Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: qUKSF+fIfHaattvFvDHmTt9/D06vRuI37Oqpi3I6tE8=
Subject key identifier: 26:6C:6A:F1:6E:B0:A2:6C:3B:36:96:62:52:75:ED:1C:E5:7E:92:0A
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 019D0FD7CCA5A1D71D262B9EE0A54C4833E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 131F
Signing time: Sat 21 Mar 2026 10:01:33 +0000
Manifest this update: Sat 21 Mar 2026 10:01:33 +0000
Manifest next update: Sun 22 Mar 2026 10:01:33 +0000
Files and hashes: 1: ICH7QlH8-My8EF2NHU5TQA04o8k.roa (hash: tNyfEnCLQhnnGR56E80TEWwMugIJUGjzMZjCruGv2JM=)
2: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: g4Q0MsswtEX6wj8XvBcMNFRwhlOitYbhRD7m8QOs60M=)
3: sRtXhXnTV3BV5O7Uk5pPU6e6DHY.roa (hash: kK2zj8c+pEZD+bWtboW9Noev8kavvORxA7HxKk4tpBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:d7:cc:a5:a1:d7:1d:26:2b:9e:e0:a5:4c:48:33:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Mar 21 10:01:33 2026 GMT
Not After : Mar 22 10:01:33 2026 GMT
Subject: CN=266c6af16eb0a26c3b3696625275ed1ce57e920a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:a2:28:af:51:54:48:2a:5e:db:3c:60:2e:
08:35:3e:ed:85:31:d0:89:96:85:ec:3e:4e:e7:49:
85:8e:d7:25:c2:59:bc:7c:bb:1c:ed:8f:c4:44:cf:
3d:c2:52:18:bc:d9:1e:d2:0d:2d:c6:e0:9e:47:4d:
8a:f8:ef:2d:a2:89:2b:44:99:91:f7:35:4b:7c:08:
87:7e:24:40:5b:80:0b:a7:69:7c:8c:af:16:9d:b8:
22:d8:e9:08:25:5c:64:6e:55:3a:eb:6a:90:b7:cc:
68:ee:23:89:a6:b4:31:2e:87:37:72:b4:f3:92:07:
4a:ce:83:e7:2c:9b:d6:2b:21:2e:4f:8a:4c:06:99:
bc:28:d5:1a:e0:c1:f8:28:74:0d:82:2f:fe:f5:b5:
a0:05:0a:91:0a:b5:22:e2:c4:44:64:3e:3b:0f:4a:
b5:74:14:73:04:39:d4:4d:b6:bb:d3:47:21:15:cf:
f2:a5:91:19:34:12:40:6d:8c:77:ed:7c:af:bf:8f:
0b:de:ab:1b:7b:6a:d8:5b:2a:36:68:ed:5e:90:a3:
1c:c8:ef:a2:7f:42:52:56:2c:ec:24:fe:58:1d:13:
06:ee:4c:64:10:94:70:c0:fd:dc:a6:65:ce:b7:77:
1c:bd:98:94:6f:1a:87:ae:1a:ac:86:d0:6d:27:8e:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6C:6A:F1:6E:B0:A2:6C:3B:36:96:62:52:75:ED:1C:E5:7E:92:0A
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0a:9d:5a:bc:d8:0b:c8:1a:13:30:84:de:41:9e:be:93:d8:
0b:f0:1d:7f:f7:02:68:ea:85:90:91:6a:8c:44:2a:3a:37:68:
06:72:30:80:1f:12:29:b9:bc:b3:ae:2f:79:a0:79:6f:0b:81:
2f:48:18:ba:1f:64:f3:3e:1b:e2:69:26:c4:05:f8:23:67:a4:
2e:18:f3:a9:2e:a6:03:18:9c:34:1e:03:87:58:ad:ff:07:1f:
6b:b0:b4:90:64:6c:04:d1:7b:d1:81:a9:04:f3:05:98:98:30:
a9:b2:f6:7b:05:ee:3c:0b:11:6f:c5:3e:9f:5e:b6:c5:de:f0:
5f:03:b5:31:2d:6b:5b:4d:7a:fe:38:f9:84:2c:2a:46:a7:d2:
29:ee:5f:91:c3:4e:f3:0a:0c:fb:9e:ce:02:90:b2:4c:16:81:
99:0f:ed:eb:3b:0c:81:bf:65:56:13:21:38:2c:7f:b2:a3:77:
a0:ff:36:c5:ad:60:e3:d4:b8:cf:49:cf:a2:cf:6e:34:0d:3f:
f7:b0:83:ee:2a:58:67:fc:74:1c:af:c0:05:87:2a:52:3f:36:
e6:e3:1b:1c:8a:84:cf:34:b6:23:48:d2:d8:0f:20:ec:fd:ea:
25:6e:8b:44:07:61:b5:8b:15:3b:ca:dd:7f:7f:67:6b:1b:82:
9d:0e:70:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 13:42:12 2026 by rpki-client