Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: 2Xs42eRWHl5FogNFgv96Ur8FF7hgP/DOVnG9A/WT7aY=
Subject key identifier: 82:08:87:9D:58:6C:EC:46:E5:57:CC:63:DD:F6:A1:6A:54:96:2C:1B
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 019CE410F22F7BFAAA1B686A9969E50AEED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 1865
Signing time: Thu 12 Mar 2026 22:00:41 +0000
Manifest this update: Thu 12 Mar 2026 22:00:41 +0000
Manifest next update: Fri 13 Mar 2026 22:00:41 +0000
Files and hashes: 1: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: ZBQeAnrRGOFsn4V1XDPD3ddR9BoJhA1+bh22qUQHdrc=)
2: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (hash: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI=)
3: yrgQph9zHMA3wU0ZObxjZhTJQrM.roa (hash: XV/X6CYSDEZtr00aa1x8ls6ykfziXhFe1fHOXXDEkhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:f2:2f:7b:fa:aa:1b:68:6a:99:69:e5:0a:ee:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Mar 12 22:00:41 2026 GMT
Not After : Mar 13 22:00:41 2026 GMT
Subject: CN=8208879d586cec46e557cc63ddf6a16a54962c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:28:2e:8d:1e:03:db:bd:f9:42:97:e7:f5:
77:0f:b7:92:18:dd:c4:7f:75:07:5b:53:b1:30:5f:
47:79:76:f3:31:e9:11:5f:0d:18:63:a9:10:b5:df:
82:d5:49:52:0e:e5:f6:77:b8:01:71:e1:54:c1:8e:
f9:e6:4e:08:6b:0d:aa:3b:c3:e1:48:c8:14:87:eb:
61:01:4c:0e:e1:d6:6b:f2:cd:6e:2d:60:92:b2:ee:
0f:e6:1e:05:61:bc:18:74:33:4a:c8:63:e8:11:38:
f4:ce:dd:b6:6c:f2:8b:bc:df:7c:21:78:32:cf:5e:
5a:18:8d:fc:b5:3a:d0:8d:2a:29:21:e1:f8:84:55:
7c:5e:e8:c8:46:a5:8d:d5:95:24:21:7d:cc:03:7d:
dc:48:27:92:24:68:ed:af:c8:f6:b0:e8:5d:f5:70:
ff:17:25:a2:31:33:33:4d:1a:a7:f3:aa:68:90:e9:
9a:16:d3:9a:93:03:53:f3:35:3c:86:8d:fa:fb:04:
79:2d:81:03:e1:bf:93:4e:d2:b4:ad:a3:cb:0a:78:
86:5b:3f:5a:52:08:d3:90:7c:ab:80:26:ea:cc:3c:
e5:26:36:bf:b8:cd:dd:3e:59:1c:d0:a5:3f:a8:9b:
42:13:07:80:cf:05:bf:fc:f2:3e:30:71:04:8d:e2:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:08:87:9D:58:6C:EC:46:E5:57:CC:63:DD:F6:A1:6A:54:96:2C:1B
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4b:60:4c:03:a7:71:16:13:e8:58:5c:83:c5:ff:f6:74:bd:
16:25:b7:76:2d:6f:00:5c:4f:75:ae:ae:71:c1:e2:19:8a:49:
5c:1c:8b:e3:e6:4c:fe:3f:c6:4f:3c:a5:4a:a6:a4:7e:e4:ab:
14:52:78:37:36:d2:e6:72:b3:e0:ad:69:a2:09:43:18:26:31:
35:98:98:76:43:5a:8b:e6:97:29:c3:b5:bf:07:3c:55:e6:3b:
de:d8:b2:3e:54:75:1e:ad:36:e9:0e:e4:38:68:09:b2:5f:dc:
96:f7:15:99:0c:5c:9d:a1:61:b5:ae:13:a5:19:ba:21:c1:62:
52:c3:f7:7f:b4:00:5f:96:d6:84:08:88:3d:a4:fa:13:ff:94:
28:6c:2f:d9:4f:41:d1:43:bd:a7:af:53:20:9f:ae:d5:70:b2:
f6:32:05:b0:ff:65:e2:20:02:12:c3:28:58:5b:d2:1d:49:57:
fa:e7:b0:1e:e7:17:42:98:b2:cf:b3:d2:f4:f5:f8:61:e8:85:
df:69:67:67:2d:01:73:9e:85:95:c2:17:28:35:31:43:ca:2e:
36:6c:01:0d:2f:a7:c2:33:cb:3b:c5:2a:77:71:2f:3e:be:ff:
f3:ce:e4:e7:dd:0a:ff:29:35:fe:83:11:29:78:86:e4:8e:d8:
32:8f:e8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:08:38 2026 by rpki-client