Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: Htztt9tGjVSldtHh19NcP+N+MfFZxwOaX5OrU2mCZxQ=
Subject key identifier: 8F:1F:D6:7C:71:20:58:85:44:C6:50:5E:85:97:B1:BA:43:50:E6:F6
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 019D273B3E6B88ED23720FC56746D53039DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 16CE
Signing time: Wed 25 Mar 2026 23:01:27 +0000
Manifest this update: Wed 25 Mar 2026 23:01:27 +0000
Manifest next update: Thu 26 Mar 2026 23:01:27 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: zmTR3kFxyCngLOSzclzL35kp0CCaEi7ZziYQ2VjJ8EQ=)
2: tCO87qgLeHdiJcQ1IV_bd46Jvho.roa (hash: 2SSHDUuNwyIUrIbmZYF0QjOFxPKwxanOkPswUq79oUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3e:6b:88:ed:23:72:0f:c5:67:46:d5:30:39:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Mar 25 23:01:27 2026 GMT
Not After : Mar 26 23:01:27 2026 GMT
Subject: CN=8f1fd67c7120588544c6505e8597b1ba4350e6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:1e:8c:3b:e5:6b:c1:51:b0:90:16:b4:77:
07:35:74:7c:09:92:1d:63:8e:b2:c0:a2:dd:53:3f:
ba:70:11:80:a9:23:78:02:b7:2b:8f:6e:25:ea:25:
3e:24:cf:22:c5:87:9b:7f:13:aa:f5:8d:c9:fe:a8:
cf:22:ce:0e:8a:d3:fb:0e:cd:cd:c2:76:4c:68:bd:
d7:17:48:91:57:90:fb:81:d8:51:d3:00:e0:a5:63:
cf:18:6b:bf:cc:2b:82:bf:82:f6:44:ad:a7:e1:51:
b0:d3:e5:f5:c7:72:89:e4:e0:00:51:d4:94:75:0f:
1d:ad:c0:a4:09:fd:43:19:ee:b8:c5:bf:39:e8:98:
a2:28:b6:44:7c:1c:85:c6:12:d5:ec:5d:49:f6:d0:
14:1c:11:0d:87:56:54:6a:49:a0:bf:9c:b2:09:92:
57:a7:a7:76:07:8f:b8:85:cf:25:89:c1:86:05:64:
a1:50:39:78:54:dc:25:f7:fa:8e:7a:f0:b0:e4:a4:
d3:d0:51:c6:8f:69:86:f6:34:dc:93:5f:5c:8a:23:
e4:50:95:39:62:69:e6:7e:0f:75:51:ea:89:82:dd:
97:08:4c:77:51:09:1e:40:44:b6:bd:56:96:e6:e0:
ff:1f:46:fa:2d:3f:7d:47:91:8a:0e:f9:8a:79:68:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1F:D6:7C:71:20:58:85:44:C6:50:5E:85:97:B1:BA:43:50:E6:F6
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:b5:d4:17:bd:35:c3:05:22:7d:bf:25:8a:f2:82:ca:41:b6:
4c:25:a7:9d:c2:8d:3a:0b:ce:e5:12:51:1f:33:36:b5:70:7b:
ad:f4:4f:f6:0f:bf:cd:d3:4d:0c:1b:13:1c:6e:53:52:9b:f1:
2f:0d:91:04:35:40:36:e6:58:0f:b9:28:b6:9c:88:b6:c1:9d:
46:9d:36:53:32:43:1e:2d:ec:69:15:55:08:7f:2a:a1:16:5d:
89:9b:db:09:56:16:5f:f0:95:fb:f3:1d:e6:a1:47:3c:7e:ca:
69:bc:33:9d:c4:a4:b0:9c:66:da:9e:dc:4b:11:cb:61:7e:9d:
fb:44:31:82:51:da:83:a3:81:21:ae:aa:e9:36:ab:be:f0:74:
5f:a1:f1:81:dd:a2:5c:09:41:48:20:72:18:05:cb:18:6b:56:
40:ea:ad:05:d1:5d:7d:bf:14:c4:6a:a8:10:c1:e3:17:f2:b0:
e9:5e:7b:9f:09:a5:4a:9b:8e:b6:d9:33:08:19:a2:54:75:b1:
37:0f:4e:8b:0b:70:8d:67:fb:37:bb:f1:f8:73:2c:c1:0a:c3:
66:d0:97:1f:43:94:a5:c8:66:22:77:18:c5:8b:57:48:97:e8:
20:d6:bf:44:d3:d1:13:e0:a2:44:51:cc:68:21:1a:a8:93:29:
7f:4c:4c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:51 2026 by rpki-client