Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: Vh8UhrEKmsZwC63mrLvHNQfec7TH3bx+E8ll9KL61mE=
Subject key identifier: D5:46:DA:3C:A2:F8:5F:D1:54:BF:77:75:15:72:0A:B9:5F:0F:A1:23
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 019D2884E7BCDD2195ECCF30469AF8CF4FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0D6F
Signing time: Thu 26 Mar 2026 05:01:31 +0000
Manifest this update: Thu 26 Mar 2026 05:01:31 +0000
Manifest next update: Fri 27 Mar 2026 05:01:31 +0000
Files and hashes: 1: 1lPDb-Qc7dgd58_k0ugXvgO36w8.roa (hash: up0wKM+by5cZA7R34zmGPf+ho8Ei16Ys0MiWkd/R1jk=)
2: NbUyaKZBv1RnKePQIxmyxsT9zGw.roa (hash: YfuIIb8IL5a5Ql6qciTZgKEuG43i9WjmWByHoP25V3M=)
3: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: 6/x6JoX7kki2jZ4xeu+3XhRCpYthai7pPCkw2r4QRGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:e7:bc:dd:21:95:ec:cf:30:46:9a:f8:cf:4f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Mar 26 05:01:31 2026 GMT
Not After : Mar 27 05:01:31 2026 GMT
Subject: CN=d546da3ca2f85fd154bf777515720ab95f0fa123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:1c:67:d1:49:9c:7c:d7:8f:fb:41:82:3d:
de:02:33:aa:cb:2e:15:ac:ab:84:c4:30:d4:56:b0:
43:8b:a3:8d:8e:b9:70:80:10:3e:c7:f0:c2:85:ff:
2e:2f:2d:54:b1:5d:8c:b6:ab:3f:9c:2a:8f:ba:e2:
1e:07:87:3d:66:1f:8a:66:22:4c:de:17:8d:5c:a6:
db:7c:5e:77:04:55:5a:6b:68:f5:43:cc:47:12:1f:
67:b9:bb:23:f7:d3:7f:fb:90:fe:e9:c1:7b:79:34:
75:f0:d0:88:7b:fe:b0:0a:63:07:70:57:2f:9b:64:
0a:a0:14:2d:d8:32:40:13:31:b2:63:47:a9:85:fb:
a1:73:04:be:b0:af:6a:d1:cd:d7:2b:4d:44:ff:cb:
4b:7c:f1:02:e5:ab:f5:35:70:88:19:0f:8b:14:70:
81:bc:2a:7f:e9:e9:48:3d:51:2d:77:c2:66:87:85:
a1:4c:56:85:f2:63:6c:41:1c:af:cc:c5:55:02:c3:
f2:54:b7:c6:a3:8f:35:68:fe:16:2a:c4:ce:2a:f4:
d6:07:c5:dc:64:2d:21:3a:66:b1:f7:2e:a7:41:98:
22:16:1e:c0:2a:bd:43:10:b9:2b:e4:6c:25:9a:0b:
f9:69:8a:1e:49:5f:23:7a:a7:d7:b4:e4:ed:93:74:
63:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:46:DA:3C:A2:F8:5F:D1:54:BF:77:75:15:72:0A:B9:5F:0F:A1:23
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:47:88:ef:a6:c9:45:01:2c:60:54:be:81:e3:30:62:89:c9:
7c:01:85:a6:53:8e:31:8a:06:00:5d:b8:b2:c8:79:62:f9:06:
5b:3b:fb:6c:70:82:6a:31:f4:93:a0:fd:30:9e:60:c5:87:c1:
f4:30:83:87:e1:2d:ea:8d:a7:1e:28:90:b0:1d:f1:83:1b:77:
1b:f4:a2:ad:d2:a6:d5:97:b4:aa:7a:76:44:04:26:d3:35:4f:
64:f4:ac:1e:c4:04:b6:18:38:db:a8:9c:f3:53:bf:d3:e0:1b:
7a:37:71:10:b7:8f:6f:28:57:ec:d3:38:a5:e4:b2:c0:59:45:
5c:0b:d9:76:cc:6f:cf:d5:d9:ee:b4:02:4f:ce:84:4c:fe:fa:
ee:a8:8f:70:72:1d:9d:5d:7b:41:cc:f8:bb:28:c2:cf:3b:77:
0e:6a:ee:69:e7:88:32:3e:47:1c:8b:7d:d4:2f:4f:ac:21:82:
69:3b:62:e7:59:8c:11:f8:17:9b:16:9b:dd:c4:4d:e8:4d:db:
fd:34:47:aa:2a:c8:bc:35:57:b3:d2:82:02:0b:4b:be:f9:64:
2d:d3:59:e6:f5:be:d1:10:7e:f9:b7:3e:62:25:ae:df:92:27:
f9:9c:a6:40:b2:64:6e:9c:5e:ec:93:7f:96:48:43:77:0b:0b:
63:f5:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:35 2026 by rpki-client