Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
File: YFUCYwejbuxeaBw5SK71Oif5lzY.mft (raw, json)
Hash identifier: uYQuopJVpz+yEGa05xtD8qGTtXc+uvHosOvt8ViuOpU=
Subject key identifier: 06:08:0E:F9:9C:BE:6B:03:48:5D:80:BE:93:B5:B8:B3:81:57:F7:EC
Authority key identifier: 60:55:02:63:07:A3:6E:EC:5E:68:1C:39:48:AE:F5:3A:27:F9:97:36
Certificate issuer: /CN=6055026307a36eec5e681c3948aef53a27f99736
Certificate serial: 019D371B549BCA91E154081B69F88B6FAB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
Manifest number: 02AB
Signing time: Sun 29 Mar 2026 01:00:31 +0000
Manifest this update: Sun 29 Mar 2026 01:00:31 +0000
Manifest next update: Mon 30 Mar 2026 01:00:31 +0000
Files and hashes: 1: 96tI9F9CMFNRZ6DCnRVD97jz1K0.roa (hash: Eq3ZNRGvPrY91tNLfyf2rbXZuZF3eXFbsefGVwqCF/E=)
2: YFUCYwejbuxeaBw5SK71Oif5lzY.crl (hash: fylld6SKYksfqp1yIkNyT7klnQRMUmGHANq7SvMEiCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:54:9b:ca:91:e1:54:08:1b:69:f8:8b:6f:ab:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6055026307a36eec5e681c3948aef53a27f99736
Validity
Not Before: Mar 29 01:00:31 2026 GMT
Not After : Mar 30 01:00:31 2026 GMT
Subject: CN=06080ef99cbe6b03485d80be93b5b8b38157f7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:17:60:eb:90:8c:87:b7:5a:47:bd:6b:b7:
69:3b:ae:30:c0:bc:71:69:6e:54:d6:26:5a:4a:61:
09:e3:94:7c:c5:be:5e:8e:15:25:60:9b:da:d2:a1:
55:d6:6b:1a:f0:ce:c2:5e:b8:98:63:fd:d2:86:a0:
18:8e:97:5a:6a:92:9a:c2:86:03:6e:86:aa:40:d3:
d4:8c:ee:ee:1c:ce:3a:6e:1f:7c:e2:a1:9a:8b:17:
86:8e:ad:8f:3d:e9:b8:90:bc:99:22:7b:92:65:bf:
56:bc:b3:9d:86:42:0a:f5:06:0c:22:29:97:93:4d:
2c:e0:d6:1f:19:f8:5a:45:b9:a2:40:b1:09:be:b8:
d5:d2:e0:db:4d:5e:7a:7d:f6:00:7c:0f:96:3a:c2:
44:14:e5:26:f6:84:f3:b8:7c:36:bd:9d:6d:73:cb:
63:f8:ff:28:04:d9:37:54:f1:13:00:da:1a:f4:c0:
2c:70:e2:50:96:84:f2:7e:ef:ef:9c:a3:3b:f3:fe:
fb:b6:19:02:7c:75:73:ba:80:f8:b0:7a:48:22:dc:
03:fa:cf:16:f5:e2:98:c9:ba:5b:bd:1d:c4:1d:28:
fb:2d:e7:bc:13:31:c0:25:e2:cf:8a:7a:4d:92:39:
87:87:0b:9b:f6:1b:b8:b8:50:40:5f:1a:80:46:42:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:08:0E:F9:9C:BE:6B:03:48:5D:80:BE:93:B5:B8:B3:81:57:F7:EC
X509v3 Authority Key Identifier:
keyid:60:55:02:63:07:A3:6E:EC:5E:68:1C:39:48:AE:F5:3A:27:F9:97:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d1:6d:13:67:54:83:47:e2:52:a4:65:9b:bc:13:bf:67:69:
a5:aa:82:bb:d1:f2:4a:c1:ef:a3:d3:92:d3:21:8f:53:6f:08:
8a:f7:18:33:f3:ac:b0:4a:3b:6b:61:23:a3:ae:96:3f:62:9c:
53:33:1e:30:b7:da:11:cb:1c:db:ae:11:eb:07:7e:9a:9e:34:
14:15:50:75:6c:4f:4e:45:86:4b:24:b2:f7:09:5b:8e:55:e2:
90:c5:ff:28:9f:4b:28:26:9f:88:04:78:0e:99:73:d4:be:52:
10:f9:8c:14:ab:87:7b:51:9e:95:46:46:11:7e:8e:f5:b9:5d:
7a:61:31:78:49:6f:4b:5b:af:86:89:cb:09:ce:64:41:8d:23:
21:36:78:51:50:21:4c:99:57:bf:da:fb:19:8d:25:47:f1:21:
c1:b0:76:e7:0c:43:41:ae:2e:92:ee:8e:df:6e:a7:61:a6:0d:
63:0a:0e:bf:20:08:51:8e:0e:22:3a:8f:0e:23:ae:4c:fd:13:
73:f2:59:c5:b3:9f:ca:ac:08:6a:ea:42:8c:1b:6e:80:e8:65:
60:5a:90:26:6d:69:2c:d1:63:e5:5e:4e:c7:f3:98:31:11:ea:
6b:45:5e:eb:ba:f7:a3:e6:35:6c:30:37:63:70:e4:22:03:cf:
fa:79:53:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:20 2026 by rpki-client