Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/986b51-5db8-4b7c-8605-16500d6c7014/1/YUDktab5bKTgzKDD69ZQ2o5fkhw.mft
File: YUDktab5bKTgzKDD69ZQ2o5fkhw.mft (raw, json)
Hash identifier: J97+4LvwCerC1XyZaOeZkz71UJR1FJp0DQrXHwRrVnE=
Subject key identifier: FA:CF:45:00:66:D9:03:85:D8:BB:47:C4:AB:50:56:58:14:EA:48:CD
Authority key identifier: 61:40:E4:B5:A6:F9:6C:A4:E0:CC:A0:C3:EB:D6:50:DA:8E:5F:92:1C
Certificate issuer: /CN=6140e4b5a6f96ca4e0cca0c3ebd650da8e5f921c
Certificate serial: 019D3375C1604A5513D886DBC674F87D08D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUDktab5bKTgzKDD69ZQ2o5fkhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/986b51-5db8-4b7c-8605-16500d6c7014/1/YUDktab5bKTgzKDD69ZQ2o5fkhw.mft
Manifest number: 62
Signing time: Sat 28 Mar 2026 08:00:48 +0000
Manifest this update: Sat 28 Mar 2026 08:00:48 +0000
Manifest next update: Sun 29 Mar 2026 08:00:48 +0000
Files and hashes: 1: YUDktab5bKTgzKDD69ZQ2o5fkhw.crl (hash: b35IrMfaWsrY+ND9ZjR9wjtvf6OggoXzYe03ATDqpN8=)
2: YyixRgQkCRlptWPD1EtoXlr--oE.roa (hash: XOxUCcAQJDI29aG4fQOLmqpsz4BUrXY6zDEjsBxBHik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/986b51-5db8-4b7c-8605-16500d6c7014/1/YUDktab5bKTgzKDD69ZQ2o5fkhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/986b51-5db8-4b7c-8605-16500d6c7014/1/YUDktab5bKTgzKDD69ZQ2o5fkhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUDktab5bKTgzKDD69ZQ2o5fkhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:c1:60:4a:55:13:d8:86:db:c6:74:f8:7d:08:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6140e4b5a6f96ca4e0cca0c3ebd650da8e5f921c
Validity
Not Before: Mar 28 08:00:48 2026 GMT
Not After : Mar 29 08:00:48 2026 GMT
Subject: CN=facf450066d90385d8bb47c4ab50565814ea48cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:8e:09:0e:aa:89:d0:1d:bd:c7:1d:b1:40:
90:06:c2:22:55:9a:da:4f:27:d0:30:6d:f0:3d:b8:
f2:49:98:68:61:a0:db:54:8b:46:3c:ed:ff:b2:78:
a9:89:f8:91:4d:71:8a:ba:2b:7a:75:90:90:7f:24:
40:47:ca:1b:7c:1b:a6:7a:d7:d2:5e:a7:cf:6b:04:
2a:58:4e:1f:44:1f:83:bd:a1:88:71:80:8c:83:0a:
2d:91:e1:2e:63:0a:b4:b9:87:f5:1c:19:c4:3e:81:
d0:64:35:c3:d7:62:47:96:ed:2d:c6:e4:6a:63:5f:
f5:67:7d:26:55:35:e0:54:b3:7c:d4:35:e2:dc:f1:
d5:15:8f:30:22:cc:6f:c4:c5:74:cb:74:9a:d8:63:
f5:6b:69:e6:86:13:b6:ba:b8:71:c8:af:05:02:3e:
b4:f9:0a:fc:84:f3:dc:bf:c9:e5:a7:07:60:2c:ed:
b9:1b:75:86:cb:02:02:9d:16:e4:15:4d:45:ce:bd:
3d:a2:bf:6c:29:4a:03:8c:71:e3:fd:54:b1:6b:b5:
14:f3:21:8d:62:48:52:63:9c:94:a1:a3:63:46:ae:
42:c0:e9:ce:60:53:e3:68:62:e5:d6:01:ac:56:36:
96:c3:a9:93:c9:d6:e4:48:30:1b:21:a8:0f:0e:1b:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CF:45:00:66:D9:03:85:D8:BB:47:C4:AB:50:56:58:14:EA:48:CD
X509v3 Authority Key Identifier:
keyid:61:40:E4:B5:A6:F9:6C:A4:E0:CC:A0:C3:EB:D6:50:DA:8E:5F:92:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUDktab5bKTgzKDD69ZQ2o5fkhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/986b51-5db8-4b7c-8605-16500d6c7014/1/YUDktab5bKTgzKDD69ZQ2o5fkhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/986b51-5db8-4b7c-8605-16500d6c7014/1/YUDktab5bKTgzKDD69ZQ2o5fkhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a2:78:47:ea:48:a2:5e:2a:8f:bb:cb:10:03:b9:14:5a:03:
7a:e1:81:d0:9c:ed:0c:1a:20:44:fe:ce:99:31:02:1c:e7:47:
e1:73:82:df:99:48:cb:b3:10:90:f1:6c:d0:7b:9b:e7:76:02:
4b:be:35:79:42:56:44:90:aa:f2:cc:c5:60:b6:a8:11:2c:e6:
9c:c3:ae:d6:78:39:29:24:35:42:12:ed:89:ef:3f:a0:d9:a9:
54:9e:72:82:8e:5e:9d:63:fa:81:29:00:e4:20:44:11:97:fc:
21:e5:15:ea:ce:47:ca:1c:d0:fd:87:41:7c:53:85:d3:12:c7:
6f:03:34:12:0b:2e:b2:c1:c1:ac:c8:c0:f5:11:96:9f:8f:4c:
d4:a6:f3:45:82:0b:06:1d:35:52:3d:82:39:d7:d0:34:cf:78:
a8:bb:be:e8:9d:56:8b:54:58:2a:cf:5f:6d:57:ab:56:19:87:
75:56:f3:70:17:38:8b:1c:5c:d7:4d:cd:9f:f6:0d:61:48:69:
1f:e0:7e:26:d5:43:46:d3:56:d4:4d:20:37:3e:ed:1b:05:ef:
b3:1f:3c:78:9c:bb:1d:3c:4f:44:3a:80:99:cd:c8:23:4a:25:
31:7d:4b:c1:fb:94:5a:10:98:be:3b:df:2c:44:41:79:b9:09:
96:60:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:37 2026 by rpki-client