Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: rPup0s78MnTytMvLOE/2QJK4gzaz53+I5lePCP21Ah8=
Subject key identifier: 0C:91:DE:3A:00:B6:B0:0F:58:07:75:76:70:F3:DC:0E:E7:CD:1C:F4
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 019D378991B8F318D36214EA8E612052A470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:55 +0000
Manifest this update: Sun 29 Mar 2026 03:00:55 +0000
Manifest next update: Mon 30 Mar 2026 03:00:55 +0000
Files and hashes: 1: J3trJnMvDZJ0BcVGu5fGaJyrupg.roa (hash: e8osDQcIENsCGM6JtSYddOPk22ajtK1guuuZINYdCT0=)
2: WiHVRTKANQPSLlslZgPEwLo61sU.roa (hash: NTrkcyBW/Rrku+dfbekK8M7MWrvABIKgt6ihPMKiaiM=)
3: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: KwBARJ9fKiLHxpl0nPwWMvFEjzPQgwjXqNh3DaBMZAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:91:b8:f3:18:d3:62:14:ea:8e:61:20:52:a4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Mar 29 03:00:55 2026 GMT
Not After : Mar 30 03:00:55 2026 GMT
Subject: CN=0c91de3a00b6b00f5807757670f3dc0ee7cd1cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:33:a5:b3:1c:f0:4c:5c:30:61:1a:3e:87:
b2:e1:dd:eb:e1:ab:ad:3e:8b:09:84:9f:c6:be:db:
05:ac:ca:06:9b:ad:c8:15:50:16:0a:c7:ca:f3:37:
b4:85:08:42:01:ff:22:61:94:3a:d5:6f:4b:4d:2d:
c8:17:48:93:ef:64:90:5d:24:34:8f:15:b9:41:ae:
f1:1b:1a:f8:02:aa:a5:7a:37:af:1a:19:28:db:1a:
4c:24:ae:74:f6:41:6d:5b:ff:63:2f:c7:3d:48:05:
7e:87:a4:d5:f0:5b:e7:9c:09:50:09:5b:f8:cc:9a:
a1:95:53:d8:67:c3:3f:69:41:69:9e:9e:5a:1a:bc:
62:79:2d:f4:d5:ed:f8:30:95:7e:be:6b:7d:13:66:
0e:f9:d0:82:3b:05:68:ad:63:ae:8f:c0:a0:d1:04:
a7:17:4d:9d:af:f6:da:3a:1a:0f:ce:10:b6:82:7d:
4a:e3:87:16:fd:c3:9a:e8:10:95:da:0c:60:bb:82:
31:e0:c5:a5:b2:ab:b0:15:f3:81:90:77:07:4f:ea:
87:bc:3c:9e:d5:8d:93:fc:ca:ec:69:c9:e1:0e:bc:
01:1d:9b:c1:2c:37:e7:55:1c:61:6d:5e:3a:de:4d:
d9:c3:e4:1f:6e:11:a2:85:52:ad:de:3e:f7:86:0f:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:91:DE:3A:00:B6:B0:0F:58:07:75:76:70:F3:DC:0E:E7:CD:1C:F4
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0f:31:f6:ab:d0:f8:f3:38:25:6a:83:8e:59:d8:f9:26:38:
0c:85:e6:ee:21:54:aa:2b:25:a5:25:de:ab:cd:7e:b5:6d:4f:
5e:e9:dc:0c:0b:1b:23:b1:2b:88:2d:b7:eb:ee:63:76:0a:1e:
43:91:04:99:bd:cd:f6:fa:12:61:e6:07:ee:9e:d2:5d:d3:0d:
18:5f:1f:13:04:ee:a1:02:62:02:6d:ed:00:2d:d5:1d:87:9e:
e2:26:2f:f3:6d:36:6e:1b:87:00:cb:38:6a:80:38:55:e8:cb:
33:16:f3:d2:e9:52:13:a6:f4:5c:d4:e1:52:b4:8a:ef:db:f6:
f9:0e:05:91:01:8d:8c:1e:56:ac:bd:7e:33:fa:53:51:6f:e5:
51:c1:91:37:70:bf:62:fd:d0:d9:63:04:32:18:41:7b:4d:33:
03:c8:dc:56:99:3c:2d:e3:4e:f8:fd:a2:bb:7f:ba:a1:8c:d2:
90:3a:22:74:5f:37:d2:14:4b:c8:c8:fe:b0:aa:08:46:b3:3a:
8f:d4:22:98:91:c1:29:8c:20:d7:20:74:6d:54:8d:2c:e6:9a:
c0:80:99:42:e8:25:0a:90:dd:b4:d2:38:fd:5d:e7:a0:9e:7a:
67:7c:28:ac:ca:3d:fa:ab:f0:92:f5:63:40:0b:d5:f5:f3:9e:
e0:f2:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:17 2026 by rpki-client