
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
File: ybTWgj7LKLSjXkDcEe8inLI3XN8.mft (raw, json)
Hash identifier: XVEPfte+0Gucxs/+CyAqysn/UQqPQrDee0BMoQYKfuM=
Subject key identifier: B3:0B:4A:83:C7:76:36:9D:39:29:6E:2A:D6:2E:52:F4:BB:F7:9C:2A
Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
Certificate issuer: /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Certificate serial: 019D265FD99DA3874351C4AE1784A12DC818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:48 +0000
Manifest this update: Wed 25 Mar 2026 19:01:48 +0000
Manifest next update: Thu 26 Mar 2026 19:01:48 +0000
Files and hashes: 1: j2kshuHVZgy_a_ks9i17d_oN-wE.roa (hash: pcR01H5nRjsqzd6YXqWm7ztOqd7e8cS1jZjUNHiylns=)
2: ybTWgj7LKLSjXkDcEe8inLI3XN8.crl (hash: bwkTeyD8QeJ45ZE9htJBFYZ5VOI4IUEWQeQwSjzJtEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d9:9d:a3:87:43:51:c4:ae:17:84:a1:2d:c8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Validity
Not Before: Mar 25 19:01:48 2026 GMT
Not After : Mar 26 19:01:48 2026 GMT
Subject: CN=b30b4a83c776369d39296e2ad62e52f4bbf79c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:a8:44:b2:53:1a:66:aa:02:15:79:02:6e:
0d:16:07:e4:1c:a1:bb:d1:25:3c:3c:be:1c:b8:4e:
37:17:bd:89:2d:b6:40:8b:3d:d9:83:a8:6e:77:c5:
19:44:f8:70:b4:97:a7:06:6f:1a:bf:46:ce:ca:f6:
35:67:5f:3f:96:06:74:a7:43:f4:ef:34:16:97:b9:
5d:c2:7b:ef:6c:ad:d6:cd:5e:b8:39:d2:bb:c9:37:
43:2e:83:66:05:a6:ca:20:46:25:cf:a3:4c:0b:e3:
cc:74:cd:08:f3:c9:4c:0b:30:87:af:1b:87:21:79:
4a:4d:46:b9:20:f3:80:a7:91:ed:e7:1a:3c:3d:50:
c5:98:cd:d8:17:ab:2f:dd:42:91:37:92:80:f7:cb:
8d:f9:68:ed:85:d7:a5:ff:5c:22:8a:e1:58:c2:41:
ee:ad:42:b9:16:63:6e:8b:29:96:e8:2d:18:7d:11:
bb:c5:21:7b:80:b5:a1:cb:f7:41:31:3d:8b:b5:d0:
bd:4b:8a:39:d8:87:60:76:01:61:ed:db:a9:06:49:
ad:29:65:ca:66:d3:55:96:0c:e2:6f:09:01:4b:33:
28:44:9a:ba:d4:19:3d:04:1c:3c:af:6b:e4:5b:17:
5a:47:b3:2e:09:4e:92:64:ae:a3:8a:b2:67:97:21:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0B:4A:83:C7:76:36:9D:39:29:6E:2A:D6:2E:52:F4:BB:F7:9C:2A
X509v3 Authority Key Identifier:
keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bc:0f:9d:03:7d:9e:0c:31:50:f0:bd:7b:87:45:66:4e:bf:
31:13:d9:68:67:a3:a4:04:c2:3c:bc:e9:c5:70:9b:08:e1:e3:
7c:44:3d:d1:48:92:33:79:3c:fb:de:b2:02:fa:04:52:8b:ab:
db:f3:20:62:25:99:74:81:05:33:7f:66:19:ec:2b:09:f9:6b:
e5:18:5f:ca:1b:95:6e:e6:a1:00:78:f5:5e:10:0d:82:b6:21:
36:f4:b1:75:76:25:28:25:38:92:0f:e5:45:2f:24:33:1a:cf:
73:f5:97:a8:26:e5:19:b6:04:34:f9:9e:a4:86:23:8d:9f:90:
33:0c:a3:40:b4:9d:4b:a0:4b:e7:92:a3:2d:e2:5f:e6:64:72:
b8:44:be:9d:69:99:99:8a:de:85:06:0d:fa:83:9f:bb:23:cb:
66:2e:4f:59:39:25:f0:94:fb:72:36:32:a5:97:81:41:fa:44:
41:94:bc:3e:33:29:14:15:85:34:ac:e8:9c:2c:e2:7d:27:5a:
c6:d7:6f:65:38:05:8e:46:ab:21:a1:a6:86:f3:65:71:ad:e8:
4e:e0:29:bc:fc:d9:64:37:49:3c:91:f3:40:ce:26:35:17:db:
20:0a:00:bc:be:4f:da:e1:e3:d3:be:5d:14:9d:a3:df:f4:f8:
30:db:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:45 2026 by rpki-client