Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: scbFSGxJ9lr9hHQuq87P9qvTt4oQh/axUQDZLonGjf8=
Subject key identifier: 36:48:7E:0C:66:17:D8:E2:3E:39:B1:D3:BD:F6:9A:4E:F0:A9:5B:93
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 019CE523F9281EA3AA3638F17841BFBD9116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 1739
Signing time: Fri 13 Mar 2026 03:01:05 +0000
Manifest this update: Fri 13 Mar 2026 03:01:05 +0000
Manifest next update: Sat 14 Mar 2026 03:01:05 +0000
Files and hashes: 1: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: ozxMwKVxB/vXGBtO+rTBqt25mYmJoytt0jywx91vQyU=)
2: ds0HwgnE1wK4tusqij2iDAo4C4w.roa (hash: AV7GAfjJkTxxVqb/RhgxTIb2SMDdBmXXWKpB5XXq9g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:f9:28:1e:a3:aa:36:38:f1:78:41:bf:bd:91:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Mar 13 03:01:05 2026 GMT
Not After : Mar 14 03:01:05 2026 GMT
Subject: CN=36487e0c6617d8e23e39b1d3bdf69a4ef0a95b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:5d:d5:c1:b6:53:f1:af:e0:dc:0e:c8:25:
fa:7a:b0:72:b4:3f:4d:c4:91:5d:ff:8e:2e:f8:71:
67:0e:82:09:63:1e:ee:6f:1a:93:b2:cf:10:1a:55:
17:1f:10:46:cb:bb:3d:2c:84:07:1b:85:03:4f:93:
27:7f:e4:d2:52:69:34:dc:9e:b0:f8:2d:57:7e:fb:
e1:87:5b:9b:8f:d4:e1:f5:64:3c:00:fa:47:17:7d:
e0:54:e7:0e:ef:f0:9b:dd:a2:3b:d2:a4:11:10:03:
69:7d:83:60:6f:f8:46:94:53:bf:f9:de:67:a6:ca:
81:fc:8b:e0:42:a8:6b:e5:bc:42:48:41:29:cb:1a:
de:74:9d:46:b7:c1:48:c1:a3:88:fd:fe:0d:40:d5:
cf:0c:6c:95:f6:64:90:93:71:2e:a0:bf:53:41:db:
86:4e:26:6c:07:8b:5c:27:dc:5d:ad:58:6c:dd:96:
91:47:a9:f1:34:86:76:8b:4a:88:6d:80:2b:1d:bf:
3a:0d:73:3a:eb:0c:71:8d:6a:86:76:26:67:2f:ed:
2b:3a:28:d4:05:7e:13:94:92:bb:94:b5:4f:6a:55:
e8:ce:ff:d0:d9:4a:c2:8e:09:fd:db:3f:06:85:1e:
3a:b3:e3:81:9b:62:ef:8e:21:9a:b0:9c:a4:3d:3f:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:48:7E:0C:66:17:D8:E2:3E:39:B1:D3:BD:F6:9A:4E:F0:A9:5B:93
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:43:03:41:95:d4:72:73:87:98:e8:b4:71:47:9d:05:25:3b:
f9:ec:c2:bd:d3:49:58:e2:c2:f6:2e:89:11:2d:46:2c:6f:03:
85:0e:cb:48:c6:9e:83:e7:60:b8:11:bf:a5:91:d8:44:74:3d:
58:77:e3:65:e5:f6:56:39:8d:23:07:5f:34:72:6b:31:c1:01:
75:00:4b:f1:20:e3:cd:de:0c:dd:fd:a0:b2:5d:f5:65:f9:87:
e9:8f:d9:fd:2e:c3:6b:47:52:52:a8:b2:bf:ac:f8:08:68:33:
03:a7:1b:ab:97:69:7a:46:54:ad:6b:f6:50:c4:57:84:57:32:
1f:85:48:46:00:c5:d1:b0:cf:a0:c4:dd:74:8c:ce:83:e8:fd:
ec:3d:1a:d0:e7:47:d6:61:9c:33:ef:61:64:c0:b0:99:05:6e:
79:22:8b:20:4d:48:64:40:20:3c:81:73:14:00:99:37:51:64:
05:67:3a:ff:af:7c:5b:ab:c8:88:40:66:3a:83:65:42:04:86:
3a:52:24:7d:3d:3f:1f:c6:84:94:1f:0f:c0:ea:df:96:3b:e0:
04:64:ae:39:d8:37:f3:3f:81:22:0b:5e:fa:0a:7a:1e:aa:a4:
fe:15:24:5b:45:af:9e:c0:51:9c:0a:f1:c6:96:b1:fd:6c:c6:
48:1e:b5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:27:41 2026 by rpki-client