Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: PapGWJBIz9HiqnUSaNn6YcD6uWS9kCfaYwCikS5GkZE=
Subject key identifier: 82:1C:D4:5F:A7:FA:A4:36:03:73:D8:40:B9:C9:29:72:E7:5B:41:E2
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 019D38D311FA7E664C746F44B80CB3626AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 02FE
Signing time: Sun 29 Mar 2026 09:00:49 +0000
Manifest this update: Sun 29 Mar 2026 09:00:49 +0000
Manifest next update: Mon 30 Mar 2026 09:00:49 +0000
Files and hashes: 1: IPEVX9NburliCOkL_8My8KZEvxc.roa (hash: vKtzd4qXyz9EWKAKarv5HXYhJ7hA2jvu9rmJAemDTXw=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: 1ddbFSNyQ65BciTeeT7A/Wg0wflD39r3UTc46HpkImE=)
3: g3UM-mxo9surPyGX-ua-Jw8Hwy0.roa (hash: rLTMTj/qJ9X8Z52HM7aUZCnlG5iT1wzURKa+BIyHlNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:11:fa:7e:66:4c:74:6f:44:b8:0c:b3:62:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Mar 29 09:00:49 2026 GMT
Not After : Mar 30 09:00:49 2026 GMT
Subject: CN=821cd45fa7faa4360373d840b9c92972e75b41e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:29:d4:97:65:be:fd:8b:99:d6:49:9f:91:
99:22:39:a1:f5:d5:b6:a3:15:36:59:46:e2:ef:a5:
a8:70:c6:2c:f1:3d:f3:55:ed:0a:1d:17:9e:6d:e5:
58:72:ee:f3:26:4a:b9:2e:6b:a0:ad:3a:ac:7d:c0:
b5:a7:f3:db:4d:b9:29:30:e5:4a:78:f5:99:b4:4c:
f8:33:e4:e5:3e:ba:58:00:45:37:3a:cf:3d:8a:94:
cf:c3:33:bd:1b:2f:7c:05:12:88:a8:a5:1e:a1:8b:
c1:53:c2:8f:c2:f5:4e:21:97:ac:59:56:c1:92:60:
da:99:d2:0f:e1:77:57:89:82:23:20:6f:46:4d:82:
02:51:b3:9a:44:d9:91:6a:cc:a6:2f:4f:ec:94:0b:
3d:f1:2b:6b:25:11:5a:68:b2:34:b8:f1:0f:92:0b:
c8:e4:d6:10:38:27:1b:97:8e:21:ca:d1:a0:89:99:
2d:65:62:7c:df:2a:a3:94:89:46:f5:56:43:ba:83:
65:bd:4c:f0:fc:0c:b0:83:4c:dd:d6:d0:52:2b:81:
ee:d6:c9:39:89:ab:5e:96:51:e5:ad:0e:c5:40:b1:
55:f2:3b:f0:9f:e0:6e:b0:1e:54:7a:fd:22:b6:81:
5e:87:6e:79:09:bf:35:ac:1b:9b:ae:41:dd:9a:4a:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1C:D4:5F:A7:FA:A4:36:03:73:D8:40:B9:C9:29:72:E7:5B:41:E2
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d1:cd:2f:9a:b4:49:b0:9e:a9:18:f5:ed:67:69:b4:f7:c0:
94:8a:70:bb:59:03:0e:a3:ce:ee:f1:91:12:b0:e9:c1:25:a1:
35:85:ae:9f:3e:3e:a4:51:5c:39:eb:f0:e8:63:aa:04:4a:44:
62:d0:38:17:e1:5f:b7:dd:81:d2:02:b4:ed:10:df:4c:c3:c0:
2e:58:8d:ed:42:e0:7a:3b:90:c7:5f:56:65:16:45:5d:1f:c8:
a8:48:f8:97:21:1f:f5:66:ef:4e:9d:7f:55:80:78:92:50:d3:
08:9f:39:c0:6e:a1:0d:b0:d3:81:10:c9:67:13:92:25:3f:53:
74:1d:76:db:27:64:a7:ad:f1:46:29:58:c8:53:24:1b:3e:5b:
5b:11:ab:87:75:b2:d2:cb:1f:9c:ca:1e:a1:58:7d:eb:32:a4:
96:4e:56:65:f2:14:ea:5b:02:89:82:05:90:29:66:4b:37:5f:
02:50:c0:9f:91:32:16:82:fe:ca:51:f4:30:67:de:c5:d7:e3:
f1:9c:a6:bd:16:37:f0:62:99:ee:d6:74:b3:fb:73:71:64:6a:
cd:41:a3:66:2d:c2:f3:6b:bc:2d:45:82:b1:ca:59:82:29:5b:
08:a2:5d:d5:45:fb:fa:e5:d4:98:b5:6c:6e:21:be:b3:63:0d:
26:01:29:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:03 2026 by rpki-client