Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier: dRFPAURnKizxIyAynQzA6ey+5lGtKivWh7Uytg3NkLg=
Subject key identifier: 06:B3:13:A2:4E:A7:F3:F9:9A:F1:1E:41:B1:8E:E9:A6:7A:B4:C6:95
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 019D37898447507466B2742AC11D6C5FC0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number: 06B7
Signing time: Sun 29 Mar 2026 03:00:52 +0000
Manifest this update: Sun 29 Mar 2026 03:00:52 +0000
Manifest next update: Mon 30 Mar 2026 03:00:52 +0000
Files and hashes: 1: Rmbqki6sfeVONmSCUKVbSwnLV2w.roa (hash: m02OGs1ERDq2Tep5VBBDirUwK9M85zv/SGcl5/T9Gng=)
2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: pMR2OogOwY5Igi+9wba5DecLoqHVnufm0DigLJFI01g=)
3: YrjDjaI3_Q6KPQ90f8RoYBEvTqI.roa (hash: VmD17BnA3G7W1dMkZraFPy0h1sdRJ/jQerJj3HVgUI8=)
4: mEMBpqCiAZX-66IM2v28OLBYmaU.roa (hash: D0q/tQQJTMQWefAkqZBJ1Tlw8AdCPKqxL86ZtoZ1fgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:84:47:50:74:66:b2:74:2a:c1:1d:6c:5f:c0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Mar 29 03:00:52 2026 GMT
Not After : Mar 30 03:00:52 2026 GMT
Subject: CN=06b313a24ea7f3f99af11e41b18ee9a67ab4c695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:90:5d:02:b4:55:29:02:09:54:25:3c:be:
8f:22:04:13:d2:c0:f5:7b:c8:d6:bb:cb:44:d8:88:
68:fc:c2:d0:a6:2c:3a:c0:dc:b7:1f:9f:11:73:11:
af:9d:ca:05:8e:53:ee:81:69:27:91:f4:ad:17:bf:
3e:73:1c:fd:62:f6:c2:02:ba:8d:9f:06:7c:5a:04:
f2:e0:93:42:3f:24:3b:18:5d:11:a2:26:cc:49:f2:
69:aa:7b:f3:25:6e:37:8e:ea:cd:54:af:a7:5f:b1:
a1:62:6e:a5:88:8e:0c:25:e6:33:8f:1c:51:4c:d4:
17:20:5a:dc:07:e8:a2:f4:0f:62:76:a1:91:c0:a2:
43:2b:60:4b:0f:a4:0a:69:fd:53:30:b4:ae:3f:79:
6a:0d:18:7e:68:af:de:1f:4c:17:3d:05:9f:10:b3:
d8:19:f9:95:91:65:83:73:da:f9:bd:49:58:c2:91:
48:8d:71:59:0e:aa:ae:aa:d5:bc:f6:a7:61:a3:e4:
96:c4:5f:d3:28:23:3f:e7:26:b7:69:c7:f1:1e:e8:
fd:5c:8b:09:be:27:f4:c2:af:33:f3:09:c7:ce:aa:
96:3c:45:88:b4:28:b2:91:c4:f5:0d:6d:ae:a2:e0:
a9:aa:76:f2:59:7e:26:cd:df:09:60:f3:ea:3c:ed:
8e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B3:13:A2:4E:A7:F3:F9:9A:F1:1E:41:B1:8E:E9:A6:7A:B4:C6:95
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4f:e7:f1:40:20:c6:24:d5:50:b7:69:a9:8c:61:eb:51:bd:
fe:8d:c8:99:3b:8c:9c:c9:ad:88:23:08:98:fe:92:fd:dd:6d:
92:f7:37:57:45:d0:6e:00:24:89:12:92:f0:48:1f:81:5f:cd:
