Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: l5prMhj+ypSek+BwqZ3lTyCIgLwJ7pWIWlhAE93qVB0=
Subject key identifier: 13:FD:25:9B:C5:A5:00:82:83:A1:08:EF:8F:21:5F:EC:C3:9F:0E:E2
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 019DCFAC671B06CFB8F0B65DF0E93D0191D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 10D9
Signing time: Mon 27 Apr 2026 16:01:15 +0000
Manifest this update: Mon 27 Apr 2026 16:01:15 +0000
Manifest next update: Tue 28 Apr 2026 16:01:15 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: nwj0bRD1E0hcvQjv1Zm41MQawoUtyDgXfNYI+YwhWNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:67:1b:06:cf:b8:f0:b6:5d:f0:e9:3d:01:91:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Apr 27 16:01:15 2026 GMT
Not After : Apr 28 16:01:15 2026 GMT
Subject: CN=13fd259bc5a5008283a108ef8f215fecc39f0ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:3a:dd:af:97:78:f3:63:80:9d:8e:a5:3e:
9b:4a:8f:41:9c:1c:5f:22:e6:67:e8:b6:ac:76:11:
b7:3a:c2:d2:2e:48:e7:19:e7:c4:08:59:d9:74:c4:
21:92:cf:bb:6f:96:ab:c2:d4:e6:e9:36:a6:30:bc:
ab:04:9b:9f:a9:63:77:81:a3:ce:52:79:82:b9:62:
4d:b9:33:df:8d:42:57:8c:2d:fd:b4:3e:93:6b:96:
0e:1d:a9:93:eb:3f:de:08:46:43:7c:1e:c6:ee:95:
58:ee:77:4c:d9:c0:4f:5a:19:90:98:96:47:d4:09:
d7:5c:50:4d:6e:7d:26:f4:95:51:45:81:e2:d7:7c:
da:87:69:a3:c6:a4:fb:21:45:62:4b:72:62:13:11:
10:c5:b5:19:56:0a:19:70:1b:26:04:67:21:57:8e:
f8:24:35:92:4f:bc:f6:40:12:4e:3e:24:4b:c7:40:
b6:af:26:57:71:41:9a:a8:70:85:5d:c6:a4:43:fd:
80:98:48:d7:d8:6c:11:5a:3d:05:00:21:57:bf:bc:
68:eb:35:da:3f:11:30:b9:57:1b:8b:5d:dd:a6:69:
4b:fb:0e:47:fa:8a:0d:e7:0f:68:5a:e1:e3:27:c2:
79:4a:41:65:cd:57:2c:c8:9b:bf:cc:66:89:41:5e:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FD:25:9B:C5:A5:00:82:83:A1:08:EF:8F:21:5F:EC:C3:9F:0E:E2
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:78:0e:10:42:04:e3:68:5c:37:01:d9:90:ba:df:43:43:72:
e9:8b:a7:52:9c:e9:b7:fc:61:e5:d5:9d:9a:8d:4f:0d:a5:cf:
85:d5:32:20:00:5c:27:4e:73:62:31:62:57:a8:f4:5e:d4:25:
80:30:c7:1d:76:46:87:44:3b:4a:a0:bb:e2:97:6c:37:cc:70:
42:01:c8:58:5c:d0:8d:29:05:0a:94:75:45:af:5a:1b:d5:c6:
dd:31:97:a7:69:4f:02:01:e1:d2:67:e0:7e:78:ff:4d:05:b0:
fe:29:fa:de:bd:2d:7b:a1:8b:00:43:6f:da:d7:e5:be:7d:16:
c6:2b:be:f5:81:db:af:39:92:2c:12:a3:20:8c:91:30:33:9a:
c3:11:b0:da:e5:4e:ab:aa:c6:91:7b:19:21:53:d3:e4:4c:59:
88:b8:20:bb:7b:a1:13:f2:ff:01:ee:e1:65:15:dd:49:74:a4:
95:65:7b:da:34:42:07:25:50:78:2b:a0:e6:18:ed:d1:e9:35:
c4:4b:de:b5:25:73:e7:9c:27:c5:a5:c4:8b:3f:16:9a:9f:69:
9e:1b:a0:87:91:31:70:0c:cc:e7:a8:79:77:8d:ec:cf:5d:e8:
4d:8e:47:9e:a5:99:21:e8:05:3b:4a:6c:99:1c:a8:58:55:c2:
27:16:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:20:25 2026 by rpki-client