Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: ni8XKTAXKWCKLx49TwanUZvsLGkHEyj/wUW5isoTk5M=
Subject key identifier: 56:BA:BF:5A:F3:E1:14:57:F8:75:40:D8:1C:B2:06:BF:80:91:6C:DB
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 019D2A04C222E8CC79E0909D318CF91A0F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 0618
Signing time: Thu 26 Mar 2026 12:00:47 +0000
Manifest this update: Thu 26 Mar 2026 12:00:47 +0000
Manifest next update: Fri 27 Mar 2026 12:00:47 +0000
Files and hashes: 1: 52xBodduqIwcsYy_iwGrav8wNPA.roa (hash: OeV7zUR0TM+VXjljKVbrtHhPSwRtjc0RboLlqaQmwFA=)
2: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: pWof1be+6MoAF8126nzQ3yDBH51CYPrJvaGC9WtwOhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c2:22:e8:cc:79:e0:90:9d:31:8c:f9:1a:0f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Mar 26 12:00:47 2026 GMT
Not After : Mar 27 12:00:47 2026 GMT
Subject: CN=56babf5af3e11457f87540d81cb206bf80916cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:ce:2c:14:53:bc:1a:79:f8:41:cf:25:5e:
8d:cf:05:16:2d:ad:94:83:05:72:c0:5d:92:a4:6b:
00:da:cc:be:0b:72:e3:6c:e0:7a:9a:d6:c4:7c:d0:
8a:14:86:38:ee:46:26:ee:76:c1:d6:f3:e3:e8:b9:
05:4b:b7:63:6f:c2:da:8f:d8:93:f6:fe:02:6c:07:
06:fd:40:11:4a:bd:f7:3c:ad:9f:3e:c2:8d:60:d4:
5d:ed:69:25:bd:d5:a4:1c:13:3e:fb:a2:6b:a2:59:
99:c7:53:79:9f:ef:c0:ac:f8:d4:de:28:16:9f:35:
97:57:ed:4f:07:6c:81:ed:20:34:56:cf:f4:69:ed:
2d:ab:8d:55:3d:b3:e3:89:0d:fb:eb:e8:07:98:5c:
a3:b8:4c:de:25:86:67:d7:e1:fd:2b:47:b3:e1:a3:
3b:ad:30:ea:f1:ff:a9:31:b2:af:c7:8b:35:5e:be:
89:f2:1c:0c:96:84:c5:b3:95:30:84:37:de:45:16:
69:02:0d:16:f3:8d:9d:65:ce:cc:e5:64:92:34:df:
a9:f8:27:61:8f:55:ce:ae:86:00:99:24:69:b9:57:
f2:0b:b9:5e:fb:5a:d9:5c:ce:7e:7d:fa:51:e9:ec:
c1:3a:06:22:95:9d:2a:5a:8a:c1:40:fb:d3:bb:87:
0a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:BF:5A:F3:E1:14:57:F8:75:40:D8:1C:B2:06:BF:80:91:6C:DB
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b5:30:0b:91:cf:8d:88:e7:33:97:14:41:4b:4f:0a:c3:ea:
22:f3:55:01:56:dc:0d:42:18:aa:39:24:b2:00:3e:31:f5:fa:
a5:8b:b1:1f:0f:a7:a7:e9:87:af:96:c7:b5:3b:2e:fc:7d:f3:
96:f4:59:5c:1f:72:ab:48:26:16:c9:54:88:59:ed:db:a4:d2:
72:48:bd:9a:af:76:3d:a7:e7:a3:ff:ab:e3:fb:da:4a:2c:87:
6f:df:d6:33:10:9b:71:cf:0e:9f:df:8b:08:cd:57:84:f8:20:
bb:74:be:8b:2c:17:21:1b:b5:0d:b2:bd:f1:1f:4f:b4:33:6f:
3b:fe:b0:59:de:6f:c1:8d:42:67:9b:61:38:af:c3:78:66:bf:
69:94:ca:5d:76:7e:3c:b9:cc:56:e1:97:59:8b:71:bb:14:7f:
01:f9:2a:27:6f:57:26:a6:56:cf:78:64:c0:09:32:a9:44:9b:
1a:76:6c:55:6b:4a:ed:17:a7:aa:a8:e4:4e:35:96:34:3d:0b:
f1:9c:fb:ca:3f:7a:89:ff:8f:87:5b:76:8c:ac:1d:b6:13:71:
a3:98:e2:2d:61:06:fe:0a:69:80:55:de:cb:cc:8d:33:45:b4:
8e:aa:20:9c:41:ce:a0:b5:45:96:49:47:f4:dd:a6:82:c8:70:
a5:f1:5e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:58:40 2026 by rpki-client