Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: 85a3fl/3kVrO1b2KYXb1wcIHGeXLvIwmMnBXqUax0jg=
Subject key identifier: 4C:1B:EB:FD:71:B9:F1:D0:C7:49:7D:FB:98:46:1B:23:B3:30:5D:84
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 019D38D2B6B2426A846A91A551896EE4AC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 0F72
Signing time: Sun 29 Mar 2026 09:00:26 +0000
Manifest this update: Sun 29 Mar 2026 09:00:26 +0000
Manifest next update: Mon 30 Mar 2026 09:00:26 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: t8GyKyccPSZ8rMMefr8sfiJwMVlJLsDPJ40a2RDQecg=)
2: nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa (hash: uDzn2UrQJ/gWE6VmVbdTq4BSTBqexLqsyHgtdAqNXeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b6:b2:42:6a:84:6a:91:a5:51:89:6e:e4:ac:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Mar 29 09:00:26 2026 GMT
Not After : Mar 30 09:00:26 2026 GMT
Subject: CN=4c1bebfd71b9f1d0c7497dfb98461b23b3305d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:00:18:d1:ac:40:9d:f0:f7:f7:8d:94:33:
21:b7:ea:0b:80:f4:da:5d:4a:5d:46:59:75:b4:f4:
e6:aa:b2:1e:47:00:9b:25:d8:be:58:37:34:93:1e:
7d:09:d6:b0:34:df:71:7c:1a:30:40:62:01:a1:4e:
66:77:b1:1b:58:9f:0e:e1:c8:40:9e:30:90:82:a3:
be:94:7a:ab:ad:e8:50:15:bc:d2:59:f4:11:91:f2:
72:fd:26:f2:69:fb:1d:12:ae:c9:af:71:a5:37:70:
78:bd:06:aa:a9:e7:ad:7e:aa:a3:a3:c4:d1:95:95:
4e:bc:c7:6a:f9:e5:dc:64:38:aa:a3:f7:d1:26:74:
e0:0f:eb:71:35:86:5a:58:ea:63:1f:07:29:4a:50:
24:6a:7f:24:22:9d:7a:c9:6f:fa:e8:10:cf:0e:47:
6a:16:89:ae:8c:36:fd:d0:6d:6c:b5:9c:dc:c2:24:
4d:58:3a:95:a4:af:2b:ed:91:f1:f7:8f:80:37:bc:
1d:1e:42:c6:67:c0:32:93:7c:48:22:b8:60:0a:66:
c8:16:f4:9d:5d:0c:86:f4:a5:c8:56:57:14:94:65:
dc:40:ff:3e:06:05:0e:87:58:0c:5e:4f:88:51:2f:
ae:82:22:9b:a7:3e:3e:59:37:65:e8:6c:7f:07:f7:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1B:EB:FD:71:B9:F1:D0:C7:49:7D:FB:98:46:1B:23:B3:30:5D:84
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d3:f3:64:e6:b1:f1:af:ad:ae:5a:a6:f0:e0:30:c7:f5:5a:
6b:74:1b:32:44:e2:ec:61:14:40:97:3c:8b:86:9b:97:34:3b:
2c:b1:d3:09:8d:ff:97:13:72:64:8f:f1:ac:e4:59:63:bb:31:
27:70:56:ed:1a:37:3a:75:2c:6f:f4:0f:8b:8e:46:b0:a7:ef:
95:b5:ac:44:f2:9f:b5:ed:6c:89:0e:b3:35:16:75:10:bb:99:
51:89:55:0a:1c:14:d0:2b:75:04:2f:27:81:50:bb:86:1d:c9:
7c:0a:90:12:a2:63:45:21:e8:7d:bd:1a:54:8d:27:49:64:16:
66:ff:4a:e6:4f:1c:06:c5:99:2e:8f:9a:8b:49:3d:f3:1d:d5:
81:67:94:8b:d0:ec:30:d9:71:ed:05:42:8d:a5:ab:fa:e7:d2:
98:f4:be:ba:d3:84:65:73:28:b5:e6:83:86:13:89:75:32:72:
00:0a:99:63:5e:b7:18:a5:6a:13:24:46:3d:8c:e8:71:41:9f:
d9:d7:65:bf:32:f1:7a:4e:86:3b:c4:04:a6:af:2b:c6:75:76:
a3:76:8b:ea:fa:bf:66:d8:82:25:ed:ec:b2:f2:30:c5:82:b9:
eb:3d:2a:f3:82:7e:11:67:76:9b:91:20:cd:d3:c3:ae:3f:c3:
4b:5a:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:57 2026 by rpki-client