Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
File: Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft (raw, json)
Hash identifier: xzgRRroB+cKDDngElj8rpysvd/r70Yk+GkEGIt6hpfc=
Subject key identifier: 91:7D:D2:05:9C:42:7E:A4:F8:91:14:2B:F2:83:D3:37:F7:07:F9:39
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Certificate issuer: /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial: 019CEC014F3D3159143D62F3AD5833BFAE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
Manifest number: 1869
Signing time: Sat 14 Mar 2026 11:00:34 +0000
Manifest this update: Sat 14 Mar 2026 11:00:34 +0000
Manifest next update: Sun 15 Mar 2026 11:00:34 +0000
Files and hashes: 1: F4LbTheuqBEGIn6fr-Y_BQ5eBhY.roa (hash: ylWhqGU3POwfkleabzCnfc3VdGfQhOi+YLiDFBo46HY=)
2: QsJVa7ALHglGVdigmvX7md5Q674.roa (hash: 22/vuBN3pEmuYMdjZicb7ImHZcbO8Ev5qKlpNkyNuag=)
3: Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl (hash: 2W48NmRElKXsvxfObi0EHaiLrss9WrVwUEYgrTeOLss=)
4: lpSnG-y0Lsx00PzPj6wFEetzroU.roa (hash: 8nc2ssk8ohlYgfLFFN1OlzwafOrvoQKJGYQ+TMSGKjY=)
5: vnsB4kAOFnGsHN9CBVoZnqSF5lo.roa (hash: WojFRS0zJ8gYXjOIS9R3kP7lD+l+nHPXLrf3+5L0IXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:01:4f:3d:31:59:14:3d:62:f3:ad:58:33:bf:ae:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
Validity
Not Before: Mar 14 11:00:34 2026 GMT
Not After : Mar 15 11:00:34 2026 GMT
Subject: CN=917dd2059c427ea4f891142bf283d337f707f939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:a6:6e:52:30:7d:43:37:0d:97:cb:0d:5c:
eb:c8:26:79:d4:7e:4e:7f:53:b8:12:a7:57:da:6e:
c3:77:1a:cf:23:b6:de:7b:a1:23:fc:48:fe:26:b9:
0b:b2:c2:81:ad:f1:48:f6:ca:a4:2a:8c:97:33:bd:
00:29:91:0a:29:62:3b:99:b0:62:60:71:72:ba:9a:
ed:4e:c5:25:7a:6c:c4:a5:cd:e2:22:c9:bb:49:6c:
fe:29:af:d5:f0:84:d7:f4:3b:3f:ee:8f:83:26:a4:
4f:55:9d:b2:1b:1c:8a:1a:2d:68:64:01:62:84:b5:
ee:29:a4:86:2d:0e:a2:32:92:b1:ee:db:08:80:da:
b8:04:2c:a8:7a:77:75:fe:c7:cd:fd:09:4e:a0:6c:
6e:4a:34:23:d7:14:ca:db:14:51:42:db:29:28:18:
58:22:b1:22:d2:78:1a:44:e8:bf:a4:e2:81:e1:c2:
cd:cf:24:a4:72:93:40:82:78:06:3a:c5:c9:6b:cc:
43:e4:b5:cc:16:d1:70:c0:a4:fe:54:4e:78:ae:6f:
96:4e:b4:ba:0d:0d:aa:9b:2b:18:26:dd:c9:02:bc:
e3:8c:d1:e0:86:13:25:e7:1f:4b:2a:3b:e8:90:bf:
23:96:7e:d8:f4:e5:c6:f8:21:49:25:98:36:a9:e5:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7D:D2:05:9C:42:7E:A4:F8:91:14:2B:F2:83:D3:37:F7:07:F9:39
X509v3 Authority Key Identifier:
keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ec:75:6c:10:99:58:c1:aa:03:b3:70:a6:58:be:c5:84:10:
56:dc:d9:bc:2d:60:c4:d6:6b:9e:28:80:7a:f7:63:ba:15:c9:
cc:fd:42:f3:7c:49:d3:af:ac:ff:ab:fd:45:85:6f:9d:79:2a:
1c:44:25:d6:65:e1:ed:49:7f:09:d4:b2:0e:f3:59:e4:20:14:
1c:1f:6d:03:ef:7f:bf:ce:1e:40:47:17:82:e3:c8:5b:81:34:
e3:d7:ef:d9:e1:60:5d:dd:35:6b:cd:58:3f:0c:f1:5e:76:11:
c6:cf:62:40:6e:22:16:ef:99:a1:2a:0b:f6:10:dd:6a:77:55:
ef:7c:10:12:1e:42:1a:08:69:12:00:6a:16:67:ac:c8:13:2a:
ea:03:aa:d0:fd:ab:bd:4a:90:bc:02:9e:c0:14:41:c5:4b:1b:
7e:86:25:bf:de:16:5f:9f:ee:bc:06:f3:1c:a5:e7:f1:b3:b8:
a2:cc:66:89:11:23:19:d2:7c:56:3d:a2:a1:bc:8d:c9:55:f3:
9f:c0:15:08:40:6c:78:59:84:9d:96:bc:e6:09:45:52:24:1a:
8c:5b:c8:c6:ee:26:31:19:43:6d:58:25:51:88:0b:3f:ea:4b:
ce:a7:96:56:a9:ee:df:23:64:33:89:fb:1a:44:60:81:ca:27:
e4:ca:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:22:19 2026 by rpki-client