Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: WLftYBh706u9O2UQGYbIcHtXJW2yEoNZNwifTpRLZio=
Subject key identifier: 3A:F8:2D:F0:C1:0D:75:1F:69:E7:DC:3D:56:79:E2:BD:31:18:98:AB
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 019CE3A2BCAC899E1D89CDD43435E82F8FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 16AB
Signing time: Thu 12 Mar 2026 20:00:18 +0000
Manifest this update: Thu 12 Mar 2026 20:00:18 +0000
Manifest next update: Fri 13 Mar 2026 20:00:18 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: vRaR8JORPc9D11R11vSXxfL5nOSliPI2Tn9ZBB0JWhM=)
2: tCO87qgLeHdiJcQ1IV_bd46Jvho.roa (hash: 2SSHDUuNwyIUrIbmZYF0QjOFxPKwxanOkPswUq79oUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a2:bc:ac:89:9e:1d:89:cd:d4:34:35:e8:2f:8f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Mar 12 20:00:18 2026 GMT
Not After : Mar 13 20:00:18 2026 GMT
Subject: CN=3af82df0c10d751f69e7dc3d5679e2bd311898ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:ef:0b:4d:1b:b9:41:9b:b0:b8:06:21:48:
e4:25:b8:3f:f3:96:e3:13:2b:91:12:35:cf:fd:56:
56:4c:39:2b:84:d3:4c:19:78:dd:1b:ff:8f:e1:bd:
29:3e:9c:cb:30:c3:a1:80:b6:8a:6d:6b:ec:75:fc:
75:f8:2d:f3:a3:7a:38:eb:75:7c:6c:ce:c9:7d:4c:
83:28:5e:dc:6f:64:89:d6:2c:cc:ef:50:f1:a9:f3:
a6:40:d6:3d:2e:23:e2:e2:36:6e:e8:10:cf:b1:1b:
07:84:a3:18:21:e2:50:77:48:fe:26:62:e1:99:a4:
fc:5e:3f:8e:9e:70:57:b7:33:c3:32:57:20:e6:04:
52:86:75:43:b2:af:08:7c:09:48:1d:f3:21:b7:1e:
53:0f:e2:e9:d9:0b:28:fb:5a:b6:4f:45:ee:37:fc:
4c:2a:7a:61:84:a1:7e:cc:ab:84:0e:42:79:88:4a:
4e:bf:1b:b9:21:99:61:a8:d3:cc:10:54:9d:37:8e:
24:08:5b:4e:c6:85:46:28:3f:8c:db:c2:5d:28:4d:
ef:de:20:15:67:33:45:61:e9:a5:a8:f1:f2:4f:c9:
2a:9f:fe:c5:b3:8c:f3:33:53:27:64:cb:0a:e8:fb:
ef:a2:b3:75:f6:18:65:a1:d5:3f:af:fe:07:c0:87:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F8:2D:F0:C1:0D:75:1F:69:E7:DC:3D:56:79:E2:BD:31:18:98:AB
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:35:2f:9c:c5:86:c7:a5:cd:aa:71:7f:4a:56:b7:5a:72:31:
55:ad:da:32:b0:19:78:e8:b3:bd:81:94:3e:67:47:0a:a0:87:
d8:9b:4f:6d:af:f0:08:07:60:a4:95:9d:a4:94:00:08:20:f6:
98:0a:ef:57:c1:f8:93:15:f0:17:c9:5c:0e:00:fb:dc:f4:d9:
58:bc:ee:2e:c8:7c:83:34:da:3d:5a:ac:22:3c:00:61:07:25:
6d:3d:a9:31:d5:09:26:93:d4:aa:14:d4:78:59:9f:9f:1f:09:
3c:71:53:68:86:64:fd:86:19:44:d1:a6:0b:2e:39:e0:33:59:
ab:20:46:1c:01:7f:17:42:b0:78:6c:e8:0d:6c:34:61:a8:29:
e8:21:6c:7c:85:ac:f9:b4:4a:22:aa:32:4f:ed:ea:84:00:32:
0f:3a:e1:3b:84:77:cf:34:4c:73:ce:51:8a:86:8e:17:ab:59:
e2:1b:c6:1f:79:67:0e:f6:36:92:1d:90:7f:97:6f:fb:f7:e6:
ad:75:6f:39:16:61:36:6f:f2:52:c1:71:65:3e:96:1f:a5:81:
19:ad:7d:2d:20:e0:5d:11:28:80:9f:53:51:17:48:d2:d4:3f:
f1:01:16:b7:df:74:ad:0b:5c:11:79:64:e1:43:8c:e1:70:c0:
f0:e8:a5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:05:25 2026 by rpki-client