Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File: YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier: bmn1QArY9MFQ4nj2O6rQLC9rAB+PGd6k5uiOXw0gCus=
Subject key identifier: F2:2C:ED:94:C9:FA:61:09:CD:78:4C:F8:A7:DD:F9:AE:EB:87:0B:FF
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 019D65E2D1276B0DE99E313E92534A4BCFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number: 0CCE
Signing time: Tue 07 Apr 2026 03:00:56 +0000
Manifest this update: Tue 07 Apr 2026 03:00:56 +0000
Manifest next update: Wed 08 Apr 2026 03:00:56 +0000
Files and hashes: 1: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: PUmqGp5ldvwVmbrCL5Oj6D2A/WKHEKT57vyJXMhf79c=)
2: n9mxzIt_205s9vyeaLn8CBdcCG4.roa (hash: rvZ5m2zISXN1TJw2DOfdTsy2gRGtTRFcUGePQPD44jY=)
3: uT_DZnppDbYyGpbRufk93-G-qXc.roa (hash: DhGqIEL5HRNKYGVeysWOoXm6c538KCGb6awXVVDvM3c=)
4: zXN8Zo903MoyG9swu9ptS1d7Y-o.roa (hash: wf4nwKfhrGscwzAC+PKo2qMsSU5af4zzL/Bk9hi/rJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:65:e2:d1:27:6b:0d:e9:9e:31:3e:92:53:4a:4b:cf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Apr 7 03:00:56 2026 GMT
Not After : Apr 8 03:00:56 2026 GMT
Subject: CN=f22ced94c9fa6109cd784cf8a7ddf9aeeb870bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:5c:81:74:62:92:f9:57:48:9d:3e:10:d1:
30:d0:c0:d8:f6:62:f0:bf:4b:b6:d1:b3:0a:c5:ec:
0d:b0:21:44:db:dd:28:73:e5:6c:5a:0b:f4:48:6b:
74:23:a2:75:84:54:23:22:9e:04:6c:f7:90:f6:b1:
46:65:fa:51:f0:71:be:37:4c:40:0a:41:ea:fd:d9:
0d:ba:18:40:38:78:47:2d:62:fb:63:c0:00:e6:25:
c3:72:97:60:59:f2:7d:d2:9e:4c:49:ce:09:34:43:
79:79:50:c2:52:b8:f1:a1:fa:98:ec:9c:7b:41:8e:
41:c2:a6:b5:e0:97:fb:93:c5:3a:78:00:fb:af:9c:
62:78:55:5e:84:4a:6d:11:9f:17:e4:a6:e7:ee:fd:
ee:71:19:4e:5f:9d:79:a3:bc:f3:a0:2b:4c:07:fe:
09:80:59:c7:6e:b4:2b:39:79:54:18:91:0a:85:2a:
49:bd:b7:ae:7a:59:09:cf:96:84:30:d7:84:ac:03:
03:9f:fc:28:ae:72:f4:af:62:1f:c2:ff:f1:81:25:
a1:b3:6e:99:b2:e2:70:60:ce:7c:30:26:91:fe:ec:
c9:a7:a4:e7:1a:17:54:4e:39:67:be:a4:a5:25:4c:
fb:9c:75:4c:c2:ae:c8:92:16:20:e2:3e:49:05:3a:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2C:ED:94:C9:FA:61:09:CD:78:4C:F8:A7:DD:F9:AE:EB:87:0B:FF
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b6:66:72:70:b9:df:80:f8:dd:87:52:6f:be:32:ef:9d:a4:
da:17:e1:79:89:8c:07:76:14:ff:8e:ea:15:82:d7:54:e6:94:
78:62:7f:9f:e3:8e:c1:7c:9f:03:31:36:e2:6f:aa:82:8a:d2:
2b:6e:e4:a3:29:63:42:0d:dd:88:a0:f3:6a:06:31:02:0e:d5:
75:29:e3:0b:83:5a:6a:83:4a:d8:cc:d7:26:18:d6:82:3b:ce:
0e:f1:cf:43:34:83:63:8e:b7:05:b7:a2:3c:99:c9:ac:4f:05:
fe:a2:ce:f6:a2:05:e8:7a:9b:ce:b9:f6:56:c7:ac:c3:07:a1:
b9:93:34:e2:10:de:19:ee:68:6f:86:79:d2:3b:25:de:b5:96:
ab:33:4e:d5:ea:db:06:76:01:30:f8:fe:35:43:4f:6c:0f:76:
ee:33:c0:ac:1a:70:44:a7:f5:bf:d9:fe:ea:a2:08:66:32:11:
38:a2:6b:90:13:f8:5e:da:2d:d6:30:87:be:ef:35:16:1d:34:
df:ed:53:98:70:c6:93:8f:02:2b:a9:b8:cb:02:33:8e:85:96:
6f:49:aa:d9:75:69:ea:8b:15:0f:27:7f:a5:62:f3:32:c6:67:
fa:41:b8:d1:7f:c4:24:5e:03:3a:4f:85:65:b9:69:f6:58:6c:
3e:56:e0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:07:44 2026 by rpki-client