Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
File: YMZLBPqPX-5oZvXHn499zqUBJRU.mft (raw, json)
Hash identifier: tKHl91v38QxmvaatVj/z5eXEAFTYxMsXk4FZqgygz/4=
Subject key identifier: 96:4B:84:0B:0B:73:B9:A7:E8:20:45:56:CA:C6:0F:93:02:7C:8E:A6
Authority key identifier: 60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
Certificate issuer: /CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Certificate serial: 019DCC3D552B05C509329B5A2EA663C02142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
Manifest number: 14CC
Signing time: Mon 27 Apr 2026 00:01:04 +0000
Manifest this update: Mon 27 Apr 2026 00:01:04 +0000
Manifest next update: Tue 28 Apr 2026 00:01:04 +0000
Files and hashes: 1: 5eILOK-1-Suo2fVqfn_W0lL0-TQ.roa (hash: NzVDzsu+Kq+X+04Ws4gqYwLVPdBaLiyudai4ILZxsxg=)
2: YMZLBPqPX-5oZvXHn499zqUBJRU.crl (hash: EezMcdt7QKypppRGnb5eQ4ggng7zCeOca7J/uzR3yg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:55:2b:05:c5:09:32:9b:5a:2e:a6:63:c0:21:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Validity
Not Before: Apr 27 00:01:04 2026 GMT
Not After : Apr 28 00:01:04 2026 GMT
Subject: CN=964b840b0b73b9a7e8204556cac60f93027c8ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:24:29:7c:ed:43:4c:6b:b7:34:87:8a:0c:
28:ef:0b:56:6f:8f:b9:9d:f9:56:68:46:ea:b6:71:
a6:76:14:09:97:df:ad:ac:3e:06:6b:bc:05:22:d8:
3b:36:0b:aa:98:8f:1e:f9:28:58:e1:91:79:42:7d:
e0:83:16:87:4c:66:2f:35:e7:95:ea:45:45:76:2d:
09:64:69:93:01:ae:04:8e:1e:5e:3f:59:6d:ab:62:
53:ce:90:f6:f7:72:37:e4:1d:be:89:da:48:3a:75:
96:32:b2:f7:53:86:ef:69:93:ad:7f:a2:99:e4:9a:
ed:48:9d:6a:76:08:60:93:20:61:6b:50:5f:71:ca:
23:04:0f:8d:2d:f0:70:69:cc:c6:53:e9:1f:2d:38:
55:7f:11:16:bc:46:63:4f:e0:54:3a:a8:71:9b:d7:
22:7a:c9:14:67:2a:57:8f:fa:ae:69:96:9e:83:34:
e9:04:98:d8:7d:55:65:65:15:cf:f8:8b:5b:8c:56:
35:34:7d:40:91:cc:4f:d8:a3:63:1a:dc:81:3a:5e:
9f:ee:4f:b1:57:48:db:b7:49:2f:bf:57:9d:f2:72:
14:d8:c6:40:29:0c:11:fa:53:73:ef:f8:33:ce:5e:
e6:2e:3a:be:43:6a:69:56:d4:c9:9f:9a:b6:c3:a6:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:84:0B:0B:73:B9:A7:E8:20:45:56:CA:C6:0F:93:02:7C:8E:A6
X509v3 Authority Key Identifier:
keyid:60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4b:89:87:85:e0:8a:84:25:b6:83:72:6e:d4:64:9f:b2:a2:
ba:4f:0d:e4:76:23:2e:e8:e2:3c:cc:db:2b:70:bd:f9:c5:d0:
2f:94:b8:d5:d2:df:df:20:17:29:99:a1:95:93:a6:4c:72:1d:
5e:b6:73:69:8e:d8:77:09:be:7a:0f:1e:c2:aa:8d:81:aa:16:
69:8a:c5:3f:c8:5b:6d:34:5a:e9:57:99:d3:68:a0:4e:79:36:
4f:d6:3e:2f:a0:85:22:92:c3:71:c4:b2:41:e9:1c:aa:38:dc:
be:46:1d:4c:e4:0b:4d:6c:52:ec:e5:99:43:01:56:5c:f4:40:
04:d6:d4:a3:8e:92:04:a8:f8:b2:ba:dd:b9:20:92:b9:9d:5c:
2c:80:d6:b8:a2:8b:b2:33:6a:c5:2a:7e:45:d2:94:51:7a:e2:
24:5d:d5:bb:ab:55:52:d2:95:c6:06:e7:2a:98:1e:7c:3b:d7:
e2:84:1f:20:6b:65:30:e0:a3:48:63:87:73:0e:1c:88:a6:19:
26:f6:d1:0f:67:18:58:cf:2b:bd:00:15:86:46:61:8d:2a:56:
9b:29:ff:52:36:05:79:c1:d5:3b:28:d0:67:4d:df:61:c9:f7:
13:91:35:bf:a5:51:56:13:d7:7d:d4:5a:dc:dd:2e:73:9a:4d:
d3:02:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:29 2026 by rpki-client