Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: beo3t6z1JmP3IqvjJReHixoGx7aHLQgFra+F0FjFJp4=
Subject key identifier: 6D:30:BB:57:9B:93:1F:A7:C0:1E:35:2E:E9:B4:0F:D5:9E:2C:17:BF
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 019D273B15753647E893E65F02F0E4B31EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 11AD
Signing time: Wed 25 Mar 2026 23:01:16 +0000
Manifest this update: Wed 25 Mar 2026 23:01:16 +0000
Manifest next update: Thu 26 Mar 2026 23:01:16 +0000
Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: 13WCnvLqEo96I4cxVl9qEVB0PCbLkDmnagKBIs/59Jw=)
2: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
3: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:15:75:36:47:e8:93:e6:5f:02:f0:e4:b3:1e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Mar 25 23:01:16 2026 GMT
Not After : Mar 26 23:01:16 2026 GMT
Subject: CN=6d30bb579b931fa7c01e352ee9b40fd59e2c17bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:95:ec:6b:e5:8c:b3:05:b2:46:20:ab:70:
3a:cd:9b:b3:49:b6:52:a9:61:46:b7:d0:87:28:9d:
04:ce:dc:1e:06:13:91:5a:01:b2:d7:47:f2:e9:bc:
84:ec:25:f8:c3:2e:24:14:dd:ab:da:f1:4a:55:8d:
93:4d:1c:5c:62:16:fc:2f:d7:0e:19:64:c5:1f:6a:
c5:8c:fe:82:62:7b:33:d7:d4:32:05:7c:53:94:85:
63:df:f2:f1:0c:44:05:2e:97:4d:13:59:5d:61:fe:
37:0a:c7:ee:8c:05:d5:d5:8b:d6:c8:a9:93:84:be:
31:bf:43:a4:33:37:be:0e:f3:0e:1e:fb:88:63:20:
b0:27:02:e4:99:3f:f5:10:cd:fc:52:18:c4:18:fe:
f6:14:ae:cb:92:9f:35:e5:24:9f:00:b8:cc:f7:59:
8d:30:f0:08:67:0e:b6:ce:a2:c0:78:7b:55:0b:b6:
1f:91:b1:62:0d:99:6f:20:e8:bd:62:e9:23:83:6d:
25:c2:39:79:08:41:62:0c:27:51:45:77:80:07:a9:
68:dc:7d:87:89:32:8f:1e:1c:9a:7e:97:6b:81:cb:
ff:5f:a3:b2:cc:54:67:52:89:65:3b:95:9f:b6:9c:
fb:b4:f1:87:71:41:9e:d0:e6:2c:50:fd:4b:d3:47:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:30:BB:57:9B:93:1F:A7:C0:1E:35:2E:E9:B4:0F:D5:9E:2C:17:BF
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:25:fb:b8:b8:69:49:87:44:bb:89:5b:9a:fc:8f:64:b3:83:
e7:e8:94:36:16:dd:bb:4f:44:65:03:00:23:26:5e:64:41:cb:
04:ab:20:8e:ef:be:8c:fb:b2:64:81:d2:8b:32:40:8e:3f:8a:
a8:ab:22:5b:f7:b7:d3:e0:74:42:65:4f:79:a5:22:97:b5:db:
43:6b:f2:64:0b:5b:b0:3e:6c:b7:a3:59:7b:51:0b:16:14:b0:
26:12:d5:6c:3a:f0:cc:46:ad:1f:65:a1:77:6f:46:03:d3:d7:
9f:0e:5a:67:00:f0:39:74:0c:ee:1d:f1:f7:93:10:32:0f:0e:
c7:be:74:0e:b6:af:23:35:5c:a6:fb:64:e3:9e:c9:c1:c4:d8:
f5:4a:c4:8e:69:2c:32:b4:7a:80:ab:1f:65:60:f0:56:53:4e:
ba:87:b7:3c:bc:4b:ef:0a:30:57:92:7f:72:4d:b0:03:e5:c3:
62:b3:f5:ae:32:26:67:62:b9:df:aa:93:5f:a6:76:66:1a:c5:
d6:f8:17:fa:83:7e:81:71:c5:d4:00:0a:ad:ae:8a:b5:04:cf:
93:bc:e5:5b:1c:74:a6:c1:a9:cf:aa:71:d6:52:2a:60:60:f4:
94:12:f1:a9:0d:5f:44:07:f6:18:b9:1a:a5:21:f3:25:46:43:
28:e0:eb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:25 2026 by rpki-client