 Authority Key Identifier:
keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:65:fd:18:42:ed:d7:6c:14:41:67:fe:98:fc:53:47:be:ed:
47:48:f8:25:40:ba:66:8e:fa:88:4c:0d:5e:c8:4c:e9:d0:bc:
ff:48:9e:69:86:8b:2f:a5:cd:84:60:55:ed:75:c6:f2:fa:ab:
0b:84:bf:71:31:8e:67:dc:30:81:7d:29:44:e8:35:d0:36:0b:
1a:f7:21:43:83:55:3b:0a:03:31:55:61:94:0a:4b:f8:a1:0e:
f4:73:2a:6c:7a:68:ed:14:e6:68:28:82:9d:a8:60:92:e5:41:
21:45:23:ed:bf:92:db:ee:b8:c7:15:13:8f:0e:e5:75:e0:6d:
54:e8:95:6c:18:7a:b5:97:43:ab:94:ae:5c:dc:ad:9f:9c:97:
b5:88:3b:53:8b:91:84:f5:06:dd:2e:f1:ef:1f:b5:b3:0e:9d:
68:59:15:b6:62:09:bb:0c:3a:e0:d1:55:a0:52:54:50:4c:29:
6e:ca:2f:93:56:9a:e1:a0:5f:39:70:d4:41:ce:2b:ef:97:91:
07:fb:94:7e:2c:d7:fe:cb:d6:c1:b6:91:44:97:49:c8:79:95:
a8:8d:88:c2:78:95:72:4d:1b:2e:de:e1:bd:94:c1:a3:07:40:
0d:d9:d1:15:0d:d1:51:79:16:77:7b:fd:12:21:d7:1a:3f:16:
fb:e2:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:17 2026 by rpki-client