Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File: Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier: mWSGSOZVrQpnKMVKxFc+bQnHf0e6bQuuHy8Bw00yiDU=
Subject key identifier: 2F:60:B0:20:3A:4B:49:B0:49:9E:96:D4:7F:F3:BF:EF:14:78:D4:90
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 019D273ADF98650FA480DBC38DBFDF47736A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 23:01:02 +0000
Manifest this update: Wed 25 Mar 2026 23:01:02 +0000
Manifest next update: Thu 26 Mar 2026 23:01:02 +0000
Files and hashes: 1: 2dU_Wx7maoKES4uWBmISrFThyIU.roa (hash: ffH0TAg9XSxzOXt+6AV+6sDEvW+c8igbg9XX2e6NJUY=)
2: HZb22Oio0r0dOkO7Ylc22UNpmkI.roa (hash: 4bxPJ8gmL9NMrQNM+ipouVsdrPbO9cdpsR6HkCC+6eM=)
3: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: DZUaj85k+NUcXXn06tXF2B8RZdvJbflAY4osoNiVzl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:df:98:65:0f:a4:80:db:c3:8d:bf:df:47:73:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Mar 25 23:01:02 2026 GMT
Not After : Mar 26 23:01:02 2026 GMT
Subject: CN=2f60b0203a4b49b0499e96d47ff3bfef1478d490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:90:cf:47:59:4f:e3:b7:e4:37:54:af:08:df:
59:f1:fb:34:50:d3:ba:11:f0:a6:06:0f:6d:6d:e2:
a9:b8:7d:ec:2b:64:9d:4f:96:8b:36:14:97:08:59:
c0:25:bf:ff:f4:22:49:46:5b:c9:cd:80:a4:50:4a:
4e:cd:83:17:7e:82:92:cb:3d:65:7a:8f:7c:5c:21:
e7:be:cd:fa:26:25:2a:a9:b7:4c:61:00:32:ef:66:
c1:dd:f5:93:71:50:83:0d:51:b3:ee:99:e3:0f:f7:
e1:18:f2:cf:a8:b8:10:e8:7f:50:43:ba:a5:1a:87:
78:fe:53:66:64:f1:74:9d:e3:ca:cb:55:19:96:3f:
c4:ce:a8:0f:24:6d:cb:1a:e5:0a:e4:48:70:bb:d3:
f2:fc:36:3c:0d:36:a5:ce:96:aa:99:15:05:40:20:
3c:13:f5:18:d9:fc:49:00:5a:30:71:94:c1:b5:7f:
44:21:98:94:1b:28:86:7e:c2:d3:f5:60:c5:a7:d9:
f8:18:85:f8:0a:b6:4a:af:d3:55:b8:ab:f0:e5:43:
01:94:33:52:91:6e:b8:b6:2a:6f:47:13:b5:a2:53:
bc:93:12:18:57:ed:83:62:d9:e8:19:17:0a:18:85:
5e:eb:20:ee:28:10:d3:58:73:76:fe:67:e1:36:2b:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:60:B0:20:3A:4B:49:B0:49:9E:96:D4:7F:F3:BF:EF:14:78:D4:90
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:22:4d:36:e6:6c:fb:43:2d:ef:ea:0c:af:e7:3d:60:45:c2:
c8:8d:b3:ec:ff:c7:5c:65:d5:6b:f3:59:2a:d2:7d:da:ef:aa:
f2:08:29:c2:1c:19:cf:a1:2a:59:07:c4:d0:a8:cd:33:ba:a6:
bf:c7:54:e4:b6:3d:1a:f9:9b:4e:54:d1:93:19:d8:aa:88:b1:
f6:10:1c:45:1d:77:c1:eb:10:2f:41:6f:06:0b:e5:47:27:8c:
95:52:e0:92:69:fe:64:17:bd:3f:83:17:f9:04:30:47:cf:56:
4e:a4:e2:7b:8e:49:3e:4c:9f:f4:8a:08:64:6f:a6:66:a2:b1:
79:bf:79:1c:79:ea:e9:1b:21:65:a8:15:fc:36:9e:00:c0:a1:
a2:2e:49:56:b1:26:ba:15:f3:70:da:9c:35:65:83:dd:3a:f2:
1c:d8:04:6f:18:a3:34:55:01:2f:97:48:71:0a:ce:20:52:42:
bd:a7:46:a4:8c:8b:85:38:44:14:f7:97:5e:03:50:47:64:c1:
fc:ce:23:80:9a:36:e7:6f:1e:4b:14:46:41:50:5b:67:b2:02:
45:77:c9:4d:12:54:29:d4:d9:41:db:40:da:13:72:bf:c4:15:
c4:0e:90:61:14:89:cd:c5:98:b6:3a:35:58:88:62:e4:06:15:
72:ce:cd:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOt+YZQ+kgNvDjb/fR3NqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZTZlYTgzOTI2YmM0NzhjNzg1NDcxZDgwNWE1YzEyMTBh
OGM5OTMwHhcNMjYwMzI1MjMwMTAyWhcNMjYwMzI2MjMwMTAyWjAzMTEwLwYDVQQD
EygyZjYwYjAyMDNhNGI0OWIwNDk5ZTk2ZDQ3ZmYzYmZlZjE0NzhkNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+JDPR1lP47fkN1SvCN9Z8fs0UNO6
EfCmBg9tbeKpuH3sK2SdT5aLNhSXCFnAJb//9CJJRlvJzYCkUEpOzYMXfoKSyz1l
eo98XCHnvs36JiUqqbdMYQAy72bB3fWTcVCDDVGz7pnjD/fhGPLPqLgQ6H9QQ7ql
God4/lNmZPF0nePKy1UZlj/EzqgPJG3LGuUK5Ehwu9Py/DY8DTalzpaqmRUFQCA8
E/UY2fxJAFowcZTBtX9EIZiUGyiGfsLT9WDFp9n4GIX4CrZKr9NVuKvw5UMBlDNS
kW64tipvRxO1olO8kxIYV+2DYtnoGRcKGIVe6yDuKBDTWHN2/mfhNivnNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9gsCA6S0mwSZ6W1H/zv+8UeNSQMB8GA1UdIwQY
MBaAFGHm6oOSa8R4x4VHHYBaXBIQqMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83NGJmNDEtZDZhNy00ZmI1LTgwMWMt
MzNjYzNhZGIxZTc4LzEvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83NGJmNDEtZDZhNy00ZmI1LTgwMWMtMzNjYzNhZGIxZTc4
LzEvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCJNNuZs
+0Mt7+oMr+c9YEXCyI2z7P/HXGXVa/NZKtJ92u+q8ggpwhwZz6EqWQfE0KjNM7qm
v8dU5LY9GvmbTlTRkxnYqoix9hAcRR13wesQL0FvBgvlRyeMlVLgkmn+ZBe9P4MX
+QQwR89WTqTie45JPkyf9IoIZG+mZqKxeb95HHnq6RshZagV/DaeAMChoi5JVrEm
uhXzcNqcNWWD3TryHNgEbxijNFUBL5dIcQrOIFJCvadGpIyLhThEFPeXXgNQR2TB
/M4jgJo2528eSxRGQVBbZ7ICRXfJTRJUKdTZQdtA2hNyv8QVxA6QYRSJzcWYtjo1
WIhi5AYVcs7N0Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:48 2026 by rpki-client