Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
File: YMZLBPqPX-5oZvXHn499zqUBJRU.mft (raw, json)
Hash identifier: AJwnfcqutcgBtgC8qPWYWw1usomwLIuW01LGbVuwXrE=
Subject key identifier: 4B:C9:1D:23:D0:F2:3D:0D:45:C8:7F:80:64:E0:11:CE:97:4C:65:9F
Authority key identifier: 60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
Certificate issuer: /CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Certificate serial: 019CE47F5F5CB4A4736AD795A41BD47E8D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
Manifest number: 1454
Signing time: Fri 13 Mar 2026 00:01:18 +0000
Manifest this update: Fri 13 Mar 2026 00:01:18 +0000
Manifest next update: Sat 14 Mar 2026 00:01:18 +0000
Files and hashes: 1: 5eILOK-1-Suo2fVqfn_W0lL0-TQ.roa (hash: NzVDzsu+Kq+X+04Ws4gqYwLVPdBaLiyudai4ILZxsxg=)
2: YMZLBPqPX-5oZvXHn499zqUBJRU.crl (hash: 4ojRFZ3dkCq9fbPnA3XKc7xfcJfl7hSmuNXmWOW5p5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7f:5f:5c:b4:a4:73:6a:d7:95:a4:1b:d4:7e:8d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Validity
Not Before: Mar 13 00:01:18 2026 GMT
Not After : Mar 14 00:01:18 2026 GMT
Subject: CN=4bc91d23d0f23d0d45c87f8064e011ce974c659f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6a:b1:6d:85:b7:ca:5c:61:ed:f2:73:a4:3a:
d4:7c:d6:dc:f0:d9:45:0b:90:93:e3:d7:9c:2d:e2:
38:76:a0:d0:b5:2b:38:9c:88:31:6e:63:8d:e2:8b:
d6:45:0a:7c:f0:22:0d:4a:55:c4:94:f7:82:03:cb:
72:86:52:34:c7:16:e7:93:43:47:a2:22:19:c0:ff:
0d:46:84:68:5e:c9:01:12:f2:2a:c5:cc:85:f7:c4:
1c:d9:88:10:7b:e3:62:e7:72:32:5a:1e:e1:84:d1:
4d:68:03:30:76:1f:46:5a:57:c6:fe:9f:ce:ee:11:
ed:ab:83:3a:72:1d:bf:51:b1:d1:56:74:2c:38:b2:
3b:36:fa:2e:6f:be:37:b0:c8:bf:a5:41:ae:bb:65:
a2:0a:6a:b9:28:c4:11:dc:61:3a:3c:91:76:1c:6f:
eb:cf:f0:55:20:45:73:c8:f5:93:1b:cf:82:dd:9b:
b7:53:da:9e:87:1f:01:17:2a:56:84:27:be:99:3b:
1f:f3:c2:22:ea:aa:82:d1:db:7c:4a:80:d0:8d:4f:
c5:f2:c8:99:e5:9a:7e:82:33:86:21:06:77:d9:fb:
3f:45:3e:a5:95:5c:99:0e:15:8a:1d:8f:ae:19:af:
09:46:4a:54:1d:d8:48:b5:89:04:57:81:00:41:bb:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C9:1D:23:D0:F2:3D:0D:45:C8:7F:80:64:E0:11:CE:97:4C:65:9F
X509v3 Authority Key Identifier:
keyid:60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c1:e4:87:3e:6b:f8:a4:a0:9e:d0:ab:db:3e:66:0e:49:b3:
82:e7:17:d4:fe:5f:4e:c1:78:4b:f8:cf:19:35:8c:22:f5:9f:
49:bb:c0:b2:ed:5e:34:fc:03:4f:03:b6:34:7e:34:7b:18:45:
9c:47:67:d9:1b:76:d5:21:ba:9b:a9:ff:77:ea:e5:a6:3e:7e:
9a:66:41:56:a0:05:6c:34:20:b8:24:96:29:c6:e1:f5:5d:f7:
fc:a0:c6:a5:b8:cc:82:ce:74:73:23:da:9d:92:e0:56:b9:8d:
43:da:fb:77:55:3f:f5:a0:e2:38:2a:12:ff:67:d8:79:73:4d:
bb:74:c1:c8:54:5e:32:cf:d3:fe:23:71:ce:8c:c4:ea:f8:9a:
8a:5f:ea:e9:b1:b1:7f:d7:d0:b0:b6:dd:42:b1:1e:19:e1:91:
3a:c2:f2:eb:a4:9d:8a:ae:7d:cd:b8:28:79:91:e2:f6:01:cb:
a5:cd:fc:ee:63:cc:5b:c2:0f:f0:82:e4:0d:49:e9:40:23:e3:
cb:ca:f6:a0:56:64:4f:05:a0:f0:71:78:83:2a:80:b7:4e:e9:
a5:a6:34:51:f2:21:88:24:c7:81:c7:64:8a:36:eb:43:30:74:
e8:f0:ea:27:4c:44:a0:dd:54:65:20:8d:4c:37:e3:c9:93:78:
1e:5e:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:06:15 2026 by rpki-client