Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
File: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft (raw, json)
Hash identifier: W1Uk8wQtBsiu+Trk5pb15lYhh816vhwF7jfiP9RHbWk=
Subject key identifier: 13:19:BA:45:6B:F6:62:24:92:F0:BC:5E:BE:A0:82:3E:4B:5E:0C:2C
Authority key identifier: 61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
Certificate issuer: /CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Certificate serial: 019D265F9A5861E0761DB0FB178690CF7865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
Manifest number: 0FAC
Signing time: Wed 25 Mar 2026 19:01:32 +0000
Manifest this update: Wed 25 Mar 2026 19:01:32 +0000
Manifest next update: Thu 26 Mar 2026 19:01:32 +0000
Files and hashes: 1: U9pPpVserKeOyR7cf6mDMG3akbI.roa (hash: hACJJYL/ibjkbFYfmPGmA0g3KxmvcYZIZ/l3HP0kGcc=)
2: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl (hash: xVQuYhL+4it9O+wH2JIZPjJkYn/GR88TJ7kGVWEHBPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:9a:58:61:e0:76:1d:b0:fb:17:86:90:cf:78:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Validity
Not Before: Mar 25 19:01:32 2026 GMT
Not After : Mar 26 19:01:32 2026 GMT
Subject: CN=1319ba456bf6622492f0bc5ebea0823e4b5e0c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1f:2e:19:a5:43:45:cf:c2:fc:ce:18:dc:4c:
cb:8e:56:ec:7b:b8:17:e4:3a:42:52:95:04:2b:5b:
d5:30:05:62:f1:df:7c:2f:d2:d6:ee:e9:81:fd:aa:
5f:f6:73:f9:4c:15:36:9c:d7:92:a8:de:5e:a7:33:
1d:56:17:c7:ba:92:46:1d:7d:c2:53:ee:f5:36:61:
5a:59:55:3b:a7:9e:f7:63:bb:0b:6c:94:70:91:12:
71:cd:68:2b:b2:34:7e:74:51:f7:bc:f9:a4:61:fc:
14:26:ed:af:84:10:37:cb:47:db:8d:4d:b4:e4:60:
bb:83:e0:26:4f:20:30:b2:78:d9:44:9b:3d:8c:85:
40:d6:3c:93:75:ff:c7:79:cb:f1:40:8e:b1:17:d6:
32:43:bb:97:a9:e5:f1:b6:57:5e:4c:8a:9a:bc:9e:
32:ee:7b:3e:17:d1:aa:81:41:3e:1b:18:35:b0:c5:
93:49:cd:fa:4a:e2:31:69:0d:00:c0:03:d7:ce:6f:
bb:07:8b:95:53:db:23:1c:47:f5:53:6a:dc:68:9b:
bc:ed:5a:39:9c:d0:c5:d1:93:b2:86:e4:46:4b:ed:
92:2c:27:41:1a:e7:ab:19:91:47:ea:05:30:c0:67:
44:03:39:14:b0:38:2b:75:cd:a9:d4:c0:9a:33:ad:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:19:BA:45:6B:F6:62:24:92:F0:BC:5E:BE:A0:82:3E:4B:5E:0C:2C
X509v3 Authority Key Identifier:
keyid:61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9d:5c:b4:3d:40:99:a7:ec:fb:b4:1c:6a:da:22:91:4e:6f:
29:9f:ac:21:f3:a0:98:18:e1:f1:f0:4c:ad:6b:ec:5a:b3:bf:
6d:89:41:df:f2:10:e8:1f:ce:48:19:58:a4:9e:48:5b:8c:4a:
6d:78:dd:5e:6d:d8:7c:bb:95:17:f8:28:e3:35:a5:e3:ca:55:
fa:59:d7:98:19:2b:04:77:17:cf:ec:78:51:8d:ed:84:0d:1a:
98:f2:74:7a:3f:73:f3:f4:90:a1:fd:be:31:f1:b1:e8:eb:84:
6f:93:dc:82:99:ff:a5:2d:18:a3:ca:9e:26:2b:1b:15:42:24:
d1:57:b2:e0:9a:f5:ce:ae:88:78:48:c6:b3:36:f4:f7:d1:6c:
7d:4b:6b:e8:d8:09:ee:08:0a:c2:ea:87:d8:65:79:d3:56:f4:
11:6f:6c:ad:15:94:74:a8:4d:fd:b4:19:d6:2b:0f:1a:24:2a:
88:1f:87:ac:52:75:99:cc:9b:12:77:45:04:e8:ea:47:73:59:
cb:ba:4d:c1:b2:0d:5d:72:29:6c:f0:fb:c8:38:e1:d6:2a:45:
c0:8f:52:13:82:3a:8e:e6:d6:ec:63:04:8b:ea:c7:49:1b:9b:
87:27:ca:89:0a:5f:43:b6:51:7c:8f:35:c8:af:e4:d1:2a:5b:
6c:a4:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:16 2026 by rpki-client