Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File: YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier: yBEupeYhDaAAXkSvsOsKSdgK+E7+59ufkiqrX2B8Kdg=
Subject key identifier: 56:38:5C:02:F3:C3:03:59:BA:7E:C0:4C:84:DC:B6:4F:56:D8:7D:02
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 019CE47E9D0B9B68EA93C7EBD95414D42985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number: 08E3
Signing time: Fri 13 Mar 2026 00:00:28 +0000
Manifest this update: Fri 13 Mar 2026 00:00:28 +0000
Manifest next update: Sat 14 Mar 2026 00:00:28 +0000
Files and hashes: 1: 2RyLE_LZuHzSXkTYOvkYFBYiy4o.roa (hash: W8178gzARc8G7/wIunYzbf9dlIqJEul5+nB0lBaUQhw=)
2: 4415GxEj-TYr3AidYcdJ8bhsDy8.roa (hash: cE5GPiOmnznkFTHE5XfxrOsWeoTa87SB/CFxhnlAtck=)
3: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: wJTzpkqhTPdp9TBDjLlC5JOrjbhoWNTzZ0ycuSSvW+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:9d:0b:9b:68:ea:93:c7:eb:d9:54:14:d4:29:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Mar 13 00:00:28 2026 GMT
Not After : Mar 14 00:00:28 2026 GMT
Subject: CN=56385c02f3c30359ba7ec04c84dcb64f56d87d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:4e:7e:a5:08:c1:52:37:d6:66:73:2d:dd:
df:56:91:60:78:4d:7f:f6:08:e0:09:f7:51:f5:a8:
ca:0d:5d:5c:a7:08:74:a0:35:a2:02:5f:8e:1d:26:
ba:04:f9:16:44:ef:3e:e0:13:a8:0e:da:6c:9b:24:
fc:09:cd:ff:63:2a:09:6d:ce:02:54:50:92:49:e2:
90:39:72:8c:45:f0:8c:0e:86:5d:34:1f:0c:09:8f:
33:c3:a5:b1:42:e6:70:b9:7d:fd:1a:30:e8:8e:53:
94:32:89:c4:6b:b8:16:18:24:69:1f:a7:7e:09:5c:
57:1b:3f:db:eb:55:7b:26:7a:6d:1c:be:3f:fb:66:
8c:90:d8:e4:8b:a7:dc:8e:8d:ec:3c:9d:03:aa:9d:
a0:f0:68:93:5b:39:29:2e:f2:f5:cf:86:e1:c7:22:
20:2b:4a:97:22:38:b4:b3:84:9d:be:bb:1a:e7:b7:
d1:f8:32:81:f9:8e:dc:f9:67:54:61:e7:b7:15:45:
3e:f0:8f:cf:27:9b:69:7c:6e:09:a7:1d:3d:54:f2:
6f:06:c8:50:b6:3c:2d:9f:3f:a9:a4:0f:e6:51:ff:
21:3d:4c:fe:77:17:84:c5:3c:13:5b:ea:8b:ec:0a:
60:dc:f8:41:b5:57:4a:60:9b:5f:fa:50:3f:31:1e:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:38:5C:02:F3:C3:03:59:BA:7E:C0:4C:84:DC:B6:4F:56:D8:7D:02
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4f:f4:37:96:d3:af:8a:a9:ae:b7:e4:5b:ff:53:f5:8c:ef:
eb:94:dd:02:36:2e:65:85:01:0f:9a:f9:72:b4:60:fc:66:a1:
6e:20:67:5a:1d:69:77:71:25:f8:5f:3d:f8:c5:ad:f0:ec:5a:
e1:e6:66:9b:b3:95:f6:d5:df:e8:71:9e:7e:43:7f:94:cd:9e:
08:39:ea:2c:04:d2:2e:02:a9:d7:c7:a4:ef:1d:48:0d:d3:6e:
41:47:45:df:fe:52:d8:d2:af:89:08:8a:a8:ac:a0:47:49:fb:
10:51:f5:14:7f:c7:8f:40:1d:76:26:3c:95:39:62:be:62:ca:
c8:4e:f5:8c:56:c8:88:f3:1f:85:44:3a:e1:90:2b:6f:56:f5:
85:21:31:a3:07:38:f8:e4:c0:5b:53:37:af:ea:8d:38:d2:2e:
38:dd:43:d9:18:c2:37:4f:bb:04:3d:88:4e:e0:76:e8:f1:52:
fe:59:8e:ae:4b:c4:1d:2e:53:c3:9f:16:d1:5e:b8:85:73:13:
0d:42:56:df:b9:9f:a1:58:24:eb:e3:98:5d:b1:93:cd:b0:4d:
a7:5f:3b:bc:ce:67:eb:24:8a:c4:48:73:e5:0d:3d:5e:32:f8:
b4:6a:f4:12:56:03:cd:63:d7:01:1b:82:75:53:ae:2d:75:44:
17:ea:c9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:23:12 2026 by rpki-client