Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File: Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier: Rd1UVtGmiPdqu/6vx44o8IDJmd9I2rLdfQyVWBTrtis=
Subject key identifier: C6:A6:B2:31:6E:F3:4F:F2:D5:BA:D3:E6:E0:3E:F5:87:95:D6:9C:AE
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 019D389BD3BF703EC4E74083E7AF3014239C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 08:00:29 +0000
Manifest this update: Sun 29 Mar 2026 08:00:29 +0000
Manifest next update: Mon 30 Mar 2026 08:00:29 +0000
Files and hashes: 1: 2dU_Wx7maoKES4uWBmISrFThyIU.roa (hash: ffH0TAg9XSxzOXt+6AV+6sDEvW+c8igbg9XX2e6NJUY=)
2: HZb22Oio0r0dOkO7Ylc22UNpmkI.roa (hash: 4bxPJ8gmL9NMrQNM+ipouVsdrPbO9cdpsR6HkCC+6eM=)
3: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: Zf1hz/9Gia67y1foKVc3lYxf1eJkO40ALYXa17jOiUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d3:bf:70:3e:c4:e7:40:83:e7:af:30:14:23:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Mar 29 08:00:29 2026 GMT
Not After : Mar 30 08:00:29 2026 GMT
Subject: CN=c6a6b2316ef34ff2d5bad3e6e03ef58795d69cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:62:98:e7:20:34:7c:9f:b1:cd:31:9c:ca:
01:7a:a3:94:fc:0c:58:de:a1:f4:42:3b:a9:68:ac:
f8:96:43:24:2f:46:b1:59:24:3f:e3:50:d2:3f:1a:
6f:14:d7:8f:4d:bd:b6:1b:6a:83:cc:e6:37:a2:b3:
5a:01:ea:5e:0c:53:50:6a:26:42:47:ab:39:3b:92:
f0:c5:c5:1e:06:07:52:8c:75:3f:98:2c:03:a2:c8:
d8:ca:3e:09:52:92:5e:81:cd:5e:4c:2f:38:bc:9b:
b1:1d:4e:b7:b1:ff:1f:03:e0:04:ff:92:9c:e7:5a:
a3:22:ea:cf:06:01:6e:f5:30:55:e4:97:81:b6:a5:
53:ef:10:91:4e:47:ec:80:2c:dc:b2:a9:66:37:6e:
59:f8:64:f3:09:c8:a0:c0:0c:6c:49:d5:3f:63:b7:
71:7b:5f:af:e9:f7:df:f8:e6:19:ff:2f:06:04:9c:
b2:0c:b7:68:70:50:fa:49:a0:1d:4d:2e:3b:a1:d7:
dd:5c:7d:df:84:91:fe:4d:aa:35:b3:56:de:d2:c3:
60:78:c6:fc:17:c8:93:e1:09:2c:35:9a:ca:1f:b2:
f0:63:ce:1c:3f:1e:c5:a5:ab:c6:59:de:3f:5a:43:
b3:38:e1:22:6a:ac:03:92:e8:30:a7:47:e5:ea:0d:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A6:B2:31:6E:F3:4F:F2:D5:BA:D3:E6:E0:3E:F5:87:95:D6:9C:AE
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1a:fe:90:44:ac:c9:ea:a4:c0:05:dc:e3:c9:8c:f8:86:52:
63:29:dc:bd:a8:df:6c:04:b2:21:90:01:1e:62:e0:36:ae:0c:
01:1b:8b:4c:41:df:0e:d8:a3:d8:b4:71:b0:fe:0d:43:42:cd:
8a:fd:ad:13:76:35:10:b3:41:f8:3d:94:6d:9d:3b:8d:b9:ff:
e2:93:1d:d5:e6:75:dd:03:03:c6:d1:9f:23:2b:e2:ea:6c:9c:
d4:ac:5b:f3:63:fd:9f:ac:af:4c:83:a4:e2:e9:35:76:e4:6c:
62:bd:e1:46:df:94:2d:8f:75:28:f3:69:4a:ad:fe:d5:0b:b7:
96:de:cb:8e:ea:ec:6b:07:c8:28:9f:2b:5e:57:3e:30:ce:00:
37:5a:97:34:ba:e1:d6:8b:c8:ca:35:d0:22:7e:d2:fb:f5:f3:
13:d1:50:33:a1:63:20:8b:f5:c5:36:64:2b:c8:07:8f:e6:36:
1a:ca:bc:7c:0b:02:f8:3f:9c:fd:3b:af:7c:e4:44:54:2b:f7:
ed:1b:dd:fe:21:f8:ad:50:31:d5:0f:d1:48:0b:3f:42:00:be:
3d:bd:87:6f:90:52:57:18:09:5b:80:65:a9:d2:15:d1:58:1e:
57:48:39:c8:de:77:38:81:8d:eb:fa:72:04:5e:ba:c6:b9:62:
1f:90:f1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:14 2026 by rpki-client