Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier: Ys+nu39uA8VO0vtZmUyusJ5x9Aw/F3jnoDkPKRC2K00=
Subject key identifier: CB:57:0E:87:89:61:B1:88:08:F4:94:C7:43:4B:33:83:12:A3:ED:18
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 019D37899B2E2D9E52B45431A3529BBA537E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number: 0E8B
Signing time: Sun 29 Mar 2026 03:00:58 +0000
Manifest this update: Sun 29 Mar 2026 03:00:58 +0000
Manifest next update: Mon 30 Mar 2026 03:00:58 +0000
Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: zOKxFveS/cGVuVwaStHmvwLU25V/XbBxC54PPJTJXuQ=)
2: e265eCVZ_zfTOldsmbK9OxkmQeY.roa (hash: YosQ/clAH+U408bmGplqWhphkTjsVjwp5LPxq1REEA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:9b:2e:2d:9e:52:b4:54:31:a3:52:9b:ba:53:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Mar 29 03:00:58 2026 GMT
Not After : Mar 30 03:00:58 2026 GMT
Subject: CN=cb570e878961b18808f494c7434b338312a3ed18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:72:c3:a8:44:33:21:4a:d3:2f:d3:d2:ea:
7f:fd:50:10:1b:59:f4:21:51:e2:fa:0a:5e:f1:27:
96:e9:fd:31:06:49:fc:2e:0f:41:cc:2b:43:23:0a:
35:7e:d2:e3:ee:4f:f2:75:21:eb:f7:7d:88:f5:8b:
85:fb:f0:68:1b:57:be:63:65:3a:00:57:6a:bc:77:
6a:92:f8:eb:f2:06:96:90:a9:f8:91:d4:e5:69:87:
e2:ea:06:80:01:cb:c2:f0:8b:ce:b6:88:88:63:2d:
19:ed:77:e5:55:77:10:5e:d4:b9:04:c2:7a:1f:2a:
07:3d:35:6e:84:ba:b2:bd:a7:dc:9d:b0:1c:3e:b8:
10:be:2f:ea:32:0e:1e:d8:12:0f:c9:2e:4b:a1:95:
79:80:7e:17:31:5c:c3:33:88:f7:18:5d:27:4d:cb:
08:d8:ec:38:37:3d:a7:f8:84:b6:93:8a:f3:1b:9f:
30:1d:ed:12:d6:e2:67:04:fb:2d:7a:cb:80:9e:4b:
da:66:59:fb:f7:24:d6:d7:80:cb:a1:38:3a:57:cb:
08:ef:7c:16:69:ef:e5:11:96:28:56:38:8b:a1:d2:
4b:2e:00:ee:e2:85:67:9f:0c:04:37:50:e0:ef:e9:
40:8e:36:b1:cd:a0:02:2a:ed:4b:c9:52:c2:14:de:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:57:0E:87:89:61:B1:88:08:F4:94:C7:43:4B:33:83:12:A3:ED:18
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c6:66:c6:6f:81:58:7f:5d:9a:2e:d7:a5:a6:5d:e5:2d:33:
1e:f5:c0:c6:03:7d:56:8c:89:98:5b:df:de:20:29:60:09:74:
7c:33:c1:cf:5d:ff:19:f3:ac:1c:23:30:84:09:58:f2:4e:72:
3e:0d:2d:5b:38:d1:7c:00:ec:86:52:10:68:10:09:03:78:7e:
a2:b3:35:0a:2f:4d:1c:f8:94:26:86:b7:31:4e:e8:36:86:bb:
51:ea:96:f5:04:aa:c6:f7:42:13:a9:1b:6d:12:fa:c2:5f:13:
93:f0:0a:be:be:ff:bf:c3:83:12:ec:08:24:ad:64:56:5f:38:
ce:c8:14:5c:65:24:3e:98:b5:a4:ab:be:18:fa:a2:6e:36:1e:
65:14:6f:44:1c:e2:86:04:af:bb:89:33:99:04:85:dc:41:63:
88:05:f1:4f:40:d1:b5:11:ec:d7:e3:86:e8:c3:43:0c:34:c9:
42:99:1f:5d:00:f7:7b:7e:1b:40:20:2f:50:cf:62:9e:f7:33:
2b:40:67:7a:ff:dd:1f:d3:01:90:84:9e:41:d9:26:84:a4:51:
88:bd:c7:69:c8:35:f5:77:67:1c:98:9a:0a:a0:c8:7d:ef:69:
94:19:0b:4d:ef:45:5a:f4:fb:cd:43:ed:53:60:cf:e2:af:5a:
ef:4d:cd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:39 2026 by rpki-client