Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier: 0nsKrFmcTpdTF4QfDzZEZZJAlGnEbjiPtLFfGSuOp6M=
Subject key identifier: 45:C5:07:6B:42:C6:8B:ED:6F:64:8E:A2:94:7C:12:F2:D3:8E:E6:6E
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 019D299752E7739DF30806BF06DC78FE808A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number: 147C
Signing time: Thu 26 Mar 2026 10:01:15 +0000
Manifest this update: Thu 26 Mar 2026 10:01:15 +0000
Manifest next update: Fri 27 Mar 2026 10:01:15 +0000
Files and hashes: 1: EymnM_3uw6bBqa2zU41hlqzwZ7Q.roa (hash: vvWH/t7ryv4C49LPruFDavH1zzwMA2a1qBwFbFJLWcM=)
2: FyKNqjFhrFH2OIgFRDsCv8BYs9o.roa (hash: tiDmKjN0UYas924OKqN2XsfQo8ti7C0ROoqNaCI+wEM=)
3: SQMkOh0lAhnLUEE_3rZZmavte74.roa (hash: snhMe8j8Fr+taJDX59zfUjo276EpEtnhIdyeRCqRDG8=)
4: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: xQQ3qYrEoi8Q3WzKyCVZc54oIZAMXZO5d/zNaVKBfXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:52:e7:73:9d:f3:08:06:bf:06:dc:78:fe:80:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Mar 26 10:01:15 2026 GMT
Not After : Mar 27 10:01:15 2026 GMT
Subject: CN=45c5076b42c68bed6f648ea2947c12f2d38ee66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:19:62:00:83:6e:26:96:16:80:02:22:46:9b:
8e:63:6c:ee:84:2a:ab:61:58:80:fd:2c:dd:3d:79:
5a:69:f7:c0:d2:62:07:61:de:2b:15:3f:23:12:2a:
39:88:31:e7:85:1e:f7:2d:33:60:4c:14:bf:c6:c6:
44:8c:39:7d:e8:ef:c3:c5:90:47:d8:98:0a:e9:f1:
76:83:ff:13:c6:c9:b6:3c:c9:09:7a:ec:8c:d6:30:
1b:fc:83:6e:ed:f0:87:a3:e1:ea:6b:08:51:91:3f:
1d:05:a2:0d:a3:1a:61:4f:c5:04:a3:04:ef:63:cc:
79:19:80:c2:0a:e6:d7:fc:0e:ec:03:45:8e:61:ef:
7b:b0:93:ec:c4:6b:25:f5:dc:72:88:ac:fb:76:03:
f4:82:f5:37:13:a2:81:d6:d3:3b:81:22:cc:13:e1:
ac:48:0a:cc:cb:f2:b9:ec:2a:c5:ca:eb:51:b0:31:
7e:b5:23:72:49:31:b4:f0:ef:5f:53:2b:48:68:19:
96:75:05:4d:1f:fe:40:d7:91:d6:ce:dd:f8:32:a4:
b6:3e:6f:c3:e6:25:65:f6:0c:cb:58:0a:54:ea:14:
b2:3f:d5:8a:9f:10:99:7f:46:9e:24:48:10:2b:2b:
df:9a:f2:01:ad:c5:8b:eb:90:27:42:ac:11:60:b3:
4d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C5:07:6B:42:C6:8B:ED:6F:64:8E:A2:94:7C:12:F2:D3:8E:E6:6E
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:af:c3:37:f8:e7:0e:e8:5b:97:cf:e8:31:f8:d8:52:dc:b5:
1b:03:76:e9:b2:cc:af:29:fc:ea:39:c4:8c:a1:80:2f:24:59:
b8:fb:4c:8f:8b:f4:fa:97:6f:04:62:93:15:9d:18:ca:fa:07:
25:57:23:f4:d7:dc:b5:ed:1c:a6:a2:10:6f:37:24:c2:91:e0:
5e:b8:40:bd:8f:11:aa:04:7e:4f:d2:42:86:82:be:99:a4:e1:
29:90:3b:46:1f:b2:07:03:98:bd:2f:25:9d:b8:a3:f7:d5:14:
a3:d3:1e:23:07:62:43:58:25:ce:fb:dc:51:3b:17:bf:68:6d:
ff:f3:a5:fa:37:2c:95:d0:cd:f1:3f:7a:57:87:e8:2d:4a:64:
73:98:63:30:79:e5:47:23:7f:48:a8:de:79:00:9f:af:9e:48:
7f:fc:ef:6c:11:9d:61:22:ea:26:79:11:17:a7:3d:2c:3e:5a:
1b:e5:4e:87:f6:82:1e:23:45:98:08:bd:38:a7:f5:85:43:3f:
b9:60:4f:fc:ef:0e:66:09:0b:e2:d5:7a:ef:2f:bb:af:44:52:
ab:ae:0c:43:61:d4:8d:a3:d0:0a:af:7b:eb:7e:43:d4:ec:db:
2c:34:15:64:fe:29:b0:02:80:ce:75:43:10:6b:8b:13:42:a7:
93:e4:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:52 2026 by rpki-client