0a:00:90:c2:0b:5e:b1:e5:b3:35:0a:65:40:8e:ce:19:0b:80:
d4:af:4e:02:5c:48:99:74:b7:04:3f:39:a7:7a:2c:66:43:45:
b8:6e:19:d8:b0:b1:75:e5:87:14:06:86:e3:6a:8d:a9:53:73:
a3:94:0d:32:dc:fe:40:95:93:6c:ef:4d:28:d3:ed:23:49:4b:
7e:8b:bb:9b:ac:f7:41:51:1b:13:30:01:02:fa:99:c9:64:b7:
bb:61:55:e4:8d:16:df:4b:ae:1d:a9:e7:e4:90:da:94:0c:4b:
34:a5:d4:55:b2:6a:fb:7c:49:ca:80:c8:e5:f2:3f:8a:0a:90:
ee:a2:10:99:f6:cf:9e:e7:7f:f0:6d:b9:bc:f7:4a:71:69:6b:
4f:f8:37:83:a0:f3:52:4d:67:bb:6a:dc:a5:5d:3b:15:8e:aa:
6d:83:fb:c4:30:3f:28:fe:40:2d:8c:fc:a5:a8:d8:a9:03:5e:
99:4d:0d:04:7e:cb:2f:06:b6:5f:cb:cf:2d:3e:c3:23:e9:e1:
af:48:26:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iYRHUHRmsnQqwR1sX8D8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMWExMzBhOTBjYjAzN2UzODAzZmVhMGJmNDY1YWEwODJm
ZTM0OTgwHhcNMjYwMzI5MDMwMDUyWhcNMjYwMzMwMDMwMDUyWjAzMTEwLwYDVQQD
EygwNmIzMTNhMjRlYTdmM2Y5OWFmMTFlNDFiMThlZTlhNjdhYjRjNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ruQXQK0VSkCCVQlPL6PIgQT0sD1
e8jWu8tE2Iho/MLQpiw6wNy3H58RcxGvncoFjlPugWknkfStF78+cxz9YvbCArqN
nwZ8WgTy4JNCPyQ7GF0RoibMSfJpqnvzJW43jurNVK+nX7GhYm6liI4MJeYzjxxR
TNQXIFrcB+ii9A9idqGRwKJDK2BLD6QKaf1TMLSuP3lqDRh+aK/eH0wXPQWfELPY
GfmVkWWDc9r5vUlYwpFIjXFZDqquqtW89qdho+SWxF/TKCM/5ya3acfxHuj9XIsJ
vif0wq8z8wnHzqqWPEWItCiykcT1DW2uouCpqnbyWX4mzd8JYPPqPO2OTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAazE6JOp/P5mvEeQbGO6aZ6tMaVMB8GA1UdIwQY
MBaAFGIaEwqQywN+OAP+oL9GWqCC/jSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhvVENwRExBMzQ0QV82Z3YwWmFvSUwtTkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yMTQ5MmYtMTY2My00MDlkLWJmYjIt
NmEwNDUxYzQ5ZDRkLzEvWWhvVENwRExBMzQ0QV82Z3YwWmFvSUwtTkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yMTQ5MmYtMTY2My00MDlkLWJmYjItNmEwNDUxYzQ5ZDRk
LzEvWWhvVENwRExBMzQ0QV82Z3YwWmFvSUwtTkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtk/n8UAg
xiTVULdpqYxh61G9/o3ImTuMnMmtiCMImP6S/d1tkvc3V0XQbgAkiRKS8EgfgV/N
CgCQwgteseWzNQplQI7OGQuA1K9OAlxImXS3BD85p3osZkNFuG4Z2LCxdeWHFAaG
42qNqVNzo5QNMtz+QJWTbO9NKNPtI0lLfou7m6z3QVEbEzABAvqZyWS3u2FV5I0W
30uuHann5JDalAxLNKXUVbJq+3xJyoDI5fI/igqQ7qIQmfbPnud/8G25vPdKcWlr
T/g3g6DzUk1nu2rcpV07FY6qbYP7xDA/KP5ALYz8pajYqQNemU0NBH7LLwa2X8vP
LT7DI+nhr0gmTQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:11 2026 by rpki-client