Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: VyHEsKZnrJO8iIQSKTv7ayfhMtP7VPC8UHGULSvK7yU=
Subject key identifier: BC:31:DB:8E:2D:0B:4B:B7:79:6B:22:48:C9:FB:8E:C8:D6:CB:6C:A4
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 019CEB5CE57CA6C870B1CB51310AB1AB8C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 1869
Signing time: Sat 14 Mar 2026 08:00:59 +0000
Manifest this update: Sat 14 Mar 2026 08:00:59 +0000
Manifest next update: Sun 15 Mar 2026 08:00:59 +0000
Files and hashes: 1: IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa (hash: 9nBExfSnL3g+4CNDTe8481JrkpEVyvy2139EXebjOIs=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: 6rX59oXjcICOI9U6+ncYxE9/uUzm3BhnZFBMHy4hTTI=)
3: vNHV1DYtOsfUinz5gwCFoBzKiIg.roa (hash: OIxUV31cdJf2l/w+qSDbXSkKEcQlTRfi/zGOENFvc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:5c:e5:7c:a6:c8:70:b1:cb:51:31:0a:b1:ab:8c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Mar 14 08:00:59 2026 GMT
Not After : Mar 15 08:00:59 2026 GMT
Subject: CN=bc31db8e2d0b4bb7796b2248c9fb8ec8d6cb6ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:74:14:d8:da:48:5f:67:58:0e:0b:66:e9:
6d:6a:08:8b:3f:cb:cd:ca:7e:10:60:1c:a1:01:13:
21:71:e4:02:9e:71:8f:54:8f:42:d5:ea:ae:d6:cc:
07:55:2d:41:e4:34:ea:d0:fc:28:21:99:60:9b:15:
15:9c:32:25:ce:81:10:2c:93:f9:e1:25:7b:8e:bc:
a4:b4:be:9f:5f:bd:f6:cf:77:04:cf:f4:64:43:84:
13:b3:7b:ab:c4:9d:8a:de:b1:24:f0:f6:68:cb:7f:
c4:d4:c9:cd:dc:ac:e6:f3:8c:49:42:59:ca:c6:46:
a2:fd:5d:bd:70:df:82:16:12:25:27:d4:c1:51:a4:
b1:2c:1d:b4:e2:2d:8e:5e:a3:5f:6a:aa:84:6a:fd:
8a:e2:f9:32:78:b2:5c:8d:ae:ce:5a:55:de:f4:fe:
6e:38:f4:7d:ab:27:da:0e:57:8e:e0:04:83:32:6c:
87:a1:3e:66:3e:7c:b4:04:ac:d1:28:ea:5d:98:9e:
ef:6c:52:fb:f9:90:bd:ff:b5:48:a1:1f:22:e3:6e:
52:9d:0f:e5:bf:11:26:32:a6:3d:dc:da:e8:a2:28:
0f:9a:8a:8d:5f:62:e2:a4:df:99:df:cc:0f:60:12:
af:66:72:4b:47:6c:e4:32:2a:fb:24:a8:d4:15:59:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:31:DB:8E:2D:0B:4B:B7:79:6B:22:48:C9:FB:8E:C8:D6:CB:6C:A4
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5f:35:bc:2c:13:6f:c8:be:2e:51:0d:d3:64:72:c7:d4:c7:
a6:8d:7e:9c:57:38:fd:fa:8d:f9:1f:74:a2:42:39:8a:55:10:
6d:97:61:8f:d8:4c:3d:2f:d5:c2:ca:bc:c1:9b:fa:1b:ee:2e:
1e:e8:56:d2:c5:6b:ec:f3:b0:bb:d2:6f:2a:1d:84:42:b0:59:
28:f7:1e:95:a7:e3:70:19:a6:0f:31:d8:79:bb:7c:eb:a0:aa:
a4:95:02:b7:63:52:58:9f:8c:bc:24:f6:d8:26:9e:d7:40:23:
c5:eb:6c:14:7e:26:0e:c5:8f:12:6a:32:ae:82:49:8f:27:7a:
ab:38:0d:6f:ba:d5:e4:32:35:c0:81:a1:cb:22:64:2f:a7:53:
68:27:5f:95:36:67:98:b7:cf:9c:9f:b7:36:05:78:8e:41:c4:
cd:11:23:c5:b2:7a:53:25:dd:55:bf:b8:ca:03:db:f6:c3:e8:
a0:25:36:5c:1c:f1:82:49:8f:34:42:9d:bb:73:06:37:04:22:
08:05:9d:c1:31:ee:3a:ce:dd:09:17:75:05:23:b9:46:7c:8b:
74:82:13:ae:df:27:b0:8e:34:e9:75:02:42:22:b5:0b:ab:fc:
ee:ad:68:2d:03:a3:78:e8:64:9c:77:24:0e:6c:03:9d:28:cc:
02:ce:d9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:18:26 2026 by rpki-client