Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File: YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier: T08XVelSsp3e+TYxkUZwsvqb0bPKNDCh9gZpfacCruo=
Subject key identifier: F2:76:0A:7F:17:74:87:06:D6:E7:0F:3D:C1:70:06:91:A3:A1:58:32
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial: 019D2960832665B8DDD1D1990707A66FCA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 09:01:24 +0000
Manifest this update: Thu 26 Mar 2026 09:01:24 +0000
Manifest next update: Fri 27 Mar 2026 09:01:24 +0000
Files and hashes: 1: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: 3JNgpr17ZbqeJAZ7rnG76QKgWScpWfVZ+I4D0L1lvKQ=)
2: gI7wdVdEujvd9VLF4Y0d2YxxXVQ.roa (hash: /3JebFmLKobYKFETqDIlb43OxSa7E2ofJHi6zZ1wGnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:83:26:65:b8:dd:d1:d1:99:07:07:a6:6f:ca:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Validity
Not Before: Mar 26 09:01:24 2026 GMT
Not After : Mar 27 09:01:24 2026 GMT
Subject: CN=f2760a7f17748706d6e70f3dc1700691a3a15832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:93:d0:e8:a5:7a:f9:79:44:b0:59:86:5e:
3b:68:37:fd:87:97:75:52:02:21:32:4b:bb:e7:2c:
53:00:1c:b6:51:88:4d:ed:24:55:68:7a:af:b6:39:
4d:f5:52:d2:d3:d5:80:56:40:cc:3c:cc:9b:e6:7f:
d2:5e:0a:06:ef:8d:97:b7:39:13:29:48:96:82:71:
a4:f0:f3:63:6a:b5:ff:43:45:55:75:f5:54:19:29:
ba:37:f6:70:c1:9e:14:e9:7a:e4:83:9e:b0:70:1d:
93:8d:03:7a:f3:c3:f7:68:92:82:de:34:0b:5f:ae:
ee:18:3b:a7:cd:fd:24:06:25:6b:8a:42:2a:a5:e5:
00:1a:02:6e:5d:6b:13:ad:5c:9b:b0:65:42:48:ff:
e8:4d:08:3a:6a:31:d8:db:55:20:ab:2c:9e:f7:41:
f7:11:06:c0:41:56:69:f1:6d:a6:4a:e4:d7:92:c3:
4e:cc:d1:20:9f:34:4f:de:47:37:dd:ae:4e:83:9b:
ff:58:74:97:a2:df:a2:d8:bc:b1:ee:aa:13:f3:3b:
97:d5:cb:d1:85:cd:68:c1:1a:94:8d:52:57:7b:eb:
f8:f3:77:80:57:24:d4:7f:5d:b3:97:47:1f:09:77:
3b:b0:e2:09:5f:3e:82:92:ee:7d:ee:df:00:19:22:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:76:0A:7F:17:74:87:06:D6:E7:0F:3D:C1:70:06:91:A3:A1:58:32
X509v3 Authority Key Identifier:
keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c8:b9:bc:f9:71:7b:5d:39:96:ee:2b:e7:64:06:ad:93:7c:
42:d6:16:2c:07:72:dc:e3:b1:cf:fb:3d:0a:7d:8e:d3:f5:67:
e3:a4:8a:a6:df:6d:80:25:ac:8d:fb:db:21:b0:45:6d:c0:db:
6d:cf:e5:0b:2f:cb:22:63:28:2b:3f:1b:b5:b0:c7:46:af:b2:
e6:ca:91:4d:cf:8b:02:df:90:1b:89:3f:a8:43:77:1c:56:08:
3f:51:7b:b1:34:29:21:22:66:f0:a6:33:9b:bc:48:6a:28:c4:
bc:c6:3a:7f:40:55:0f:4c:41:db:66:45:e4:0a:9d:1e:d6:8c:
eb:84:05:04:87:fc:f4:9a:87:36:c6:af:e3:63:e2:11:3e:38:
2e:50:d5:e0:f1:58:b4:b8:b2:bc:aa:d4:9b:63:74:74:ab:23:
dc:8a:3f:e9:e9:ce:fc:fc:5e:4a:28:b9:cb:d8:51:88:ee:f3:
a1:38:9a:48:1a:17:64:2a:6e:d3:6c:ab:2b:73:45:06:f6:93:
0b:f5:39:e1:68:37:eb:9d:13:22:6a:bf:6c:f5:4e:8a:e1:57:
ef:4e:56:a6:88:be:f5:f1:c5:b8:24:97:c6:af:c2:bd:b3:66:
3d:dc:17:cb:37:11:44:23:dc:22:a4:70:cc:56:b2:53:cf:86:
63:e6:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:15 2026 by rpki-client