Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: lx6sGXi3XnQ4ZYsdklaV7AfRRaVxF5ATBvHREX9CjCY=
Subject key identifier: 66:AB:14:5A:A1:32:6A:49:8B:ED:26:5A:FE:C8:DA:6F:3C:15:7D:CE
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 019D3375F88DDB6B804423464C278C2C296C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 188A
Signing time: Sat 28 Mar 2026 08:01:02 +0000
Manifest this update: Sat 28 Mar 2026 08:01:02 +0000
Manifest next update: Sun 29 Mar 2026 08:01:02 +0000
Files and hashes: 1: 5UKl7JzlrMZFxZccNwb_HEFI_xs.roa (hash: XFtwBlqsUtFdMadWz8en37s8O8O+/h2aqDNRnI5q7sE=)
2: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: wKrjHPliy9cZyhz9Nnu0V7byphXNBsKZLA8JYSC56NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:f8:8d:db:6b:80:44:23:46:4c:27:8c:2c:29:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Mar 28 08:01:02 2026 GMT
Not After : Mar 29 08:01:02 2026 GMT
Subject: CN=66ab145aa1326a498bed265afec8da6f3c157dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:85:c1:d4:5e:87:24:25:2b:1a:90:53:87:
08:84:5f:22:95:a9:65:8a:70:b4:0f:b8:34:a3:31:
2f:81:e2:18:35:c3:fd:c6:82:72:b5:6d:73:bf:0e:
d1:c6:1d:ba:f9:5e:5a:9c:12:86:87:a0:fe:69:fc:
3c:55:45:5f:4b:92:f7:10:78:21:0c:54:0b:25:ed:
a2:3a:6f:6f:6a:e6:24:52:9f:97:04:71:ce:82:be:
4f:85:32:13:93:e4:b1:48:91:6b:25:35:4a:a3:8e:
0d:b7:e4:9e:39:2e:1a:87:b1:31:a2:ec:fe:07:ac:
11:7e:e3:b4:d8:04:77:d6:ed:f8:cf:76:4b:e1:75:
9a:2d:a4:55:9a:47:3f:7a:2e:e1:73:fc:bf:64:d2:
5a:79:24:21:ae:30:8d:de:e8:49:23:d4:06:f3:ef:
84:6e:20:fe:db:10:f6:7e:cd:af:60:71:6d:72:d3:
1b:00:ba:39:56:ca:61:c8:96:15:89:89:fe:eb:f7:
27:00:75:d9:9d:88:a2:d6:fe:b7:36:bb:d2:3d:07:
dc:25:f5:4d:99:92:df:16:19:af:fa:f5:83:78:f5:
9f:b3:1d:2d:30:6d:a7:7c:4e:67:95:40:9c:c6:6c:
fa:cf:9f:a0:f2:2b:09:e1:e7:e9:94:31:79:09:00:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AB:14:5A:A1:32:6A:49:8B:ED:26:5A:FE:C8:DA:6F:3C:15:7D:CE
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:03:b5:3f:23:57:96:5e:73:26:f0:aa:1d:fd:ab:97:1e:e1:
5b:96:7a:b2:82:1f:7e:39:ce:0a:b2:48:b7:e0:84:12:67:17:
36:6a:f5:31:fe:28:62:ec:8d:80:b8:6a:79:ff:1c:8a:51:cb:
b4:2d:bb:eb:f3:dd:35:69:ba:74:18:f5:63:1f:3f:a4:7b:75:
53:96:55:c7:6d:0f:07:36:45:de:37:03:ba:fc:e6:d5:36:a1:
83:c2:3b:c3:54:3f:af:35:ca:73:a4:b1:16:74:ff:2b:0d:47:
cb:64:52:bf:f4:02:f4:0b:18:e7:0e:de:8c:70:d6:3c:3f:f4:
c7:cf:cd:0b:ed:0f:a2:68:80:c1:88:32:9d:6f:2d:0e:4d:ad:
cb:5c:17:b9:26:58:b7:ad:2c:81:31:87:35:18:b5:c5:95:bb:
0a:0c:5b:d5:e7:6e:72:bd:7f:20:e6:9d:b2:6b:73:5e:39:5c:
00:ea:c1:63:22:2a:9a:92:9f:b2:f6:0f:7b:3e:16:38:31:a4:
12:7b:15:b4:9d:85:26:69:4c:0c:9e:a3:4b:c4:02:e5:38:a2:
79:bf:ef:2c:50:53:c6:f1:11:7c:9a:1a:f3:dc:7c:92:90:55:
73:64:1c:aa:6f:8a:01:60:50:85:a1:a5:65:b7:c2:eb:8f:9d:
d4:ce:af:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:06 2026 by rpki-client