Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
File: YPp_3868B6Jy24nNr4d4cMaH4E8.mft (raw, json)
Hash identifier: buDpaNIq0EGQQMK3KKM9+FajRdVot1wyaZFl4l8vpJw=
Subject key identifier: 5C:C7:23:39:68:08:F8:22:8E:96:BA:1D:30:36:E3:E8:E2:3E:F7:B9
Authority key identifier: 60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
Certificate issuer: /CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Certificate serial: 019D38D3D9A2CBCBA2D47B5761FDB3F9DF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
Manifest number: 0704
Signing time: Sun 29 Mar 2026 09:01:41 +0000
Manifest this update: Sun 29 Mar 2026 09:01:41 +0000
Manifest next update: Mon 30 Mar 2026 09:01:41 +0000
Files and hashes: 1: U1sfV9HH8u88t2HBLjDAkG-CyLg.roa (hash: tpq5q5jvhF2tXurj200oQaFHHR4X1vOHV0qottraasM=)
2: YPp_3868B6Jy24nNr4d4cMaH4E8.crl (hash: sWxGgl5YnBbEi7d4bpU7Sccxrqr+5qhNKk+B2OK+DnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d9:a2:cb:cb:a2:d4:7b:57:61:fd:b3:f9:df:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Validity
Not Before: Mar 29 09:01:41 2026 GMT
Not After : Mar 30 09:01:41 2026 GMT
Subject: CN=5cc723396808f8228e96ba1d3036e3e8e23ef7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:fc:57:a4:33:ba:5b:08:2b:6b:91:6e:95:
17:7a:a5:97:d7:b0:70:1a:bf:13:be:a1:0f:b1:53:
94:d7:61:54:87:22:37:68:03:76:94:0e:a8:8a:be:
90:0f:2e:c1:32:61:17:a5:1a:f0:29:45:b4:0c:c9:
66:a5:13:97:88:49:d3:12:b2:b0:6e:db:71:2f:3d:
7e:f8:1d:4b:60:ff:94:5f:ac:f5:0a:36:fc:84:8d:
6d:84:c9:97:72:5a:00:a0:38:d0:9e:b0:98:67:6d:
ac:8c:3a:05:bf:ce:53:7c:2f:61:46:40:2f:01:99:
9a:c2:5b:06:2c:d9:8b:49:68:f2:0b:fd:c1:d6:5b:
61:11:10:a1:bb:2d:d0:e1:18:7b:ac:70:89:67:42:
85:32:14:c4:70:2e:fb:b2:89:c3:44:5a:db:e2:13:
ff:48:ff:bd:56:a2:a8:e6:94:df:21:08:9a:83:e8:
e7:46:57:f2:4b:b5:5d:f3:b5:78:db:02:3e:ea:e9:
4f:b4:ef:db:c2:8e:ed:ea:d3:11:9b:ff:d0:fb:33:
10:76:c2:9a:ff:07:15:31:4c:f2:b5:bc:68:5a:4b:
ea:dd:d8:c8:d0:e2:c4:38:86:02:51:60:54:12:f9:
08:91:d0:3d:cd:5d:76:46:7d:01:a3:44:42:bb:55:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C7:23:39:68:08:F8:22:8E:96:BA:1D:30:36:E3:E8:E2:3E:F7:B9
X509v3 Authority Key Identifier:
keyid:60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4e:47:58:f0:ad:34:76:c3:9d:05:ef:b2:78:21:cf:19:97:
88:67:c3:0a:9e:cc:97:4c:1a:a4:30:8b:e2:08:be:e2:a1:12:
4e:41:58:99:6b:66:e5:78:9a:45:17:4c:ff:1f:b7:d2:84:e5:
d4:2b:5a:01:4a:e0:70:83:3c:53:e0:4a:10:c4:48:84:a5:e7:
55:f1:78:eb:12:9d:d6:19:b9:99:e2:85:3a:14:99:fb:f2:72:
4e:6e:b8:ec:9e:24:91:36:7b:5b:a3:35:0b:1f:32:2b:61:75:
94:70:fc:12:40:d5:a2:e1:89:b2:ec:29:e5:cf:6a:65:8f:ed:
f0:73:88:e0:0a:00:13:76:8a:ad:30:00:d4:75:03:55:79:aa:
5d:0b:14:0e:a2:a0:84:51:c7:63:bb:da:61:82:59:ea:36:60:
1c:f6:81:68:17:88:41:df:51:16:9a:b9:77:10:85:8e:31:62:
06:1f:dd:6e:0e:4f:98:22:91:4f:e8:91:9a:26:66:7b:81:1e:
f8:64:e3:e4:d6:cb:7b:6e:eb:ce:a0:14:c1:3a:04:6a:45:be:
a6:54:9d:d9:35:33:c6:86:fc:e5:0d:33:9b:67:5c:c7:77:b7:
04:77:87:17:1d:6e:ef:d6:a7:42:ae:8e:30:0a:f7:75:f0:03:
55:a9:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:22 2026 by rpki-client