Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
File: YAG5U8a-H5GDHWilwBFcIODNf5o.mft (raw, json)
Hash identifier: qVijB0IjJ+DviNJpibzzOqDZk4qOsVhzJRQnjLbVBI0=
Subject key identifier: F9:7E:69:65:DA:72:54:E0:47:F5:02:22:2B:AB:E4:B2:E7:1D:E2:36
Authority key identifier: 60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
Certificate issuer: /CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Certificate serial: 019D2AE0AD0BF82C63E867A520C91BCA0A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
Manifest number: 086C
Signing time: Thu 26 Mar 2026 16:01:00 +0000
Manifest this update: Thu 26 Mar 2026 16:01:00 +0000
Manifest next update: Fri 27 Mar 2026 16:01:00 +0000
Files and hashes: 1: YAG5U8a-H5GDHWilwBFcIODNf5o.crl (hash: E/lNjzhKNOnB0et5C4duM8tGeOSJqBTQF9eK5O4HPqQ=)
2: sWQ5MFr-3Y0UZG4yuW0yjqbQ7Eg.roa (hash: I4OaI58SiKbwgQhwOAwtZE0NHDRmM5MSDXp++yDS4Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:ad:0b:f8:2c:63:e8:67:a5:20:c9:1b:ca:0a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Validity
Not Before: Mar 26 16:01:00 2026 GMT
Not After : Mar 27 16:01:00 2026 GMT
Subject: CN=f97e6965da7254e047f502222babe4b2e71de236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:b5:17:90:92:ad:31:ff:1f:0f:ce:34:f3:
75:4c:a5:c5:2c:47:1a:66:06:19:54:2a:3e:fc:d7:
5d:4a:72:10:c9:ee:68:80:a7:36:d6:f4:c3:e4:60:
a9:34:8a:8a:5b:ac:85:72:a7:75:a9:72:ae:ff:83:
3d:69:06:d1:99:c2:bb:4f:1b:8d:8d:0a:a9:5c:08:
6f:ef:b6:99:a2:47:f8:51:9d:69:e0:55:6e:c3:54:
73:69:33:1b:9c:d4:20:05:51:0e:9f:45:28:42:1e:
fb:6c:1b:1c:82:fe:07:d3:b4:71:32:bd:9e:5f:d4:
ae:a1:1f:aa:89:46:7a:ff:16:46:f4:52:f7:01:ac:
14:c4:da:4f:a6:82:5d:70:e8:b5:1a:dd:68:67:35:
9d:42:cd:be:31:7d:a0:ae:c8:e8:32:a4:f4:d8:dc:
3d:e9:e4:98:b3:be:a1:d9:3b:30:dd:fa:08:74:d9:
55:a4:39:b8:73:f0:c9:4a:94:db:55:57:8e:3c:d5:
0f:68:c1:c2:87:51:4d:47:5a:af:d1:cd:bb:9e:9a:
e1:9a:70:da:9f:88:3a:2c:d3:d0:e2:bb:a7:bf:67:
df:e3:f4:9c:23:3b:0c:1f:34:6a:33:2b:07:45:34:
16:85:28:cb:f0:54:d8:9e:53:44:b9:e3:ef:85:5c:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7E:69:65:DA:72:54:E0:47:F5:02:22:2B:AB:E4:B2:E7:1D:E2:36
X509v3 Authority Key Identifier:
keyid:60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:24:9c:9a:b8:68:75:c2:b0:c2:61:c1:cc:8d:2d:be:89:03:
3a:46:ef:34:dd:d4:ef:77:59:db:30:e1:6b:8f:fc:86:7d:e7:
86:f1:0b:d8:29:13:5d:90:c6:b2:b0:18:ef:16:46:10:0e:d2:
d3:86:2e:e1:1f:dc:de:f2:f0:2e:9f:6e:e5:ff:10:2c:db:a7:
14:f2:bb:e4:8e:e2:f8:c6:0d:f1:0d:3a:c6:3c:22:3e:6b:e5:
ee:0c:ca:95:f4:a8:d0:4a:20:9a:88:e6:0e:9c:d9:cd:0b:09:
70:f4:75:4d:d7:4e:7e:70:cc:97:04:02:f2:4d:c7:86:64:94:
85:4d:ff:29:21:d6:d3:7a:cd:7a:df:c7:a6:4b:17:91:f6:b5:
ee:23:98:b4:ba:9d:07:c4:d5:e6:f4:d6:8d:1e:fa:cb:fe:a5:
91:75:9d:8e:42:39:d6:63:cb:4c:9f:0e:11:98:07:00:de:51:
55:ff:61:3f:ed:54:b2:4e:bb:3e:99:f3:22:09:a4:03:fa:4b:
f6:17:e8:af:94:f6:52:76:ea:e8:4c:7c:bc:ff:f5:6d:e6:14:
c8:66:da:93:8b:47:f9:4f:d6:fb:72:4a:b7:a0:dd:95:1c:db:
ba:ab:7d:7f:ca:93:45:9f:28:e7:9a:70:b7:10:f2:14:82:cf:
a5:07:68:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:23 2026 by rpki-client