Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: VDrwvrzW8swq+9pBBkBr3CM5tHxMSgtXUG3jP6OKU8E=
Subject key identifier: 60:E8:1B:A4:F2:CE:E3:9E:DC:F9:D4:C4:50:85:9D:41:F8:89:47:DC
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 019D375238DBEBE8292375A4E38DCB887325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 02E6
Signing time: Sun 29 Mar 2026 02:00:28 +0000
Manifest this update: Sun 29 Mar 2026 02:00:28 +0000
Manifest next update: Mon 30 Mar 2026 02:00:28 +0000
Files and hashes: 1: 9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (hash: MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=)
2: BtoXyxMSDIQKMTy6jmmOzPMifBs.roa (hash: 8KwO1lQ/lrfb32wFNdnAhNa5nkjafPNwoIk1Z923QrM=)
3: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: jvsTq8XcQSdjdqIXvQp2/141Tw6H9xCG4hNUSmm5DLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:38:db:eb:e8:29:23:75:a4:e3:8d:cb:88:73:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Mar 29 02:00:28 2026 GMT
Not After : Mar 30 02:00:28 2026 GMT
Subject: CN=60e81ba4f2cee39edcf9d4c450859d41f88947dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d0:32:29:46:27:88:0e:68:cc:2c:ef:16:63:
28:ac:15:16:dc:08:b0:ce:8b:8d:0b:cf:b0:36:44:
6d:02:95:83:0b:00:56:54:dc:99:fa:54:9d:8a:96:
a5:ba:1d:62:2d:88:57:1b:d6:cb:73:02:7d:6a:6d:
69:0b:ee:17:6b:4a:e7:98:6e:27:e3:2e:5c:85:34:
19:3f:6a:14:d4:61:47:32:eb:f4:83:84:ec:cd:14:
45:57:2b:40:bb:90:8c:ed:41:01:f8:e9:b7:a6:04:
c0:90:13:3f:b8:85:a3:9d:78:1e:41:36:4e:72:90:
e4:df:60:3b:b3:40:44:41:e7:c7:65:5b:9d:74:6d:
01:4f:fd:14:c7:97:62:6c:ca:8f:53:5f:90:2c:8f:
c2:a0:08:d9:49:bc:59:71:3e:54:bb:45:50:45:cd:
85:7c:0e:0e:67:0c:db:31:5c:ba:7c:87:18:79:69:
37:64:b1:c8:5f:d5:23:a6:a5:5e:df:9b:65:ae:b9:
e7:6b:72:7a:6f:5f:d0:d7:a5:1a:87:a5:96:95:40:
f2:10:59:9e:7c:38:b9:31:b8:69:0e:30:92:2a:a7:
b0:f6:c6:42:f1:b7:a3:f7:1b:99:e8:b7:85:d6:ff:
00:03:87:03:66:b4:5e:c6:7d:0e:66:77:44:cf:26:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E8:1B:A4:F2:CE:E3:9E:DC:F9:D4:C4:50:85:9D:41:F8:89:47:DC
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5b:9c:2d:93:12:d3:1b:c2:5e:cb:e9:79:87:9f:2b:3a:fd:
b0:87:6e:df:5b:dd:44:ec:8d:8e:49:93:ba:75:08:cf:e3:df:
81:66:23:52:8c:e8:ce:66:d9:ad:81:71:d5:53:46:48:56:ab:
2f:98:3e:50:f6:bd:00:39:cb:ca:8d:47:92:9a:3e:db:d1:fe:
43:f3:7c:4b:1b:f0:5c:10:7c:bf:49:b2:0c:7f:00:fb:4f:e4:
6c:49:97:60:6a:a1:04:bf:0c:9e:cf:fc:d7:1f:a1:25:4c:4a:
ca:70:39:29:17:c7:62:df:bc:6d:47:d5:c6:3a:46:de:2a:23:
6c:8f:ae:16:27:a7:2b:59:fe:01:a0:35:b6:76:c5:3c:a9:22:
a9:e3:ae:77:7c:01:24:84:92:f8:30:13:6e:f3:30:60:45:a8:
41:2c:37:80:08:43:69:a3:88:37:3a:9a:8e:49:74:dc:d0:d8:
c9:0f:7a:9c:66:4f:fb:7a:f9:f2:7f:12:bd:fe:bc:4f:ff:fe:
f6:32:e4:34:c7:75:77:92:2d:3e:06:0a:65:dd:ef:df:46:4b:
c5:3a:71:67:50:dc:f1:cf:65:1c:1d:fe:7b:35:4c:ac:97:d5:
b5:06:49:ce:b7:17:15:52:17:70:63:65:c5:bc:71:11:16:d8:
f9:64:aa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:25 2026 by rpki-client