Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: A5BacswdzUpOTFqiGIs95+NMOtNeBm2rsZfqhEH9e4Y=
Subject key identifier: 9B:6B:FA:9F:F7:5D:1B:C6:29:3D:04:2B:EB:E9:CF:59:0C:5A:B1:ED
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 019D262812C72811FAE15018B927B4AB29F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:00:53 +0000
Manifest this update: Wed 25 Mar 2026 18:00:53 +0000
Manifest next update: Thu 26 Mar 2026 18:00:53 +0000
Files and hashes: 1: J3trJnMvDZJ0BcVGu5fGaJyrupg.roa (hash: e8osDQcIENsCGM6JtSYddOPk22ajtK1guuuZINYdCT0=)
2: WiHVRTKANQPSLlslZgPEwLo61sU.roa (hash: NTrkcyBW/Rrku+dfbekK8M7MWrvABIKgt6ihPMKiaiM=)
3: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: lnXPQW2flh6DCAvnShmF7e9FIFSCIlS8lXFhioH4zJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:12:c7:28:11:fa:e1:50:18:b9:27:b4:ab:29:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Mar 25 18:00:53 2026 GMT
Not After : Mar 26 18:00:53 2026 GMT
Subject: CN=9b6bfa9ff75d1bc6293d042bebe9cf590c5ab1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:4c:da:c9:7d:6e:bc:d5:bf:d5:f9:90:e7:
7d:5e:fa:a6:2e:29:25:b9:0f:97:c5:15:4b:79:91:
bf:55:53:3b:72:77:94:c4:73:c7:44:61:f3:41:f2:
f9:d6:b7:45:eb:5c:9a:8f:b7:db:90:56:da:ac:51:
cb:92:af:63:91:0a:de:41:2b:92:55:0e:8a:23:ff:
c1:05:0a:6d:82:62:3c:17:b5:c7:06:7d:1d:e8:fe:
56:08:3f:dc:e6:9e:d8:05:98:12:b0:9a:c9:c2:5a:
29:c9:2a:b6:b9:1b:80:fc:40:1d:1d:9e:5b:19:6e:
cc:1a:95:11:e3:f9:3e:91:e6:bf:bb:dc:e1:73:f4:
10:16:99:da:23:d0:58:74:41:20:85:d3:d5:a5:e9:
7c:6f:30:ed:a3:f4:46:81:55:4d:e2:20:4e:c9:7f:
9b:14:6a:d3:64:c7:cb:8a:d8:dc:dc:c8:ce:c5:b4:
8a:8e:37:a5:e2:48:c7:92:ae:8b:01:e0:bb:5b:72:
86:b8:37:ea:30:64:d4:6b:33:15:10:5b:18:82:20:
37:c5:b3:ba:9d:6f:9e:98:cc:e7:00:23:d6:39:74:
ee:cf:22:ce:f1:6b:87:93:79:e6:28:46:fd:88:be:
21:14:6c:5f:00:45:cf:8f:ff:b0:3a:03:59:ac:b9:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6B:FA:9F:F7:5D:1B:C6:29:3D:04:2B:EB:E9:CF:59:0C:5A:B1:ED
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6c:ac:55:55:8e:5c:ac:11:47:bd:ca:5a:2e:ce:61:8a:4c:
69:46:0a:ac:95:8e:8b:14:e3:4c:d5:ae:ea:9b:4b:f4:75:eb:
32:ad:5d:4d:b7:4b:b4:56:3b:22:65:f8:a6:71:f7:48:1b:2c:
47:23:be:f1:fb:bc:e1:ad:59:54:8d:4a:82:ac:31:07:f0:44:
15:af:68:35:83:70:ea:c7:84:9a:12:ea:8d:54:43:d7:8e:a2:
aa:4f:90:97:e0:83:b2:0b:d3:e6:af:f3:87:d9:49:87:23:ec:
43:69:3e:c7:84:41:b6:48:50:df:a6:0a:74:cb:51:6b:c0:54:
44:91:93:79:e9:8b:ff:e7:17:4d:53:da:fe:c8:ea:cc:2b:80:
3c:4e:25:e8:2f:45:8d:e4:f1:8b:65:0e:b6:53:cc:ee:83:5c:
3a:30:a7:54:b0:aa:03:69:88:7a:35:d5:a7:a8:b2:01:ab:e7:
66:12:25:f3:82:19:ef:a9:24:85:ae:a3:3b:71:79:26:7a:da:
ec:63:45:0d:a1:ff:d5:35:79:20:b3:55:1b:b8:af:c0:a3:4d:
f2:de:b9:ae:41:f7:a8:a7:da:b9:29:02:9a:89:d2:0e:ac:a5:
92:c1:8f:16:e5:ad:cd:fa:38:fd:37:8e:6e:c9:dd:d2:18:7c:
4a:66:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:12 2026 by rpki-client