Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: vNVOqMRVaLrvT4yKiJsdLRdyArM0z6e8Y+yQQjD7x3A=
Subject key identifier: 36:A9:41:60:10:58:76:77:B3:A1:24:FB:0F:FF:5A:D2:CC:C3:E1:6C
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 019D37F7397FE7FAF7441BD4203B8ADCFFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 1452
Signing time: Sun 29 Mar 2026 05:00:42 +0000
Manifest this update: Sun 29 Mar 2026 05:00:42 +0000
Manifest next update: Mon 30 Mar 2026 05:00:42 +0000
Files and hashes: 1: ET5vMhLbSdWsUS7cNiMD0Da89x0.roa (hash: +AkKc2WCnmOlPOxnIiAKu7no0yZQrgr6+XgFHwBRgZU=)
2: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: 2M44H998LjuWYQ4C2FxLmJygwiQeQc/xgSlP2SQGvLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:39:7f:e7:fa:f7:44:1b:d4:20:3b:8a:dc:ff:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Mar 29 05:00:42 2026 GMT
Not After : Mar 30 05:00:42 2026 GMT
Subject: CN=36a9416010587677b3a124fb0fff5ad2ccc3e16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:77:e0:a0:c2:16:d7:13:39:0d:0e:c6:5d:
c5:1c:65:88:74:6d:8a:54:84:ca:4e:f9:28:68:2d:
ae:16:15:64:28:dc:14:99:5c:60:5e:8f:41:83:81:
b5:47:b7:e1:af:db:87:f1:47:dd:3e:2c:2d:2d:5f:
ee:58:22:11:92:04:97:e7:1e:47:80:bf:71:21:52:
5b:57:36:6a:10:cb:e1:16:1e:c9:1b:64:55:7b:05:
f0:16:1f:14:2f:77:45:7d:30:a6:d7:ac:4b:9e:20:
7e:7f:96:d7:f4:0b:84:20:0f:65:30:dd:82:ff:98:
02:f4:a8:02:87:1d:d4:8b:aa:3b:0b:8a:b2:ba:d4:
62:ca:a1:96:10:2b:bc:46:cc:8d:21:1d:59:a8:d0:
40:78:87:4c:fa:96:73:e1:60:69:ca:a6:cf:9b:da:
4a:c6:23:21:66:fe:44:ec:7b:d4:85:4c:dc:af:2f:
46:53:cd:fe:da:35:8b:77:2b:19:58:aa:b7:89:9f:
90:bf:f0:a8:67:bc:70:85:8c:70:3c:c4:cd:36:c6:
c3:7b:38:0a:7b:e9:b7:b6:45:6b:88:2e:0c:d3:ce:
7b:48:7b:96:9e:e0:82:35:e7:8c:8e:91:0e:e8:20:
bf:0d:3c:a2:f8:ef:9e:b0:1a:3b:8a:86:3c:85:41:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A9:41:60:10:58:76:77:B3:A1:24:FB:0F:FF:5A:D2:CC:C3:E1:6C
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:06:c3:eb:22:69:36:48:ee:40:9f:e9:50:a4:e1:63:d4:83:
f8:65:41:e1:b4:16:19:4a:6b:02:49:6c:3f:2b:05:ea:18:e1:
d8:a6:ab:12:64:39:2c:4a:91:23:6d:41:28:67:00:9e:e1:d5:
5b:8d:b6:16:51:51:f3:9b:3b:5a:f0:c5:b4:f6:fa:9a:0a:3b:
cb:43:27:ed:f8:b4:23:d8:9e:99:9c:e7:70:87:1a:78:b6:28:
43:c6:ad:3c:f1:c0:d0:85:b0:03:94:67:c4:ec:97:d7:74:a7:
46:66:e6:ac:08:11:dd:15:a2:ae:2b:ef:97:a1:b2:cb:bd:bb:
9c:12:4d:60:f2:32:a5:af:8b:43:f6:62:84:ab:1b:6b:a9:92:
61:87:f0:3e:c4:b4:f8:67:11:50:87:2f:96:96:66:ee:1a:6f:
52:d4:db:92:23:9d:ed:4e:6b:35:74:aa:4e:09:98:85:97:11:
38:dc:c1:98:9e:6f:a0:f9:39:41:2f:5f:d2:74:7b:cf:49:37:
5e:e5:80:3a:fd:1a:1c:45:9a:e1:13:22:46:da:80:44:89:fb:
6a:22:90:c5:f6:93:04:2f:9f:76:1f:31:ba:a0:9f:6d:fe:23:
ca:a1:28:ca:15:b7:2d:e5:23:c0:83:5b:76:dd:ab:a3:7d:9e:
11:37:d4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:28 2026 by rpki-client