Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier: SX/sviJBHZNfPLpOLIKStLNWvlbqBoMqpT8DpQALUr8=
Subject key identifier: 6E:7C:6C:37:75:0F:16:4D:BA:A3:3F:BD:23:82:A2:CE:BD:17:FB:C0
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial: 019D2703A0A30E7D72C88EFDA1CF6A5D212C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number: 148F
Signing time: Wed 25 Mar 2026 22:00:42 +0000
Manifest this update: Wed 25 Mar 2026 22:00:42 +0000
Manifest next update: Thu 26 Mar 2026 22:00:42 +0000
Files and hashes: 1: Ciy2fNIQW721fMsDhCb-VtXGBFw.roa (hash: XXBlf4gWy3TZJvapRvU6gO8Rcd2sHCwCt2ib04wAeps=)
2: Wldr-eNyg4Fo_ylLob-Hp7fcw88.roa (hash: wf6Ot6Ex/s7myo+jesSKrN1q9D7ZqoW374UIQ9ocJss=)
3: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: da8QAcLimS4eZqwFSeqdEL/xkpw3DXuox/s4oo6AiDA=)
4: mYGac8UdKtYiejjIP-FXgbBItOo.roa (hash: zhSZcg/Pm9sDKqIKNxnWpvUr1PBvScF8Xahp3flsYl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a0:a3:0e:7d:72:c8:8e:fd:a1:cf:6a:5d:21:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
Validity
Not Before: Mar 25 22:00:42 2026 GMT
Not After : Mar 26 22:00:42 2026 GMT
Subject: CN=6e7c6c37750f164dbaa33fbd2382a2cebd17fbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:27:24:84:7d:5a:ca:fe:ae:d0:57:9a:57:
b4:c5:18:ec:fc:b2:4c:79:90:ed:6f:a4:ba:9e:df:
d5:a5:64:80:f6:8a:74:4f:f4:9b:34:0e:b6:06:3e:
f5:ca:3f:ad:da:f6:c3:cc:cb:26:e0:d1:a6:c7:0d:
8f:e7:23:6a:7c:85:b1:05:37:6c:d9:31:ae:a9:ad:
ab:34:38:c1:38:a6:17:81:7f:75:cb:9f:62:35:79:
27:b2:b7:54:9e:2c:7d:9f:12:95:70:ca:0e:79:11:
07:44:4a:36:c3:ae:3b:dc:e5:81:0c:74:f4:62:b3:
99:72:3b:51:9f:bb:57:7d:3d:03:46:9e:7f:2d:cb:
d4:61:15:73:86:99:35:b7:82:1b:ab:fa:9b:9a:ca:
40:a4:ea:d0:cb:48:07:33:94:1b:bf:28:5d:a4:e7:
56:1a:a1:2d:40:91:dd:cd:6d:13:12:86:fe:7d:94:
7d:a3:4c:0c:2d:d4:1f:63:df:d6:4a:b7:a6:3b:48:
63:96:3b:ac:a0:3e:89:59:97:9b:f6:9a:8e:22:11:
88:82:ee:45:16:80:e3:b3:8e:d0:28:49:84:a7:ff:
40:5d:c6:c0:ad:55:fe:94:03:da:00:3e:b9:f6:8f:
c7:29:9a:bc:8a:9e:38:4a:d0:66:cb:01:9c:a0:b0:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7C:6C:37:75:0F:16:4D:BA:A3:3F:BD:23:82:A2:CE:BD:17:FB:C0
X509v3 Authority Key Identifier:
keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ce:a9:d8:1c:8c:a9:db:6d:da:27:10:4c:66:a5:1e:96:6b:
d9:49:f3:64:44:2a:42:ef:ad:a9:50:bd:ef:09:02:38:24:aa:
18:ed:9b:88:03:72:75:60:3c:c9:9b:8f:7f:e3:2c:59:12:26:
8c:75:bb:7b:73:d0:ec:73:c6:20:cb:95:0a:24:f9:6f:9b:d8:
df:e1:e4:2d:d1:c0:35:df:00:02:6a:95:b6:ce:b2:85:fa:48:
5d:9c:f5:53:70:54:d9:45:cb:e4:7a:7d:97:f4:4b:2b:57:09:
f0:4a:43:ef:dc:4f:14:7a:c4:45:fb:94:97:24:47:be:d2:35:
9f:f5:f8:59:98:9c:b9:cc:8a:8c:ee:41:d3:84:9e:37:cd:d2:
b1:37:e3:76:cb:2e:72:a8:06:7d:74:ac:93:39:65:7f:d7:a5:
91:fa:c8:62:e4:5a:56:cd:da:62:ce:a7:4a:7f:ee:f8:fe:72:
71:74:29:f5:ab:f5:c2:56:a9:20:60:8a:da:d0:75:85:91:01:
63:27:c6:ef:11:fe:73:12:0b:c7:98:57:72:40:9b:45:c4:c0:
5b:8a:23:7d:02:7f:b2:f4:ba:2d:0e:31:19:cb:2b:2f:f1:50:
d7:f7:39:80:2f:ae:d7:64:ac:65:1e:35:63:71:32:d2:c0:5c:
de:12:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:21:48 2026 by rpki-client