Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier: a90T3zuAiPh+JdJIAz+DXJwLlaN7JfL13mUS1V7kDBw=
Subject key identifier: B4:51:E4:8F:4E:EB:75:14:41:E3:11:7D:26:96:DB:36:E8:13:FE:46
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 019D2816E7BDAFB5BDDFF6A3F8098CC8938E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number: 0E83
Signing time: Thu 26 Mar 2026 03:01:22 +0000
Manifest this update: Thu 26 Mar 2026 03:01:22 +0000
Manifest next update: Fri 27 Mar 2026 03:01:22 +0000
Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: b/twNeNypWEzMelgxXtllgjj/LxFVKTYsFzDlCqfmzE=)
2: e265eCVZ_zfTOldsmbK9OxkmQeY.roa (hash: YosQ/clAH+U408bmGplqWhphkTjsVjwp5LPxq1REEA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e7:bd:af:b5:bd:df:f6:a3:f8:09:8c:c8:93:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Mar 26 03:01:22 2026 GMT
Not After : Mar 27 03:01:22 2026 GMT
Subject: CN=b451e48f4eeb751441e3117d2696db36e813fe46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:a9:84:b8:6c:97:48:a9:b6:6d:4f:50:0b:
fc:b1:e7:92:32:99:c3:ee:34:23:a2:48:e6:f5:61:
a9:e0:70:38:2f:32:87:fb:5f:a3:f2:3e:b0:97:d7:
55:39:54:40:d8:ce:44:b7:7a:cf:27:e5:d2:5c:69:
e6:14:45:f9:66:a5:ef:02:66:55:29:6b:32:5f:30:
85:3e:7b:9c:9e:ac:65:a6:bb:6e:9b:ae:17:14:b5:
33:d4:20:73:a4:a4:b2:d3:75:dd:f8:34:e2:8d:b8:
e1:95:f5:08:86:74:0f:60:99:88:6a:c8:50:23:40:
47:a0:b4:36:a2:ce:61:02:f2:93:c4:f9:58:d5:32:
34:8d:aa:63:8f:47:bc:e1:b3:9e:dc:90:bc:c3:0b:
16:b5:74:50:13:79:62:22:06:a9:f1:ef:24:b9:37:
ca:44:37:29:57:99:4a:68:88:bb:e1:34:d8:6c:09:
03:f3:2e:ae:67:04:6d:b9:5a:8a:12:36:07:ca:60:
38:5d:d2:42:50:71:06:92:f9:9b:58:c1:f7:ea:78:
9d:d5:9f:e5:e2:f2:a9:69:75:14:bb:1e:a1:37:b7:
73:8e:3d:51:df:48:e7:20:da:7e:d0:4a:26:34:0a:
ca:90:9f:ce:be:71:fa:6e:f4:b1:24:69:69:9f:79:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:51:E4:8F:4E:EB:75:14:41:E3:11:7D:26:96:DB:36:E8:13:FE:46
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:67:7c:0c:fa:ba:ad:b0:6f:67:5e:db:81:d4:b1:c2:c8:57:
51:dd:53:7b:b2:05:a6:88:30:ff:f9:c5:59:c1:f0:6f:09:04:
84:91:1d:cd:c4:b3:7b:a7:8a:fb:e0:95:31:5e:92:93:2b:0f:
d3:9c:e1:48:fd:f8:e4:39:5e:0d:14:cf:2d:fc:ac:b7:b5:7b:
15:9c:cf:50:76:ad:a7:7e:29:4d:1a:f4:06:69:09:7e:ae:29:
7a:11:32:97:89:06:09:e0:03:7e:7c:e9:dd:1e:c8:fc:53:af:
50:d9:e4:0f:69:71:74:50:a3:8c:65:db:59:da:1e:21:50:24:
58:a6:ee:b4:97:fe:9b:3a:da:48:6a:b2:f9:96:00:31:e5:a5:
aa:72:5c:79:4e:55:d5:f7:f0:d7:15:b2:69:b0:35:7f:c4:24:
63:df:96:7e:0c:f2:5f:5b:d4:ad:e0:15:03:e3:42:0b:d3:04:
03:37:25:73:fa:e8:2d:d3:d7:fb:9f:c5:13:db:a1:9e:86:01:
95:fd:9c:f4:c7:4b:36:01:78:15:cc:d7:b2:37:cd:d3:94:4f:
76:37:40:86:3b:fd:22:9b:8c:8d:79:72:a9:bc:47:27:8e:22:
59:66:92:60:89:3b:1b:a2:27:f8:75:eb:df:b6:c8:db:d4:86:
6f:44:62:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:56 2026 by rpki-client