Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: cEbUy/cX9x2d3Vv8US70B9/gr2QQTVq+vrmeRQt9r1w=
Subject key identifier: 68:CE:B8:F3:8A:5A:29:B0:D4:9F:0F:71:BE:D7:5E:84:49:71:E1:A3
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 019D28F2FF5182D48CA2BE7CF5F96AE82B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 0870
Signing time: Thu 26 Mar 2026 07:01:46 +0000
Manifest this update: Thu 26 Mar 2026 07:01:46 +0000
Manifest next update: Fri 27 Mar 2026 07:01:46 +0000
Files and hashes: 1: ByyzWxM12G0BPucLG6JiwdJtgEE.roa (hash: 4G2lH2XdNKPJSfTS1f9mdoy30Er7U9NNS0wrRk3c+sc=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: ii8vKr3hzPb/RLVYUEShVnOFH2rCMQEs5FBgCOPYLAk=)
3: lH39RLJn2Hz8-UQkPP2o_JvX24I.roa (hash: iB4qVFkaq5F/oZHjDXHDMbbQUo5Vscic17RgZki9i5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ff:51:82:d4:8c:a2:be:7c:f5:f9:6a:e8:2b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Mar 26 07:01:46 2026 GMT
Not After : Mar 27 07:01:46 2026 GMT
Subject: CN=68ceb8f38a5a29b0d49f0f71bed75e844971e1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:b8:17:9b:e1:96:4b:82:ba:9d:82:1e:14:94:
10:8f:df:c2:d1:7a:33:03:3f:f1:56:6b:2b:4a:aa:
b1:d2:94:cb:40:cf:8c:30:bf:ff:61:10:7a:61:4c:
00:3e:47:c4:6d:3f:5c:c0:d9:7e:fb:81:78:6a:ca:
e5:4b:8c:37:36:89:46:8d:bc:69:a8:34:54:64:40:
1d:7c:a0:f0:3b:61:af:d8:c5:00:09:a9:59:49:18:
e3:e9:64:ac:55:1b:ee:64:88:80:db:bd:73:b8:21:
9d:84:d7:bf:e9:fe:19:c5:4a:73:1d:1f:11:46:d9:
40:df:82:76:c4:ba:5c:c2:97:42:be:b9:8d:a9:8e:
4b:99:7e:94:f7:8c:04:1e:96:24:a1:d8:d1:60:98:
5f:48:bf:34:29:55:68:5d:62:c4:a4:1e:fd:90:86:
c4:74:42:ce:e8:d1:b4:41:e6:2e:8c:c6:32:d5:bc:
56:2c:2e:fe:57:2b:bc:c3:f1:7f:9a:f4:b8:d1:09:
64:bf:8a:be:f7:20:a0:a3:90:72:a3:16:50:40:a4:
1b:e2:74:00:fd:48:ed:49:a4:d1:67:8a:b5:c3:5e:
a2:d1:11:9e:c1:27:6b:91:56:90:60:95:72:d3:07:
3c:99:c3:c4:e0:0b:ce:cf:70:73:e7:0b:f2:fe:e3:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CE:B8:F3:8A:5A:29:B0:D4:9F:0F:71:BE:D7:5E:84:49:71:E1:A3
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d5:fb:67:97:e1:b6:80:b0:be:a4:c9:a2:5a:b6:8a:15:10:
2e:81:18:81:c6:9a:50:c2:a9:6f:82:70:11:a9:64:cc:c4:58:
06:ce:5a:2e:e6:80:16:a5:fc:86:bd:4a:0c:91:7d:12:ef:71:
ce:f1:b9:17:cf:f5:bd:a0:1b:b3:89:46:a6:bc:0a:28:7a:ae:
31:f5:f6:6b:55:27:d3:5a:4a:c0:96:18:49:2b:4d:ce:dc:74:
b2:05:db:c5:cd:50:4e:12:d9:05:d2:18:98:4b:8a:8f:5a:69:
4b:ce:72:4c:48:ae:4a:af:3f:37:75:5c:e7:24:37:a6:5d:05:
fe:2f:64:61:cc:9c:17:06:d3:d0:29:23:ec:d8:d6:8f:bc:a5:
99:1a:b3:4c:25:04:36:fe:d6:25:1d:e8:d7:76:f2:dc:bf:f9:
27:3c:ab:ef:fe:52:fc:43:9b:55:06:d5:9f:9b:8e:cc:0b:8b:
f0:d8:dd:47:05:3e:7c:b1:00:a5:ae:c6:53:12:e1:54:59:63:
62:1a:e5:1a:f1:c5:bb:8e:04:c0:00:1c:79:c1:57:12:06:3e:
54:a4:28:30:50:b7:cd:1f:72:60:9e:d5:5b:03:47:87:72:9b:
a9:02:67:4c:ea:c2:5a:a2:63:f7:7f:c2:e1:84:7d:5f:70:c1:
0e:d6:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:26 2026 by rpki-client