Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: 7R55puuWv7Q2+8fs1Uwi28F39yUqk6K79RzMdJIJFlM=
Subject key identifier: 11:3B:4B:12:50:40:6E:F1:3F:BF:08:9C:FC:E9:04:F3:A5:13:4A:0B
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 019D26282DE7D4A4965AAB46CB1E14578A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 023B
Signing time: Wed 25 Mar 2026 18:01:00 +0000
Manifest this update: Wed 25 Mar 2026 18:01:00 +0000
Manifest next update: Thu 26 Mar 2026 18:01:00 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: 7b2kR1Ki/ASydGwWFE5KMs7r7ynpeEPLrepUID8tAu0=)
2: i757eDGPyWXy1WJ59_NsKxP9nBk.roa (hash: aclUO+YpHA3b3E++8LC8TZOgc8p99LqEe7lxYmVbjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2d:e7:d4:a4:96:5a:ab:46:cb:1e:14:57:8a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Mar 25 18:01:00 2026 GMT
Not After : Mar 26 18:01:00 2026 GMT
Subject: CN=113b4b1250406ef13fbf089cfce904f3a5134a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:8f:dd:b5:44:f0:bd:c5:24:47:a2:46:75:
fa:19:6b:d5:8a:ef:7e:63:22:c5:cb:17:2a:9b:cb:
87:ec:c6:e1:31:0c:9d:da:cb:5b:a6:66:ce:cb:d4:
46:d3:68:6a:02:c0:4e:89:ad:3a:54:19:3a:6b:4c:
bc:41:92:fc:a5:b1:4c:e8:cf:47:10:4c:76:60:76:
8f:3a:f8:bd:75:34:08:31:83:60:0b:93:cd:fb:64:
7b:3f:95:bd:57:94:59:f4:17:61:db:f0:4a:be:f8:
cc:3f:53:73:bc:f5:57:fe:8f:b4:a9:52:7a:51:0d:
ff:6a:c3:7d:36:05:f9:2c:81:7b:5a:01:52:3d:51:
b7:62:46:8e:ab:a4:1d:5b:cc:6c:93:b1:fd:70:7a:
d6:ec:5b:a5:e7:e2:db:77:d3:9b:72:54:15:31:4d:
e0:76:2b:3f:a3:a8:f5:0f:a4:db:c1:1d:05:ea:76:
fe:d5:45:ee:ce:45:19:dd:52:ea:37:df:2b:96:6e:
97:84:9a:5e:12:12:b8:d3:1c:e5:f1:d8:a8:bf:e3:
0e:b7:e6:68:eb:94:4c:0e:58:d4:92:4f:ab:ef:53:
3f:e4:d8:58:05:ae:fb:50:a0:e0:1a:3e:67:17:a7:
5a:53:4b:16:de:a3:69:e1:2c:cb:bd:49:6a:12:18:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3B:4B:12:50:40:6E:F1:3F:BF:08:9C:FC:E9:04:F3:A5:13:4A:0B
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a7:f5:ac:77:63:b1:09:9a:ca:8f:89:2d:6c:80:68:0d:64:
99:96:7d:9a:a2:7b:35:be:b2:37:87:97:f5:3a:0e:41:bb:cf:
59:66:df:7c:ed:d6:24:10:e7:ed:4b:1c:cc:9e:8e:3a:79:00:
7f:34:2c:71:c3:f8:67:1a:db:fc:e1:5e:be:01:c7:ce:74:32:
1a:8a:72:65:27:05:42:6c:63:d6:bf:c7:23:0e:83:75:8f:13:
9d:0e:39:a6:cd:a4:c5:ca:95:6b:a5:15:22:f5:d0:23:ea:ce:
94:ac:6c:a7:4e:3c:d9:8c:fe:65:83:2f:45:ce:bc:35:d6:c3:
ad:ec:8a:6b:87:ab:c7:6e:f5:8b:3c:72:a9:ef:13:67:73:88:
26:11:24:e4:e4:f4:6a:e7:4a:b1:7f:66:07:e4:43:15:32:3e:
78:04:d1:92:a2:0e:c0:b5:68:f2:22:00:49:52:b0:ce:87:d3:
11:02:81:d3:0c:ba:b3:f4:ed:75:98:fb:c8:1b:d3:35:f7:04:
59:39:12:d0:de:57:83:75:fb:04:fc:9f:10:41:75:7c:b3:e2:
66:81:b7:7a:88:bd:ff:aa:fb:10:8f:01:23:47:70:d2:41:fd:
d8:68:e3:f9:94:79:5b:a7:cb:a7:79:dc:3c:04:ec:ce:ea:fd:
7c:56:76:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:44 2026 by rpki-client