Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: oEuYLasFmpbHHM06uuWlPsYPX3r2rBDscUxgwmqxohI=
Subject key identifier: A8:C3:FE:D8:27:F2:DD:63:93:8F:35:80:DF:3B:60:0E:2F:9C:F4:E3
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 019D382E419B35B27E69AA5F2C96C5F271B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 1086
Signing time: Sun 29 Mar 2026 06:00:48 +0000
Manifest this update: Sun 29 Mar 2026 06:00:48 +0000
Manifest next update: Mon 30 Mar 2026 06:00:48 +0000
Files and hashes: 1: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: XfxQ2PeukJkyaZjtOsT6Es4szVprT378kHfX64YF0zo=)
2: iliXSfFW9CmHSeqMey9o5nQh8YE.roa (hash: Fb6bIsCY/5XAoXMXg9zGQmjVCnZpfmN1KdROzLuLLmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:41:9b:35:b2:7e:69:aa:5f:2c:96:c5:f2:71:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Mar 29 06:00:48 2026 GMT
Not After : Mar 30 06:00:48 2026 GMT
Subject: CN=a8c3fed827f2dd63938f3580df3b600e2f9cf4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:f7:a2:24:ab:45:d6:4a:86:12:4f:30:d7:
9f:9e:a3:97:f1:50:cb:2a:14:ff:dd:ea:7b:bb:58:
80:69:9a:03:12:5d:22:2c:5a:91:a8:62:f6:17:09:
cc:30:41:e1:66:b1:be:f5:10:2b:df:b2:d2:77:9e:
f5:5d:36:41:ad:3b:24:b6:9b:1f:de:9b:4d:89:63:
29:48:22:84:74:8d:33:2c:b7:34:54:b8:d8:64:17:
41:47:0b:15:f6:a3:56:a6:1b:7d:f6:6b:54:90:4d:
97:11:7a:c2:d3:11:f6:ad:97:f0:07:97:26:ed:ac:
92:ca:35:2c:a0:b7:e0:4c:21:8b:a9:ab:33:d6:90:
f9:e9:a2:4e:d6:70:ec:2e:3c:21:94:37:e3:a8:65:
26:49:1c:bf:d2:de:88:65:0d:b2:a8:de:44:5a:46:
7a:89:26:8e:0a:e4:d4:14:32:04:8a:ab:47:1c:7f:
70:54:16:6c:3f:e9:43:bd:6a:34:ab:e0:3f:a1:67:
a6:3d:9d:2d:1c:fe:42:05:53:12:6b:93:85:2f:b3:
60:d5:2a:e3:21:32:f5:9d:c8:6b:39:61:cf:e5:06:
21:57:3c:fa:86:7f:54:dd:17:95:1e:aa:e9:5b:06:
d3:f1:e6:81:61:d5:17:88:9e:16:8f:57:ed:9c:56:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C3:FE:D8:27:F2:DD:63:93:8F:35:80:DF:3B:60:0E:2F:9C:F4:E3
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cb:74:4e:a7:6c:d2:bb:c6:6e:6a:f7:9b:8b:a6:47:eb:2b:
17:bf:5e:6e:63:3b:0e:76:5c:17:97:bc:82:7b:01:9e:cf:59:
d0:5a:11:19:68:19:af:70:36:ec:1f:fc:d5:bf:69:f2:7e:c9:
27:57:2c:33:58:ad:83:59:bd:c4:31:ec:5d:f8:41:00:3b:dc:
67:8f:40:c2:ea:f0:46:bd:42:bd:61:ea:5b:ac:b0:ca:62:08:
0f:a8:6a:d6:4b:12:b2:4a:5d:59:bd:5b:28:7e:7e:91:2c:5e:
64:4c:9b:e0:db:b6:39:72:ef:63:de:f5:20:1a:ca:58:6a:2d:
8b:e3:be:17:7d:66:b6:e0:43:02:63:12:1b:ff:e9:94:b0:01:
ae:3d:5b:91:e8:89:0e:b3:b6:2c:a6:21:db:39:eb:f8:a9:5d:
c9:22:66:b5:47:64:48:43:57:b6:e0:08:50:ae:74:9e:3a:6f:
fc:7e:4c:8e:9e:67:42:03:cc:fe:94:ea:1a:ea:19:81:59:12:
f7:c3:d1:82:54:9a:23:fd:a6:e0:79:37:41:4c:ca:d8:76:07:
41:c7:20:1d:7c:6a:bd:70:6e:f8:a0:58:be:81:03:71:cc:34:
4e:f1:dd:5f:ef:7c:f0:42:6c:a1:65:53:ac:bc:44:79:70:d1:
a8:37:5d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LkGbNbJ+aapfLJbF8nGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjM1ZTA0YzM0YzJmNzgxZWU5ODBhMTY1MWZmNjZlNTEz
MmJjNDQwHhcNMjYwMzI5MDYwMDQ4WhcNMjYwMzMwMDYwMDQ4WjAzMTEwLwYDVQQD
EyhhOGMzZmVkODI3ZjJkZDYzOTM4ZjM1ODBkZjNiNjAwZTJmOWNmNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhb3oiSrRdZKhhJPMNefnqOX8VDL
KhT/3ep7u1iAaZoDEl0iLFqRqGL2FwnMMEHhZrG+9RAr37LSd571XTZBrTsktpsf
3ptNiWMpSCKEdI0zLLc0VLjYZBdBRwsV9qNWpht99mtUkE2XEXrC0xH2rZfwB5cm
7aySyjUsoLfgTCGLqasz1pD56aJO1nDsLjwhlDfjqGUmSRy/0t6IZQ2yqN5EWkZ6
iSaOCuTUFDIEiqtHHH9wVBZsP+lDvWo0q+A/oWemPZ0tHP5CBVMSa5OFL7Ng1Srj
ITL1nchrOWHP5QYhVzz6hn9U3ReVHqrpWwbT8eaBYdUXiJ4Wj1ftnFYUbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjD/tgn8t1jk481gN87YA4vnPTjMB8GA1UdIwQY
MBaAFGBjXgTDTC94HumAoWUf9m5RMrxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUt
OTM3MDgxYTljZWZhLzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUtOTM3MDgxYTljZWZh
LzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMt0Tqds
0rvGbmr3m4umR+srF79ebmM7DnZcF5e8gnsBns9Z0FoRGWgZr3A27B/81b9p8n7J
J1csM1itg1m9xDHsXfhBADvcZ49AwurwRr1CvWHqW6ywymIID6hq1ksSskpdWb1b
KH5+kSxeZEyb4Nu2OXLvY971IBrKWGoti+O+F31mtuBDAmMSG//plLABrj1bkeiJ
DrO2LKYh2znr+KldySJmtUdkSENXtuAIUK50njpv/H5Mjp5nQgPM/pTqGuoZgVkS
98PRglSaI/2m4Hk3QUzK2HYHQccgHXxqvXBu+KBYvoEDccw0TvHdX+988EJsoWVT
rLxEeXDRqDddqw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:54:41 2026 by rpki-client