Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
File: YmFlv7I92h-YcLJBf0lkhebAinQ.mft (raw, json)
Hash identifier: i8f6fcMQK9PVMNel0/lerYWnVTFUHw/t2NOHBZNh76E=
Subject key identifier: 8F:54:60:A5:46:63:D3:DD:FD:AA:EF:03:7C:8D:B8:AB:8A:89:29:0A
Authority key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
Certificate issuer: /CN=626165bfb23dda1f9870b2417f496485e6c08a74
Certificate serial: 019D394164E54F506F07B85AD52B884F5110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
Manifest number: 061E
Signing time: Sun 29 Mar 2026 11:01:20 +0000
Manifest this update: Sun 29 Mar 2026 11:01:20 +0000
Manifest next update: Mon 30 Mar 2026 11:01:20 +0000
Files and hashes: 1: 2AHtmhkmAt12Qh4fBCM-56oX8gY.roa (hash: KJViVmT29xLVAZvhSPdG3WsX06P/yToLqg0u7mRQc34=)
2: YmFlv7I92h-YcLJBf0lkhebAinQ.crl (hash: DA3lnDanRv0olM+hIGNRLmcAQnPvP5yFllF4AQjOFTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:64:e5:4f:50:6f:07:b8:5a:d5:2b:88:4f:51:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626165bfb23dda1f9870b2417f496485e6c08a74
Validity
Not Before: Mar 29 11:01:20 2026 GMT
Not After : Mar 30 11:01:20 2026 GMT
Subject: CN=8f5460a54663d3ddfdaaef037c8db8ab8a89290a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:3a:d1:5b:d0:60:34:72:21:ff:62:ed:32:
8e:0c:a9:d0:60:be:f7:d6:f8:a1:8c:2d:ef:5e:17:
ff:6d:e0:ef:f2:18:44:71:fb:66:d2:1b:7e:54:f5:
10:ee:d8:c4:18:8b:57:bf:48:4f:ec:66:67:07:84:
b8:01:dd:00:91:e3:84:39:7e:d1:a1:29:3b:9d:b2:
4e:31:c8:19:88:d1:ca:68:8d:79:ce:36:a7:f1:84:
d1:c5:df:c7:3a:f6:3d:48:8d:e4:74:21:9a:8e:6a:
84:62:b3:e2:ae:51:53:c4:8e:be:77:e5:04:6b:a7:
9b:61:2d:0f:69:a0:cf:91:8a:b2:04:c2:25:66:f8:
33:54:2e:f2:ba:dc:7e:b0:99:b3:48:5e:11:44:2d:
20:ac:45:53:cf:2b:86:ef:01:5c:d2:60:38:58:5e:
1b:5a:a5:ad:51:73:99:8d:77:54:13:c4:1e:85:31:
f9:05:23:26:c8:f1:ac:08:e1:56:cf:e0:af:4b:9e:
c9:88:25:1d:d4:3d:1c:08:70:b4:94:0a:c8:76:21:
d9:16:e8:02:b7:2a:30:6a:35:21:f3:23:d9:69:c2:
1f:48:cb:74:5b:7f:5c:b6:d3:73:c2:f2:73:c1:b0:
37:6c:04:05:be:af:34:50:c3:7c:44:d7:51:56:35:
c1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:54:60:A5:46:63:D3:DD:FD:AA:EF:03:7C:8D:B8:AB:8A:89:29:0A
X509v3 Authority Key Identifier:
keyid:62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bf:91:0f:9e:bd:29:7a:5f:73:04:72:ca:62:8e:ac:6f:95:
01:cb:d4:b1:9e:92:16:2f:42:37:e4:6d:37:64:01:87:82:91:
c5:d4:21:0c:df:9b:7b:36:b7:aa:b1:7b:d7:7b:65:37:db:35:
8a:8f:01:95:e0:00:79:33:fd:a3:7c:cf:f5:aa:8d:03:db:c0:
77:c1:83:a0:ae:47:f0:8a:df:48:4c:58:eb:ce:a5:d9:06:ce:
14:f6:f0:88:33:94:0e:4a:ff:60:03:96:81:59:d2:92:15:ff:
53:78:fc:9f:45:d2:08:72:86:5e:f9:d4:a5:18:e7:67:90:c8:
32:36:98:30:b6:2a:63:a7:1d:9b:33:0c:d0:f8:e6:87:aa:fe:
a1:9d:bf:d6:c8:a1:5e:09:42:bb:91:af:0f:e9:d6:bf:54:28:
34:0b:c7:57:48:68:88:d2:1d:76:60:49:00:c2:26:6e:c8:cb:
8a:d4:ff:a7:ea:2f:3e:87:ec:7e:d8:ea:69:2b:54:ff:90:6d:
6f:ae:19:70:41:7a:b1:bd:5a:a8:5a:b6:4a:8c:87:6b:8a:81:
c0:1b:32:f4:fb:46:d9:3c:1c:d9:ea:8c:8b:ac:62:58:8f:25:
83:1d:e1:71:22:f0:74:b6:ee:38:38:ee:a3:6b:69:f5:32:46:
49:95:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:20 2026 by rpki-client