Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier: UcSXwbbwGUle+EKt8oDq7UeBUjN3v4fZhK/DB7WYE+U=
Subject key identifier: B1:AA:11:30:05:94:AC:EC:7C:4F:F5:79:E4:91:5C:18:8C:18:BB:82
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial: 019D38662F0890199ECB2AEDFCB4EBCEE33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number: 1498
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: Ciy2fNIQW721fMsDhCb-VtXGBFw.roa (hash: XXBlf4gWy3TZJvapRvU6gO8Rcd2sHCwCt2ib04wAeps=)
2: Wldr-eNyg4Fo_ylLob-Hp7fcw88.roa (hash: wf6Ot6Ex/s7myo+jesSKrN1q9D7ZqoW374UIQ9ocJss=)
3: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: 6nn5iXIZ2ztoQlLy/xmAa0D08W5cq9+eSnhCJb8JFrA=)
4: mYGac8UdKtYiejjIP-FXgbBItOo.roa (hash: zhSZcg/Pm9sDKqIKNxnWpvUr1PBvScF8Xahp3flsYl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2f:08:90:19:9e:cb:2a:ed:fc:b4:eb:ce:e3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=b1aa11300594acec7c4ff579e4915c188c18bb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:bf:60:d7:ef:e3:b7:9d:bc:9e:22:d8:80:
37:81:50:74:f9:3c:f1:81:4e:b0:38:58:8c:0c:29:
3b:cf:f8:f9:c6:78:0b:16:6c:cf:fc:38:c3:00:08:
cd:bf:cc:0f:9d:de:11:60:3f:e3:00:4d:ca:27:72:
b8:d1:98:bf:f8:43:60:f7:69:93:63:f8:1e:8c:08:
36:81:18:27:b3:57:a7:3b:32:fb:eb:5e:6c:dc:79:
91:5e:d5:1c:91:28:3e:5f:01:73:d7:01:c3:2c:0a:
25:f7:bd:50:aa:3f:60:89:22:79:41:cf:ae:99:ae:
6c:24:4d:80:05:8a:f7:a3:64:46:ad:2d:ef:6d:cb:
47:5b:53:02:63:ac:2c:be:92:46:31:f6:a9:70:da:
93:80:82:17:77:88:9f:d5:cc:bb:29:35:34:d7:f1:
38:f6:33:66:ef:87:3d:27:08:2c:4f:a9:20:c9:a2:
a4:45:45:35:68:8c:f4:f6:82:5a:24:94:7c:c0:49:
48:cf:d2:7b:c4:6d:25:00:92:9d:0a:3d:7a:6e:38:
e3:3e:c4:93:41:94:e0:99:67:fd:cd:fd:ef:32:b8:
91:4f:b0:23:cb:44:83:3f:64:81:34:84:29:3b:a7:
35:e3:78:a6:b6:45:c6:f5:cc:ec:6a:60:c6:7d:ef:
a8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AA:11:30:05:94:AC:EC:7C:4F:F5:79:E4:91:5C:18:8C:18:BB:82
X509v3 Authority Key Identifier:
keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c0:aa:e0:40:3e:25:5c:0a:73:b7:2f:7e:ed:d6:73:5c:8a:
9d:45:88:8e:e3:29:64:87:32:5c:ac:ff:6b:3b:3b:2f:89:8c:
e9:c8:77:49:d8:39:ff:41:6c:97:90:ec:45:07:91:1c:94:bb:
b9:dd:a8:88:92:15:49:03:c9:90:2e:5e:29:10:a7:c8:48:88:
b6:61:ac:13:b8:02:b0:01:89:29:3d:a0:62:76:9c:c3:4a:51:
12:9e:6a:56:10:a3:99:01:8b:bc:2c:e1:fc:6b:30:fc:8e:6b:
f2:12:00:8e:5a:10:33:5f:e1:43:4c:0a:84:a4:cd:03:95:89:
64:6f:18:30:3f:a3:79:5d:a5:0e:ea:3e:fa:e6:36:47:8a:7a:
08:03:d6:ff:5a:f1:2a:04:4d:e4:d7:0a:dc:4e:8a:0a:89:2c:
c8:a7:9c:b9:a4:c8:41:03:81:4c:06:c9:ca:a6:d2:41:8d:41:
71:08:a8:94:43:22:b3:54:3e:3c:19:6d:33:16:05:28:58:6a:
b4:32:98:be:05:bd:7b:9e:b1:40:54:52:97:56:c9:7a:fd:f8:
c9:7e:49:24:c9:64:90:0e:ed:ff:3c:1e:df:07:4e:0e:62:75:
fa:5b:5e:88:c2:6f:31:95:7f:97:d9:6c:81:d1:6d:22:5e:7b:
e9:dd:bf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:54 2026 by rpki-client