Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File: YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier: BZzPtvK+ZSBsMTix4J6xAULZJrQp4sz3Vbx6b2V/Nbg=
Subject key identifier: 12:BD:2D:87:5D:FE:9F:F7:DC:BE:79:58:56:96:1E:20:94:37:A4:F1
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 019E20243F6DB9F320E808124B08E5BE7509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number: 17B9
Signing time: Wed 13 May 2026 07:01:46 +0000
Manifest this update: Wed 13 May 2026 07:01:46 +0000
Manifest next update: Thu 14 May 2026 07:01:46 +0000
Files and hashes: 1: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: fs11Ec5fr04k53bIBPqKYEmONE/FRx/3wafs9f7OCAE=)
2: ZGMDMaaeutNnkXyJL58734MtHlg.roa (hash: Zs6W0mlBy5j5neBEaMNbSPEex6wUKIOiG0C8/ZE4ktw=)
3: b5JaXMr4GIBvT4KCIP7BI-wUSZI.roa (hash: vRg65JmrVs2QhtYFXLwraN6iw4o7UcfzdNjLDeVLhok=)
4: jKshf8wnc15011tXTFSj3TTXJFA.roa (hash: K6mzJUE9dYVEi81Gnv2fYao7OX/tyLrwWkjFdI+z8Z0=)
5: qPyrPHOcj4AsJ76uDNoQbJBu-3A.roa (hash: icQiWI2POs5a9KmLU/wFkbzLvsrXEhv8Owk5IzrA7+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:3f:6d:b9:f3:20:e8:08:12:4b:08:e5:be:75:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: May 13 07:01:46 2026 GMT
Not After : May 14 07:01:46 2026 GMT
Subject: CN=12bd2d875dfe9ff7dcbe795856961e209437a4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:08:4a:1e:8c:3b:5d:e2:2f:53:ab:f4:6a:
12:66:b7:18:c2:84:b6:05:d9:db:17:1b:15:87:3b:
f5:c5:e9:39:df:ca:4c:d2:63:92:c5:dc:88:36:0c:
6f:39:a7:5e:a7:09:dc:33:7e:5b:94:cd:0d:51:58:
f8:df:04:fe:d6:f3:b0:3b:e5:95:7d:f3:16:cc:17:
17:67:3d:c3:f5:93:1f:bd:41:c0:77:0b:a8:74:03:
e6:d9:e6:09:e7:22:23:d1:9e:18:bd:42:2e:e4:cd:
b7:ad:89:54:d1:42:20:83:88:2a:42:25:3a:12:2b:
86:a4:e4:7d:09:d6:8f:1e:df:7e:b7:15:a1:20:97:
27:36:38:99:06:86:c8:ed:8f:89:d7:f8:9b:85:5a:
a7:f8:d7:0d:0e:9b:79:cb:c6:a9:f4:ea:e4:f1:58:
05:24:ca:6f:89:7a:ae:3e:24:6d:5e:97:5b:96:99:
6a:3d:cd:52:32:e3:b1:9d:b8:03:df:88:42:ff:ce:
ce:a9:1b:a1:82:29:43:99:95:93:e5:1e:20:fb:70:
1e:13:c1:7a:a3:3d:f4:d1:4c:00:7c:73:b8:54:29:
ef:ef:19:de:1b:b6:06:7d:9d:4c:de:1d:35:e1:86:
8a:82:c2:75:1c:60:de:f8:c3:d8:27:51:0b:11:48:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BD:2D:87:5D:FE:9F:F7:DC:BE:79:58:56:96:1E:20:94:37:A4:F1
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dd:20:23:fe:3c:82:f3:ba:55:df:fa:09:c7:c6:55:4a:03:
ca:05:e3:c2:00:b9:11:6f:be:87:cd:94:8d:d4:ca:8f:08:10:
55:22:69:15:ea:88:3f:87:02:fb:80:f3:be:8e:f1:92:98:4c:
2a:9e:a8:f9:ff:b5:88:32:c3:02:8c:71:2e:52:80:f1:11:48:
d1:57:da:5b:b9:cc:d2:e4:95:5f:06:01:7e:87:ef:6e:c0:46:
b9:62:0e:a4:f2:72:60:0c:a2:67:ef:3e:1e:89:14:72:e2:d6:
b6:48:b3:83:90:65:4b:c4:b4:1b:80:11:bf:0c:c3:08:08:11:
21:47:31:fc:c3:78:91:97:f2:d2:ab:ee:83:1c:61:5b:53:d2:
67:81:fb:89:0a:c2:e8:4c:7d:2a:2d:79:0a:80:b8:69:10:b6:
51:10:3c:1b:8d:7a:62:89:9b:3f:1f:bd:a9:44:54:ea:1f:94:
16:0d:2f:5b:a1:78:ce:70:fb:b6:04:5c:74:4b:37:d3:63:b2:
42:a1:ba:24:41:d4:f7:2d:29:7d:ad:f6:b6:24:f9:40:3e:63:
61:2a:e1:7a:7d:53:7d:6b:4c:d1:4b:ed:3c:a6:94:48:bb:15:
e8:ff:bc:97:10:0d:75:bd:cf:c3:67:db:9d:68:d6:37:29:3d:
01:3a:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:27:14 2026 by rpki-client