Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File: YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier: W6HjYfuSBxusUuhWGD4TBMfTHUIQXRVALQ7nR+O1gs8=
Subject key identifier: D9:57:3E:6C:74:AC:09:FC:A6:C5:07:DE:14:73:15:AB:EA:EE:A6:DE
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 019D26963B0914C23272E465D0EB9EDECDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number: 0B53
Signing time: Wed 25 Mar 2026 20:01:12 +0000
Manifest this update: Wed 25 Mar 2026 20:01:12 +0000
Manifest next update: Thu 26 Mar 2026 20:01:12 +0000
Files and hashes: 1: 5Tv0CB1BQb-7j2hs5gKN63kboWY.roa (hash: rOsqhBLouEH03XQI21ig1uTPRO/qmeCRcopoN4oIqo0=)
2: FaiCCLCJ_22L37bTLhekiTS6xWk.roa (hash: 0rF76R7VaTqT7h2AWynmZ6U6C8XdF6nPrpTOFBQQBKw=)
3: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: tIPa7F8tidYzd1TdOWbpHD3SEiqn2vH9VuYA+CX4BHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:3b:09:14:c2:32:72:e4:65:d0:eb:9e:de:cd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Mar 25 20:01:12 2026 GMT
Not After : Mar 26 20:01:12 2026 GMT
Subject: CN=d9573e6c74ac09fca6c507de147315abeaeea6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:4d:da:ba:59:89:0e:ef:cd:8f:92:d0:b0:
01:05:c2:b2:f2:0e:f0:cc:44:54:78:ca:10:98:35:
a1:35:cb:d4:da:12:3f:07:ca:c0:0a:b3:b5:ab:95:
24:49:dd:a8:34:bc:2e:a5:0e:0c:cc:7c:47:40:31:
c9:21:e4:2e:d4:6e:01:83:ba:a9:d1:6a:cd:d7:46:
4d:fd:68:c1:c3:79:e6:88:27:53:ed:a5:5b:29:c1:
07:60:c6:f4:d8:0b:d0:8c:89:a0:a8:8e:13:2a:91:
82:cd:c5:b4:a7:aa:24:08:69:ac:57:d9:20:54:d6:
85:23:07:f2:22:12:95:d9:4c:f4:2e:7d:a5:ab:fa:
2c:66:26:b9:2e:c9:fd:9c:c0:c8:37:1d:95:b0:bd:
f8:57:96:dc:f2:80:15:72:47:db:d5:73:62:bc:93:
7f:a4:ae:5f:8f:8f:e9:ea:18:4d:1e:10:5a:87:bc:
7b:0f:47:e9:9b:cd:1d:b4:f4:b2:7b:92:d7:df:0c:
d7:41:1b:43:a7:06:b3:c7:d3:28:a3:32:b7:32:d0:
3a:bd:aa:11:ea:3b:65:bf:07:44:a0:31:d4:50:f1:
a3:d8:a5:cb:6c:17:03:da:d7:bb:be:59:16:53:19:
b4:8c:3c:48:32:91:d5:1d:a2:92:c9:3d:b7:de:07:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:57:3E:6C:74:AC:09:FC:A6:C5:07:DE:14:73:15:AB:EA:EE:A6:DE
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c5:ed:88:25:a1:f8:9a:a9:d9:4a:38:e2:24:95:f3:68:c6:
31:68:2a:1b:44:77:7d:2a:86:f7:31:2b:4c:f1:a6:65:c8:0e:
0e:8e:84:6a:fd:e9:d8:bd:0d:1b:48:97:bf:22:6d:81:9b:78:
c8:0a:0e:f3:68:61:c6:bc:ed:24:76:d7:26:ff:66:b5:f5:3d:
45:33:88:d2:0d:b9:46:7c:4a:e6:6e:b7:9a:77:38:17:58:2f:
cf:a8:f8:ce:5f:29:d5:7c:94:09:6b:c1:81:14:42:60:46:95:
6a:cb:da:35:f1:b8:bc:71:ae:67:84:1b:2b:89:2f:51:43:ac:
05:d3:59:a3:ef:e5:ca:ff:ec:33:34:b8:6e:69:34:cb:b0:74:
bb:fc:17:dd:28:a7:e4:8f:7c:63:55:3e:a2:fc:0a:cc:03:e9:
22:20:08:74:54:4c:07:2d:ea:2f:73:8c:7e:a5:7b:aa:b1:a1:
12:72:dc:de:15:c2:d2:53:32:c6:59:f5:bc:8a:df:b1:76:59:
f1:40:44:ce:5c:96:c5:d8:e6:81:54:64:12:da:84:35:0d:34:
9f:14:87:b4:5b:70:50:f3:e6:07:af:80:2a:20:95:0f:58:e8:
85:c3:28:2e:c1:84:d3:34:a2:d2:95:5f:a0:6c:41:09:b5:d6:
e5:23:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:52 2026 by rpki-client