Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
File: YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json)
Hash identifier: LQt79vb+d8qlapNVD8V6WOkO2BCh9FuG98L+VKmFKvI=
Subject key identifier: 32:6C:9F:9A:1C:92:E5:3C:80:EF:CA:FF:E0:08:C7:E4:35:35:72:1F
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial: 019D38D342A449EBB32113EBB7B08F4B188F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
Manifest number: 0B36
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: LE2eUeeMg2Dnp41TZCQ6QJb9-T4.roa (hash: R9/uF4yCT5OCiN9a2sdHn7TEtLNuAXR9YP7aIOCF+IE=)
2: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: FcUnsmYYKItFLny7sdtxZrK4HBZkSsf/FH6y8Ccl0uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:42:a4:49:eb:b3:21:13:eb:b7:b0:8f:4b:18:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=326c9f9a1c92e53c80efcaffe008c7e43535721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:a2:31:21:43:96:00:61:3f:c4:c1:74:9b:
11:d6:e1:0f:a2:8e:1c:91:22:e8:c2:0f:76:63:d1:
77:4d:b0:5f:e6:79:32:40:58:af:2b:21:0f:d0:06:
b7:75:bf:39:54:80:21:d1:ef:53:a6:33:12:54:35:
13:6c:86:12:46:9a:e4:13:e5:5b:20:f6:1b:20:8b:
a2:f0:fd:56:38:e9:be:20:de:da:26:18:6b:30:cb:
27:01:a6:cb:53:7c:76:1e:d9:94:dc:54:2e:4e:81:
88:20:4d:79:f9:9d:8d:21:d8:af:9c:5b:17:ba:9e:
a0:5d:b8:0a:1d:cf:12:86:54:51:c2:b6:fa:ed:a3:
ae:20:8d:cc:b0:6d:df:fd:00:9f:4f:d8:f5:25:ee:
f8:03:6b:7d:51:8b:a6:4f:31:55:10:56:14:0e:55:
45:05:43:16:6c:2c:a1:3b:b7:55:b0:85:fa:09:3d:
38:0b:ea:34:d9:6f:0a:7f:61:15:51:77:b4:70:00:
da:d3:32:18:8b:f8:23:1e:23:40:b4:db:83:ef:38:
a5:ea:cb:8c:57:84:eb:ea:a5:5e:f4:30:fc:6f:61:
f1:42:2e:a1:96:96:2a:85:1a:2c:8c:77:4c:1e:45:
9e:5b:4f:2e:9e:5d:42:29:5e:03:b7:62:3b:fb:c2:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6C:9F:9A:1C:92:E5:3C:80:EF:CA:FF:E0:08:C7:E4:35:35:72:1F
X509v3 Authority Key Identifier:
keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d5:45:6a:37:19:20:0f:c2:ec:e6:b6:c8:c6:f0:05:c7:48:
64:aa:d3:b9:01:c9:81:c2:00:8c:36:71:01:45:08:bf:2c:14:
77:d0:fc:a4:ec:4f:fd:75:78:8d:89:55:0d:5b:bc:4c:7e:e0:
31:45:3b:7b:bc:4b:f7:50:5a:81:40:a0:dd:6d:12:fa:1b:af:
4b:29:0c:24:26:67:98:66:6b:e6:ef:42:5e:a4:55:28:b1:f2:
1f:18:ee:8c:a2:33:17:ff:06:78:0a:94:0e:71:46:c2:7e:41:
67:ad:91:f2:82:56:03:18:9d:5f:4e:f6:4f:8b:d0:91:23:79:
68:6f:16:30:07:16:b0:68:ac:68:c2:7a:86:b7:e9:ed:59:98:
cf:99:4d:a7:9e:03:5a:9d:3b:30:b6:4c:5b:8d:75:df:55:8c:
9a:70:ec:a8:cc:a5:72:06:04:f8:57:32:ba:46:9f:2b:db:04:
94:34:be:3c:82:63:d8:5c:9d:11:2b:92:7b:a8:50:c6:54:25:
7e:ef:f6:f1:19:a6:84:0a:81:5b:0c:99:4e:a8:dd:5c:58:67:
d4:c5:79:f9:57:db:bd:db:2d:e6:df:68:d1:22:35:39:c6:80:
2b:a0:75:76:3b:1d:ed:6b:db:57:d6:47:4b:33:76:13:2c:bc:
0f:34:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:16 2026 by rpki-client