Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
File: YOEKHGag5gAkq6ti0zJoLHE6o0c.mft (raw, json)
Hash identifier: 1fR0ulcbuO74OG1ew0n71xkqTLMp7rHm/bwuhzOKsVQ=
Subject key identifier: ED:23:4E:FB:D6:70:90:20:6B:18:7E:42:74:86:80:D4:57:43:2D:BC
Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347
Certificate serial: 019D382EA13448A61C1587A7EC66FD252E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:01:13 +0000
Manifest this update: Sun 29 Mar 2026 06:01:13 +0000
Manifest next update: Mon 30 Mar 2026 06:01:13 +0000
Files and hashes: 1: YOEKHGag5gAkq6ti0zJoLHE6o0c.crl (hash: aRRMN8CE4mtCHCNK3ItPfH9MANQReumY58e6y19P64g=)
2: ddMAIyT-Bg6VBZDUpFb1sZXNUGU.roa (hash: ZJNIgGVCnwwLExWWtHO1eDKLXNM052in6SsRsPrXcKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a1:34:48:a6:1c:15:87:a7:ec:66:fd:25:2e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347
Validity
Not Before: Mar 29 06:01:13 2026 GMT
Not After : Mar 30 06:01:13 2026 GMT
Subject: CN=ed234efbd67090206b187e42748680d457432dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:b3:eb:56:af:6e:28:00:ae:a8:4c:d4:52:
d3:42:37:ae:bb:92:43:50:1b:e3:0e:7a:f0:c9:8e:
de:fe:71:5e:13:20:36:1e:47:f0:ee:02:03:9b:75:
df:37:4a:f3:37:f0:e4:34:0f:7f:8b:a2:d8:a2:20:
45:5f:36:69:65:35:aa:2e:2a:ae:e9:32:18:7b:15:
66:a3:67:86:86:90:61:21:06:62:ee:61:65:07:f1:
42:1d:f0:d1:d2:e1:b9:70:47:c8:43:a7:37:b4:be:
1c:e9:8e:bc:ad:bc:7d:57:b3:50:a1:92:c9:9f:70:
f7:3a:86:b1:69:d7:6a:11:b3:12:03:65:4b:c7:ac:
1c:40:4d:2c:a0:8e:70:0c:3d:25:7c:f5:91:15:e6:
8e:12:37:fe:f9:69:0a:62:0a:d1:0d:4c:d2:da:16:
42:7e:34:1b:0d:3c:bf:81:87:73:76:a2:14:ab:6d:
52:94:38:49:9f:d5:99:eb:a0:7e:5f:27:c0:a6:3f:
3d:52:bb:ec:e0:22:03:37:05:24:58:97:fa:d6:27:
00:43:5e:45:79:5a:4f:7d:3c:ea:64:9e:44:0f:fd:
16:eb:76:42:ff:c2:85:c8:e6:ae:69:37:b3:20:6b:
11:c1:6f:89:50:5e:dc:47:dc:72:7e:71:7d:70:f3:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:23:4E:FB:D6:70:90:20:6B:18:7E:42:74:86:80:D4:57:43:2D:BC
X509v3 Authority Key Identifier:
keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6a:1b:d7:9d:3e:74:ac:35:45:da:a0:c0:d1:7c:1c:59:64:
d4:04:8d:a4:d8:1d:62:43:fb:a5:56:63:d5:a7:d9:6c:44:f2:
65:50:dc:9a:95:14:69:48:95:71:ca:83:1b:a8:b4:6b:06:88:
d8:9a:6a:65:5d:1a:20:6c:f7:f9:a9:38:2d:68:95:a1:72:ba:
3b:e0:68:1d:19:da:7f:49:da:35:15:8f:9d:7a:c8:09:d1:50:
4f:17:34:c9:a3:53:77:4a:5e:f1:0c:cd:71:19:57:7c:69:02:
72:b8:b0:90:73:de:27:d4:41:b7:ac:3b:0a:bd:ee:5b:d5:10:
0f:d8:5e:e6:b6:e9:45:f0:29:7d:97:6f:a2:0c:ce:d6:5e:85:
1f:4f:64:a7:9d:37:5c:98:68:5f:9c:cb:fe:28:66:f8:6b:5c:
d3:5a:90:80:4d:4d:18:46:6b:e9:62:7b:c1:e0:ee:34:f7:07:
9f:94:57:b0:e8:bd:53:d3:86:92:00:86:80:9c:f5:c7:f5:02:
46:fa:95:43:db:9b:05:5d:d1:73:a9:77:7c:b6:fd:2f:5b:ad:
4f:17:ae:94:90:24:2c:76:fc:63:2d:5d:ad:56:0c:3b:ad:a0:
2e:05:2e:ad:29:68:ac:69:67:86:20:7a:db:d9:7d:75:75:8c:
3f:8c:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:07 2026 by rpki-client