Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier: GlzAj5l/6ZX92tvWRn8/mY6MSmcaxIfvCDAia34lipc=
Subject key identifier: B2:41:EF:C3:54:AE:91:3B:F4:EC:90:82:2E:E3:79:0B:90:D5:5C:26
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial: 019D389C33740013F371657C03FB7AA72A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number: 0637
Signing time: Sun 29 Mar 2026 08:00:54 +0000
Manifest this update: Sun 29 Mar 2026 08:00:54 +0000
Manifest next update: Mon 30 Mar 2026 08:00:54 +0000
Files and hashes: 1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: 2ZRdj3QCurXSUxgDhnN1eCPSelMcXevJYtMCcW6QoVA=)
2: ZoWDl6ndQ9Hfznn3PsQgxbbAxbw.roa (hash: kikQlykcn+WarGEP2RIaDoLYfnMDSfgY1GHVB0fe+tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:33:74:00:13:f3:71:65:7c:03:fb:7a:a7:2a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Validity
Not Before: Mar 29 08:00:54 2026 GMT
Not After : Mar 30 08:00:54 2026 GMT
Subject: CN=b241efc354ae913bf4ec90822ee3790b90d55c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:c1:c6:e8:55:79:96:16:12:32:6d:4e:51:
71:f6:9d:e2:b9:6c:f9:8e:89:bb:0d:17:1b:bf:54:
d6:b2:94:2b:95:f7:8f:e7:f9:e1:ca:51:16:6c:6d:
4b:50:e3:ef:6c:c0:3b:73:a1:cb:06:7f:fc:34:2c:
2c:2b:54:1d:b5:f2:e0:a1:7f:c4:cc:b9:ad:b5:21:
b8:1f:45:88:03:85:d4:7e:4b:6e:c4:9b:b8:58:25:
d1:ee:a2:0f:d2:1f:a7:29:1a:89:8a:ef:5d:3d:b8:
da:85:07:70:b5:63:be:ac:22:59:2a:3f:1f:3e:b1:
d9:ab:c4:db:7b:bc:cf:dc:a7:c2:bb:06:f9:dc:00:
06:12:ba:10:b1:93:a5:0b:c7:bc:b0:0f:f3:a6:8d:
8e:28:ef:b7:a3:2c:0d:ee:59:5a:44:ec:5a:34:5f:
f0:e0:f0:08:2d:d7:4f:a1:5b:32:bc:35:7b:e8:76:
7f:90:c6:cf:6a:de:6e:69:ac:96:83:37:58:4d:dd:
65:6b:e4:7e:9f:82:8c:ec:a3:ac:b4:27:88:38:9b:
47:19:21:93:74:09:d1:bb:fb:7f:a3:ca:71:46:24:
57:ed:d9:0d:ca:50:35:a9:6b:df:c5:a1:69:8a:c9:
9a:19:0c:3d:18:c2:84:4d:aa:c8:94:c5:d4:6c:7e:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:41:EF:C3:54:AE:91:3B:F4:EC:90:82:2E:E3:79:0B:90:D5:5C:26
X509v3 Authority Key Identifier:
keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c6:26:03:50:6d:f5:14:2d:c7:ab:ff:75:fa:74:13:18:3b:
a6:f6:ef:11:85:68:93:48:a5:37:16:ff:4b:83:12:d4:fe:35:
28:30:cf:e7:e0:38:af:07:3a:80:e9:3e:1a:a7:29:85:4e:11:
03:bf:31:3c:83:7a:40:37:b1:29:2c:b5:ca:83:5c:f9:46:70:
60:65:96:fa:ba:46:3f:96:ba:4c:6b:72:8c:2a:43:29:28:1c:
8b:5b:09:ee:bb:8b:55:99:71:1e:38:21:4f:46:b8:2d:1b:63:
48:9a:c4:81:35:bd:88:1d:be:f8:91:0d:f3:b4:bf:79:8d:e7:
22:f3:52:eb:7c:22:aa:be:61:e7:20:7c:97:2e:c5:7f:1b:44:
75:63:31:8d:d2:14:8a:09:b9:76:40:d8:a0:97:ab:b0:d4:33:
a8:b0:49:f8:da:0b:21:d8:c1:b0:4d:0a:30:f3:37:07:ea:ce:
29:07:f4:ce:ba:14:58:b7:ad:b4:1b:3b:b3:f3:5b:b0:d6:50:
47:62:0f:5c:5a:3c:28:74:97:db:e6:af:a0:8d:d0:f9:1b:e3:
35:cb:91:f8:30:6b:dc:06:0c:45:bd:38:b5:65:1d:0e:2e:17:
3d:b3:7b:5e:d3:48:e1:bc:da:91:6e:26:90:50:fc:ca:0a:f5:
10:97:dd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:06 2026 by rpki-client