Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: VcaJkkZGhg0i6QhsJgeFDnskoTM9rx54uvw7Z1kUBW8=
Subject key identifier: E6:BF:BD:18:0A:B3:15:5B:78:21:75:2B:F4:9D:0D:22:13:0C:E7:FA
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 019DCD50035A0EE3D5334581578FC1615A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 1724
Signing time: Mon 27 Apr 2026 05:01:06 +0000
Manifest this update: Mon 27 Apr 2026 05:01:06 +0000
Manifest next update: Tue 28 Apr 2026 05:01:06 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: 1AVKqscXEYWHxVE4BfNv6jO8A4AveRlfAa3F+qZ5/Uw=)
2: tCO87qgLeHdiJcQ1IV_bd46Jvho.roa (hash: 2SSHDUuNwyIUrIbmZYF0QjOFxPKwxanOkPswUq79oUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:50:03:5a:0e:e3:d5:33:45:81:57:8f:c1:61:5a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Apr 27 05:01:06 2026 GMT
Not After : Apr 28 05:01:06 2026 GMT
Subject: CN=e6bfbd180ab3155b7821752bf49d0d22130ce7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:87:13:3b:fa:ee:36:07:b7:fd:64:6e:22:
98:e7:c9:54:17:90:54:16:9c:06:f9:12:a6:95:44:
ab:ab:83:ef:ab:3c:43:6d:40:f3:c6:a8:57:7e:66:
12:02:97:1b:b8:82:97:c4:db:d8:96:0e:df:78:c6:
d6:7e:f5:76:a4:b8:08:c7:c7:6c:4b:ef:cc:49:aa:
c6:5b:7a:fa:58:55:13:e4:5c:42:83:73:ac:bb:70:
f4:9a:35:e5:a4:3f:96:a0:16:a6:10:5e:2b:ba:f7:
a0:2c:38:52:2a:dc:66:dd:c8:78:8f:70:7c:bb:7c:
66:3c:60:86:24:56:ed:d7:8f:d7:b3:b3:b2:52:0f:
70:3f:0d:c9:88:b3:13:fd:91:d4:31:ca:59:40:10:
c7:45:0b:77:b2:97:b9:a4:e8:dc:45:a3:05:47:a3:
9d:79:a2:7b:76:af:15:5e:40:85:6e:c9:30:ca:de:
43:ab:65:0f:3b:78:c4:2e:0d:7b:e5:51:94:56:af:
29:a3:31:62:da:b3:c0:03:b8:2c:54:0c:9f:f2:38:
96:5b:f2:e5:88:a4:6b:2c:6e:c1:f9:b8:b9:35:22:
bb:98:27:58:57:2e:b4:a6:1b:a3:e2:a4:0e:59:71:
37:8a:fb:2a:ad:c5:60:b9:38:f0:45:5c:ab:84:51:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BF:BD:18:0A:B3:15:5B:78:21:75:2B:F4:9D:0D:22:13:0C:E7:FA
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9f:b6:48:92:d6:09:10:f2:e2:f8:97:99:89:9e:c8:13:c1:
73:ae:31:ce:96:dd:8f:01:92:35:00:9e:6d:d6:0a:06:1d:14:
dd:3f:4a:ac:78:58:61:07:6e:91:6a:36:7e:1a:d0:87:45:e1:
30:e6:d8:a3:43:75:45:12:ad:aa:df:f4:5c:32:b0:c8:1f:19:
c1:ff:a6:cd:02:20:0c:1f:8d:45:e6:10:fa:45:eb:07:15:62:
4e:ea:f7:e8:fc:bd:70:a3:5d:77:20:49:7f:fe:14:91:31:53:
25:b6:e1:ea:f2:0a:b4:0a:ee:e0:c3:b6:f8:fa:83:c8:c6:07:
0e:10:64:fa:4f:7f:ff:ec:8a:5c:c0:2d:cf:5c:e0:27:49:95:
78:98:42:8b:45:bc:f0:c3:ca:a7:c1:77:86:25:62:ac:e8:69:
2e:71:01:7d:7d:70:bf:5d:bb:56:26:ea:11:10:bb:c5:f4:5d:
f9:24:a8:b5:e2:ba:99:1c:a4:f7:8e:2b:0f:d2:c5:53:3c:07:
e7:f2:c4:6d:5b:f3:5e:5c:94:a5:68:20:cf:75:98:69:2a:5e:
b6:e7:cf:b4:ad:19:10:b0:7d:74:87:f9:e1:ef:d2:48:e2:47:
7f:ed:92:e1:bd:87:76:2a:cd:6e:ca:6c:d0:ca:03:11:17:79:
d2:81:f6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:15:56 2026 by rpki-client