Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File: YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier: izO4ifgAIfLMn/Y97QU7XXlGHoH4/IxaNkH7vnN2Pyk=
Subject key identifier: 5B:55:BF:0D:3B:DA:CD:EF:43:A0:C2:08:25:07:64:49:F2:96:0A:15
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial: 019D38D325A3E4B81F76655FF1DE7CA3C250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:00:54 +0000
Manifest this update: Sun 29 Mar 2026 09:00:54 +0000
Manifest next update: Mon 30 Mar 2026 09:00:54 +0000
Files and hashes: 1: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: VHzxEQbZLszxa0eUCgpA256VG3SXb6bbYXoTZBYIbUg=)
2: gI7wdVdEujvd9VLF4Y0d2YxxXVQ.roa (hash: /3JebFmLKobYKFETqDIlb43OxSa7E2ofJHi6zZ1wGnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:25:a3:e4:b8:1f:76:65:5f:f1:de:7c:a3:c2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Validity
Not Before: Mar 29 09:00:54 2026 GMT
Not After : Mar 30 09:00:54 2026 GMT
Subject: CN=5b55bf0d3bdacdef43a0c20825076449f2960a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1f:af:72:d6:7f:fc:bd:98:13:0c:d5:95:d4:
6c:bd:e2:15:b9:70:d1:60:2d:60:d4:a6:23:db:34:
5d:7e:2b:92:3b:16:82:91:28:6f:41:c2:2d:26:7c:
db:d8:ad:31:dc:11:a8:2a:ef:58:21:15:fc:41:83:
97:d3:1c:e3:f7:bf:1a:11:e8:49:a0:07:9d:12:c2:
77:43:d6:4b:03:dd:5c:7d:de:3a:08:8b:80:07:a3:
3d:e6:ea:74:88:24:c2:d2:0b:92:fd:e6:79:a0:79:
95:07:1c:83:27:a4:24:11:c8:60:19:12:b6:e5:42:
de:a5:d4:74:6b:47:a7:a2:a5:21:a0:c0:03:88:ba:
78:87:c4:62:b9:16:7c:56:ba:7c:e8:48:8d:99:c8:
11:1d:10:5c:f2:22:a2:74:1f:4f:f6:05:3c:70:37:
da:a1:2e:b9:56:74:56:d5:6a:78:01:a4:33:87:e3:
f8:54:11:5c:c8:87:a5:f9:75:3a:ce:ca:59:71:85:
84:78:9a:6e:cd:ff:05:3c:72:7a:d8:25:81:fa:7c:
c3:ee:ef:97:7a:e8:dd:b8:30:b9:38:f8:39:29:68:
49:f6:77:57:ad:86:f4:44:14:bc:db:ac:5f:55:67:
2e:f0:d8:d8:93:35:bb:d3:73:12:60:71:df:0c:f0:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:55:BF:0D:3B:DA:CD:EF:43:A0:C2:08:25:07:64:49:F2:96:0A:15
X509v3 Authority Key Identifier:
keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c4:10:b6:51:55:80:4f:d0:62:a1:b0:ca:dc:9e:2e:25:33:
46:03:33:52:81:cb:f0:4f:fb:5f:d9:f8:b1:5e:13:38:32:75:
01:b4:14:82:7a:03:b1:b8:b0:6e:92:7f:8c:30:34:d1:2f:63:
76:2b:93:88:7c:57:a7:3b:58:2f:c1:a0:44:e8:5f:fa:de:65:
6a:78:36:8b:a7:b0:9b:01:d1:e0:93:7c:b9:14:97:58:1b:c0:
c3:43:6b:8a:5b:85:2e:a8:89:1b:07:1a:47:88:e5:b9:0f:a8:
91:5c:06:11:e6:b1:71:7e:16:7c:fa:8f:87:dd:41:75:12:b0:
a3:71:65:7f:9a:5a:9d:73:68:5b:44:df:83:ac:c4:0d:18:91:
21:5a:dc:49:03:9a:33:52:22:3b:62:2a:71:4d:6a:20:55:97:
45:85:1a:4e:33:50:f4:4e:21:5a:eb:aa:1c:f7:8e:db:97:36:
a1:29:f2:3e:9d:c3:3e:af:73:7b:dc:6d:b3:11:09:e3:10:67:
40:da:fc:6b:c0:c0:a5:9a:05:d3:61:a3:b8:ee:c1:34:f5:fd:
a6:92:68:73:c9:7f:81:bc:ec:3e:c0:36:b1:3a:51:92:45:c9:
bf:a8:78:82:f2:26:ab:40:83:48:8e:21:61:4f:22:03:30:40:
66:a2:0f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:39 2026 by rpki-client