Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File: ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier: MWNgRHK51EUIbF+lls3Ip+Yh8zKwSoUywp3Q/41WYPQ=
Subject key identifier: A6:22:C0:E7:0D:CC:6A:2E:6B:E9:E8:4D:DF:C5:B7:14:B5:16:63:3E
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 019D37F73F41A0EFE4AFAF0193B07D98B455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: pEMOAtuePyeesz_PpC1UjRHNACE.roa (hash: 6RgHrtS23ZSyoQWavExnsqZLXuo4UZSBu3C0i/+czxA=)
2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: /Ag8otlxAW2ANDyDTUgY1fWdOoK1HCYtEEJ/6f2HjBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3f:41:a0:ef:e4:af:af:01:93:b0:7d:98:b4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=a622c0e70dcc6a2e6be9e84ddfc5b714b516633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:32:6a:1d:55:79:14:c8:96:52:6e:da:65:
c6:8d:8f:9f:84:ff:f2:34:80:38:c9:03:ae:7d:8c:
db:c0:50:da:07:ed:8d:fd:e3:54:48:33:04:93:8c:
aa:22:21:34:14:8c:f9:8d:03:cf:91:01:d3:ee:94:
7a:d6:32:05:05:d8:57:13:c3:18:6c:6d:5c:fd:8a:
9a:8c:ba:bd:87:bb:5b:af:70:58:67:31:ff:3e:50:
e6:d2:e5:a3:7b:fb:46:5f:d0:19:a5:00:af:2c:52:
82:6c:f8:a2:35:33:83:fc:4f:1a:a4:d3:a3:59:0f:
fc:d6:9a:42:a4:a3:64:1f:03:02:29:df:5f:76:98:
26:ad:e2:ff:6e:d5:11:88:93:79:ca:67:20:0e:d2:
8f:fc:8e:4f:1f:21:6b:4d:f2:c6:a9:2b:5c:c6:ed:
87:58:ad:5a:ce:bd:dd:de:a6:37:3d:5f:cd:00:f3:
17:bc:69:7a:76:2a:5d:e1:1f:1a:80:d8:44:f7:db:
c6:4d:f3:48:27:29:d9:68:fa:04:5a:8c:d6:27:a6:
32:3c:93:b9:e9:81:79:01:cf:da:ad:fd:62:58:af:
95:26:6b:46:67:a8:91:f1:4f:25:24:e8:85:52:3e:
c9:09:d7:a6:32:f2:4e:4a:72:83:80:e1:c2:e2:d0:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:22:C0:E7:0D:CC:6A:2E:6B:E9:E8:4D:DF:C5:B7:14:B5:16:63:3E
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:11:50:42:eb:67:ff:b5:3a:58:75:9e:06:73:e6:8a:1a:07:
a0:42:a0:61:47:c7:1d:ab:03:6c:09:0d:6e:19:84:a8:ce:1b:
fa:05:3c:df:b7:8a:24:d7:06:31:fd:25:05:29:30:06:d3:f6:
4b:05:25:ea:b5:13:49:b7:48:99:b6:6e:95:6c:32:ab:20:b4:
a9:50:86:17:e5:a4:51:f0:75:20:78:4d:56:9a:99:05:a0:ed:
a7:6d:34:88:bb:24:a1:68:06:5f:27:ed:e7:6a:fa:32:b1:75:
d8:d4:85:60:5a:15:ec:28:2b:ec:00:7a:b9:bb:64:7b:46:8f:
75:90:ca:68:ae:1d:0e:82:07:79:95:b4:4c:fe:7f:f1:80:9c:
a2:1a:02:f1:69:73:16:6a:1a:f1:8a:27:72:fd:5a:a0:e5:2f:
9c:5d:b1:46:74:81:ed:6b:62:93:78:6f:f0:03:41:04:d3:3e:
21:29:6a:c4:e8:4a:17:05:f3:0d:d4:8b:19:83:ef:f2:9f:5b:
82:cc:5b:2a:8f:15:50:eb:de:68:fb:95:6c:e3:06:ee:58:59:
7c:5f:bc:38:b3:98:dd:97:3a:11:8d:a2:04:40:4d:4d:f0:3b:
a0:5c:96:57:b2:18:32:b6:42:48:ac:46:4c:13:2c:83:86:0d:
b3:ff:1c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:06 2026 by rpki-client