Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: 0jK5VGGDwxFZQ3ze3Nlc/RELiM6XTdOXrjlHvs7ruqw=
Subject key identifier: 20:9D:C6:30:36:1B:E2:DA:BF:0B:EF:47:33:E3:46:53:DC:60:6C:CF
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 019CE5FFAC13C716BCABFA1CD83AB1A33A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 1060
Signing time: Fri 13 Mar 2026 07:01:03 +0000
Manifest this update: Fri 13 Mar 2026 07:01:03 +0000
Manifest next update: Sat 14 Mar 2026 07:01:03 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: 65rgHNinUmxVSgYDwZUbva3znIEtJvhkjB8EdggHZTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:ac:13:c7:16:bc:ab:fa:1c:d8:3a:b1:a3:3a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Mar 13 07:01:03 2026 GMT
Not After : Mar 14 07:01:03 2026 GMT
Subject: CN=209dc630361be2dabf0bef4733e34653dc606ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:1b:b8:4d:00:dc:9f:7d:f2:04:da:cf:25:
9f:2d:cc:b4:1c:36:9d:49:fc:3c:d8:1f:84:7b:56:
6f:f1:88:09:87:91:68:ae:03:c6:53:16:9a:39:1c:
01:83:01:f6:0c:6d:82:2e:c6:00:0a:64:74:da:5f:
af:da:32:9a:64:ce:60:1b:8e:66:32:3b:1f:52:e8:
a8:f1:ce:de:a8:57:fe:6b:25:f5:72:64:f6:de:01:
ff:bb:ad:b9:9b:95:d6:9f:5c:82:49:c2:a2:32:7a:
7f:66:91:28:fd:88:51:5a:d7:c8:aa:79:e4:c9:9e:
25:25:00:13:e6:62:56:1b:93:8d:8c:1f:47:77:96:
2c:d8:5d:fa:07:4a:d5:8f:68:54:60:19:6f:40:8f:
59:b1:4e:3e:ad:d1:b2:4e:bb:d5:70:76:08:05:f8:
61:31:1a:b4:54:f7:70:cd:b6:5a:96:2b:c6:fe:a0:
d7:f2:c9:6d:41:60:95:96:cb:13:cd:93:26:82:4e:
00:14:21:08:34:c7:00:cd:30:e0:c8:de:20:6c:43:
f9:f0:55:ad:c9:36:35:26:42:16:ed:9a:64:b6:f4:
f5:18:cf:b2:e5:e4:6c:d0:2e:64:2e:40:11:dc:02:
66:21:45:fe:d6:84:8a:2b:73:2f:16:ca:8a:47:0d:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9D:C6:30:36:1B:E2:DA:BF:0B:EF:47:33:E3:46:53:DC:60:6C:CF
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e7:e8:2b:3b:c0:dc:36:f5:ed:4b:f0:c3:72:3e:44:bc:e0:
52:4f:58:b3:14:f4:b9:96:53:14:84:79:b9:b2:50:88:96:5b:
a8:5c:aa:4d:2a:38:a2:13:75:39:0e:d7:cf:1e:84:2e:1f:2b:
c8:16:52:bf:ee:29:45:82:98:e0:5f:9e:17:ef:65:44:06:0d:
d4:7f:02:dc:af:63:ac:5f:4b:2a:cc:ee:0e:64:81:85:98:d1:
63:1c:07:a7:df:fd:a9:e7:e9:98:57:a1:70:0f:ef:22:a6:37:
6c:14:23:0f:72:be:ef:98:4a:18:9e:77:bb:50:80:a2:1b:de:
1b:5f:22:36:5e:33:c8:6a:65:5a:53:5b:e4:55:02:76:86:ac:
9d:3c:72:df:1e:9e:86:95:5d:fe:c5:8c:fd:92:bb:9f:e5:3c:
3e:ff:52:b8:3c:5d:df:a5:ca:8a:5b:6d:5b:2d:17:23:24:03:
0d:d0:1c:6c:80:fc:e7:45:b7:0f:9c:8d:7d:78:4d:61:55:65:
cc:5f:8c:47:26:97:82:31:44:0e:9a:29:3d:3c:2a:f4:96:4d:
c7:e5:ae:69:32:9f:58:83:e1:47:69:e8:5a:f8:7e:22:02:e5:
4d:f6:27:ec:84:02:26:a4:a2:e6:a7:0b:17:3e:ea:f4:58:62:
fc:ee:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:45 2026 by rpki-client