Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
File: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft (raw, json)
Hash identifier: qLqwrVPRc+4m2DZagRE86YJ7Ic35PXQhbE6hgEECsoE=
Subject key identifier: 43:46:0E:3D:89:07:D6:24:23:9E:9A:33:DC:1B:8F:D7:55:E0:BA:D6
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Certificate issuer: /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial: 019D2929A1E4F386A801FC4355542638963D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
Manifest number: 77
Signing time: Thu 26 Mar 2026 08:01:27 +0000
Manifest this update: Thu 26 Mar 2026 08:01:27 +0000
Manifest next update: Fri 27 Mar 2026 08:01:27 +0000
Files and hashes: 1: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl (hash: sCMIt4qBavy48xg7O95meOBs2wdYCUgGHRAnUkbxxgA=)
2: dfKf0SUwjmWHGeIDN6xaPuWneS0.roa (hash: KNktDMnqe7pkdReM74aezUUfDskVVEXdt3/JJZM1pKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a1:e4:f3:86:a8:01:fc:43:55:54:26:38:96:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Validity
Not Before: Mar 26 08:01:27 2026 GMT
Not After : Mar 27 08:01:27 2026 GMT
Subject: CN=43460e3d8907d624239e9a33dc1b8fd755e0bad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:15:07:16:12:9f:4b:14:2b:79:d8:4a:17:
01:40:e2:55:44:7e:4c:c5:83:03:c3:b0:ad:be:49:
e3:f4:23:81:c5:8e:a7:d7:06:27:4a:67:c1:3a:03:
99:52:03:48:ef:d1:46:d5:c8:95:20:c4:70:b9:25:
bb:60:60:2c:31:00:27:a3:71:91:1f:6a:d1:b5:1e:
e7:8b:44:d7:eb:34:be:d8:98:7e:21:80:cf:52:f8:
9a:0b:ae:22:99:06:45:61:b8:29:78:bd:f5:5e:0a:
37:46:ed:d5:79:3d:3a:ae:fe:e8:ea:19:29:dd:5d:
f3:69:dc:b5:84:32:14:2b:0d:1c:16:2b:5f:c3:59:
2c:b6:75:0d:38:06:b8:34:3b:b3:86:a8:5b:1f:b0:
c1:14:2a:fa:1f:04:ae:c2:84:fb:29:1d:bd:b0:92:
28:3c:d9:90:f3:17:e3:66:f4:71:6a:69:02:9c:df:
01:81:8a:02:a3:0f:f3:9c:f8:8e:46:00:25:30:65:
c7:70:9e:61:46:3b:c1:07:d4:b7:40:95:ca:eb:d5:
84:63:02:65:68:9e:db:f4:7b:87:5f:0c:92:38:80:
e6:08:f4:40:05:70:aa:18:c9:4f:62:f7:af:80:50:
d9:23:d1:76:07:82:d8:53:d0:e2:20:27:f3:36:bc:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:46:0E:3D:89:07:D6:24:23:9E:9A:33:DC:1B:8F:D7:55:E0:BA:D6
X509v3 Authority Key Identifier:
keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f3:29:b5:9f:cd:19:33:aa:bf:4e:c6:02:89:aa:b3:0c:21:
c9:c9:35:2e:55:4f:b5:1a:4b:63:49:82:44:9b:9a:e8:57:b4:
d3:22:4d:ee:76:1e:51:14:4e:3d:e1:09:06:a0:8b:b2:14:57:
c2:7b:2b:73:12:dc:1d:85:31:84:0e:3d:79:e8:76:97:c1:78:
b6:b9:6b:d2:0c:0a:40:14:5c:c1:a9:8c:c4:4f:7a:d5:44:c1:
ed:b0:01:10:60:ad:0a:63:7a:b9:80:d4:92:e2:cc:ec:25:c7:
fd:3f:cf:b3:13:a8:b0:f9:6d:99:85:4d:e8:27:1c:af:c9:bf:
08:7c:53:f7:55:65:0b:a5:95:ba:af:1e:ff:c5:f6:4d:f7:57:
f5:fd:40:04:fc:77:9f:5d:4f:2f:56:29:cb:2d:f7:1f:f4:6c:
72:07:8f:8c:84:dd:38:a3:39:48:50:b5:e1:ac:e8:4b:58:02:
a0:1c:10:77:eb:a2:9b:32:0a:63:29:4f:ef:61:ce:56:ea:60:
01:55:29:5f:a3:a9:7d:f8:0b:8a:48:35:7e:83:a5:af:ad:48:
44:ef:ec:8d:58:f7:46:d0:be:a6:cb:bc:d7:08:b2:45:44:d8:
bf:7c:16:02:41:fc:eb:e4:3f:6d:72:3a:30:28:f5:51:c5:43:
b7:4a:5b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:01:40 2026 by rpki-client