Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
File: YNxaADaNiuH7qZVDHwOkExrdipo.mft (raw, json)
Hash identifier: VYDbAthiq5PgJIAQU1V8UPVLuieNpnxe/avmL/DJPuY=
Subject key identifier: EF:FB:C8:F2:53:F2:E2:F8:28:7C:81:92:82:2D:96:47:06:52:6C:52
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial: 019D37F729CF28867962D723C6DFE53C9B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
Manifest number: 0A3B
Signing time: Sun 29 Mar 2026 05:00:38 +0000
Manifest this update: Sun 29 Mar 2026 05:00:38 +0000
Manifest next update: Mon 30 Mar 2026 05:00:38 +0000
Files and hashes: 1: YNxaADaNiuH7qZVDHwOkExrdipo.crl (hash: 9II1ePVAMwVaZo8zt0DNUDu2Zp6qD/WcrQ5oorcUne8=)
2: vkhFm3pKUDJNsT0h561aywva_1A.roa (hash: qEY3Sblpt51bVtVlep4x8ewHAAaQFqXMAiyecT6/mqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:29:cf:28:86:79:62:d7:23:c6:df:e5:3c:9b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Validity
Not Before: Mar 29 05:00:38 2026 GMT
Not After : Mar 30 05:00:38 2026 GMT
Subject: CN=effbc8f253f2e2f8287c8192822d964706526c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9d:7c:06:a3:9d:96:d2:e8:1d:b1:57:ca:a7:
f0:77:e0:4e:5d:99:c6:5a:59:d0:01:a6:2f:8b:0f:
b4:c7:f3:6e:1b:01:e1:b1:93:5d:f6:53:13:5e:fe:
ee:bb:2f:f3:d4:ce:0b:9d:97:4d:37:02:bb:99:40:
a5:be:cf:61:97:95:0b:fb:b1:da:e8:d9:64:fd:93:
d4:42:50:56:49:30:6f:58:8c:ef:13:b5:d3:1c:ea:
be:54:67:f1:ea:a6:90:86:85:1d:03:fc:e8:f2:da:
12:17:c9:a7:d7:99:4a:81:20:08:b2:90:c3:5e:72:
46:fc:55:b9:b5:28:42:15:9f:74:23:a8:2a:d2:bf:
77:32:3e:f5:15:fd:eb:e6:69:d7:a2:b2:76:09:21:
1f:ec:33:0e:f4:55:c1:05:f5:aa:1d:c7:9b:b9:17:
8e:b5:72:3f:9f:7b:e2:fe:29:cf:2e:71:6b:40:b5:
4f:5c:65:b7:57:96:f0:d3:0b:50:ed:b2:47:d4:5a:
e0:b0:7a:90:6a:cc:aa:9a:c5:bf:6a:dc:8b:dc:dc:
50:5e:d5:53:33:8b:77:97:ea:85:38:73:d8:26:20:
2f:11:7b:12:5b:d0:f1:fc:bb:8f:2d:11:24:d1:16:
fb:f4:0c:d3:95:98:a2:14:64:75:f7:23:48:1f:5b:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:C8:F2:53:F2:E2:F8:28:7C:81:92:82:2D:96:47:06:52:6C:52
X509v3 Authority Key Identifier:
keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cd:59:40:96:92:46:22:04:c4:c1:02:a6:47:0d:f2:9f:e6:
61:1d:9f:df:b4:3f:1c:2f:93:93:9e:30:9c:30:27:55:6c:ae:
65:51:40:11:6a:19:69:05:2d:9d:05:a9:10:46:8f:5e:91:8d:
da:0d:81:d7:df:8c:e0:2e:1b:00:1f:e1:a1:c5:00:b1:98:17:
81:23:fe:22:43:29:0d:d5:d5:b8:ce:6b:2b:ab:8f:90:0f:69:
76:1f:7b:0d:8f:c5:82:29:bb:3e:21:7a:20:03:3c:2a:90:fd:
65:46:e3:89:6c:55:71:2a:6b:d1:7e:84:2a:76:5f:01:43:62:
2d:2a:21:1e:e4:c8:c8:07:70:4f:5e:05:fc:cc:5a:2f:fa:43:
41:79:f3:2c:9e:48:b4:33:a2:55:5f:fc:f9:72:75:ed:8a:24:
78:0a:e1:6b:03:37:13:85:38:ea:16:ec:f0:92:a6:82:38:70:
1a:ae:00:38:66:d8:4e:7f:b2:3c:c9:ea:31:2d:21:8a:7c:ac:
4a:d8:31:b2:67:5e:9d:6f:4c:14:23:a5:a8:31:a4:c4:99:c9:
f6:f7:40:a2:b1:21:1a:91:fa:aa:b5:39:fc:73:af:e3:7c:97:
11:bb:bf:e1:f6:59:10:5c:eb:ca:ee:73:6d:2c:a8:d1:ac:45:
f0:a1:48:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:55 2026 by rpki-client