Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier: GWX6y2BRdWLb+v1LCNQ2KtnM1rV710x5XRvOk6qCetg=
Subject key identifier: 24:B2:DE:48:2A:9B:1E:AC:09:B0:02:35:D3:7B:18:9C:B2:95:60:50
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial: 019D322C27958F1E62195847F9E00AD791D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number: 188B
Signing time: Sat 28 Mar 2026 02:00:47 +0000
Manifest this update: Sat 28 Mar 2026 02:00:47 +0000
Manifest next update: Sun 29 Mar 2026 02:00:47 +0000
Files and hashes: 1: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: B2r0YPZXYQHOF9J5ly4B/KtLm1tNesjjI5tZEGvCsOk=)
2: gGpmcsWE1eZyNMee1NRlA1nhhvY.roa (hash: /R+1mDGIJPwiUjgMqzEayU7QgZR187J1ACp6m3yLtqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:27:95:8f:1e:62:19:58:47:f9:e0:0a:d7:91:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Validity
Not Before: Mar 28 02:00:47 2026 GMT
Not After : Mar 29 02:00:47 2026 GMT
Subject: CN=24b2de482a9b1eac09b00235d37b189cb2956050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:03:97:a0:b1:92:23:53:65:47:13:b4:72:19:
5d:91:75:5a:35:38:99:c8:3c:54:23:29:98:fc:2e:
af:30:ea:fe:27:dc:3e:27:7f:62:17:74:5f:67:aa:
0e:21:e4:15:cb:5f:b2:50:9b:f4:26:cd:9e:92:c6:
f3:c9:13:41:49:1e:b5:0f:16:05:b9:aa:68:eb:69:
25:d8:86:10:e7:11:63:6f:ab:99:8a:db:16:1a:4b:
08:73:54:ab:00:7d:e4:76:c4:99:78:fb:34:56:d5:
27:0b:96:aa:23:6b:96:55:d5:90:2f:c4:21:b4:1a:
c4:f9:e5:3f:a2:85:91:23:a6:84:35:47:38:ac:05:
0a:59:44:89:71:8c:ae:2d:a9:2a:7f:ac:5b:e3:60:
f7:ea:80:18:19:dc:3c:9f:8a:01:8e:83:22:48:01:
62:78:7e:c7:b5:96:3d:c3:3d:0f:06:c8:f1:8a:d2:
61:c2:95:18:9d:47:88:8f:89:cd:02:4b:8d:fe:35:
a2:d0:8c:1f:eb:75:54:15:9f:38:bf:21:95:c5:8d:
0f:8d:78:f2:97:e1:5a:27:c8:2d:c5:68:4e:29:31:
b2:d1:6b:98:04:5b:79:7b:c0:46:fe:26:8b:f2:43:
cc:6c:39:5c:26:a0:97:c5:f1:8a:38:56:c6:96:e5:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B2:DE:48:2A:9B:1E:AC:09:B0:02:35:D3:7B:18:9C:B2:95:60:50
X509v3 Authority Key Identifier:
keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2c:a5:3b:69:5f:11:58:7d:55:89:3e:b4:0a:ae:55:1f:65:
bc:8c:36:a2:27:06:05:e1:4b:bd:c6:49:86:5f:1c:6a:12:f8:
d6:8c:2c:d3:e6:a7:2d:03:fe:e7:cf:a7:7b:8a:fa:06:11:96:
15:b7:32:58:02:4b:29:9f:b5:f9:a7:fc:3a:f5:71:4b:b6:f7:
c2:ad:f2:62:7a:c0:7d:4f:4e:fd:c6:20:a2:06:c2:75:84:84:
27:67:1d:2e:4d:ea:bb:45:b4:d1:a0:06:45:62:27:bc:7d:bd:
a3:9c:4c:59:d2:d7:88:db:da:33:f7:ea:31:25:06:4f:73:56:
8b:a2:eb:ff:51:22:be:8e:44:cc:c0:31:fe:94:ce:e3:d4:b9:
93:0e:08:cf:09:f7:55:04:37:a0:89:73:c9:9c:2f:2c:99:da:
7c:3b:51:a8:2a:d4:07:a4:59:7c:5c:ed:47:4c:80:7c:53:07:
2b:e8:a1:a4:7c:62:ed:f4:4b:2f:20:cc:e4:3e:df:0c:4c:c4:
ef:c1:52:8f:0b:a2:32:35:f1:7e:e4:0b:1e:75:17:17:63:bc:
40:24:02:f9:f9:89:27:3e:29:ca:05:00:b3:69:4b:f6:76:ac:
64:59:cf:49:1f:53:a0:4f:ab:38:ea:4e:b1:9d:06:0a:85:95:
9b:12:6e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:54:28 2026 by rpki-client