Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
File: YbGV0TBQ_zxGihSXeHELU1giUdk.mft (raw, json)
Hash identifier: SzqtdyU303w0jUfjxiMemL8wLV3jBPuy86wO4CUFt+g=
Subject key identifier: 84:60:3C:DF:8A:42:D3:66:FC:46:78:F4:CE:70:AC:94:69:A7:00:CF
Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
Certificate issuer: /CN=61b195d13050ff3c468a149778710b53582251d9
Certificate serial: 019D27DF9CC8E7B81FF9DDCA0F3E7C545372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 02:00:59 +0000
Manifest this update: Thu 26 Mar 2026 02:00:59 +0000
Manifest next update: Fri 27 Mar 2026 02:00:59 +0000
Files and hashes: 1: TK8zghqg8mRUl2FKqWZ3fkqCPjo.roa (hash: gdusYks5Qp51cXZtG8mOxw07u8NyV/fdE9i7uOexEq8=)
2: YbGV0TBQ_zxGihSXeHELU1giUdk.crl (hash: 7UJIirVmdNdUvP/pSJpnL9XfNrm5bTcsSCevntIALfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:9c:c8:e7:b8:1f:f9:dd:ca:0f:3e:7c:54:53:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b195d13050ff3c468a149778710b53582251d9
Validity
Not Before: Mar 26 02:00:59 2026 GMT
Not After : Mar 27 02:00:59 2026 GMT
Subject: CN=84603cdf8a42d366fc4678f4ce70ac9469a700cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:1e:27:1b:76:69:50:12:8a:2a:66:75:24:
a8:cc:57:d2:86:18:cf:d0:cd:2b:33:87:5f:cc:0b:
3b:8d:dd:3a:99:37:49:4f:df:7a:d3:52:98:f1:0c:
7d:76:8c:ec:3f:af:18:30:b6:b0:20:2e:32:40:91:
3d:e1:f6:ac:27:05:3b:53:e4:3e:fa:d3:43:07:8b:
3c:f1:7d:a7:b3:83:98:d0:ce:98:e1:d2:57:9e:e1:
7f:ba:7d:05:49:52:85:52:16:11:25:7d:3f:7c:5c:
4e:48:e5:ed:9b:ba:d5:6b:71:59:5f:f9:af:6f:c4:
d3:4f:a1:7c:3a:4c:33:e9:fc:87:63:c1:18:02:08:
33:21:86:9a:39:ad:b4:9c:48:de:1b:59:5d:ee:7c:
42:04:1c:55:11:ec:3b:cb:5b:06:41:60:a7:f1:d9:
c3:e4:e5:6d:44:35:14:3c:18:f1:e3:4a:c6:f9:5a:
23:6e:43:12:31:49:f2:f3:33:bf:5c:60:b4:1f:04:
34:81:9c:dc:f2:d3:75:50:21:e7:8c:cf:4c:c7:a8:
58:b5:f3:cd:cf:d6:f0:f7:68:83:85:c1:fa:27:d1:
e8:12:cb:6e:54:ea:48:db:62:bf:e4:9a:b4:75:ad:
22:72:a1:cf:13:91:02:0c:1a:fe:b0:05:51:cd:bc:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:60:3C:DF:8A:42:D3:66:FC:46:78:F4:CE:70:AC:94:69:A7:00:CF
X509v3 Authority Key Identifier:
keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f4:fd:fc:d5:72:16:6f:84:83:4f:00:9c:26:e3:6f:18:e7:
4b:c4:25:41:b0:fd:3b:cc:0f:61:17:65:ca:74:f0:31:0c:e9:
bb:ad:d3:42:08:28:d0:42:4e:2f:e7:e2:c5:0f:78:65:b7:56:
94:3c:1a:f1:e8:90:e8:b3:2d:58:ee:e8:51:70:3a:a0:cc:cb:
3e:e5:6b:d8:c8:31:76:05:2e:ea:97:db:f5:55:89:54:d3:b7:
9f:74:aa:62:5a:c2:4d:9a:35:cd:2d:07:d6:aa:11:62:be:83:
42:7d:fa:1e:b2:1f:1a:6c:18:8b:87:95:7d:e9:3a:e1:4e:99:
9c:59:37:f0:1b:7d:97:e5:9c:6b:dd:4e:7b:7e:46:57:6f:3f:
71:29:ca:ab:71:c6:13:3a:27:17:84:18:e6:27:3b:c9:18:3f:
b7:cf:1c:b5:7c:01:ab:f4:06:14:5f:78:e9:7c:79:17:72:e2:
bc:e0:f2:c3:3f:2c:b5:59:80:b8:41:cb:67:22:23:f2:e3:ce:
e5:2c:74:c1:b4:06:74:a3:df:47:70:94:d3:0d:fa:2d:bd:5b:
a7:80:42:ae:fa:ed:f4:de:b2:33:e0:82:25:9a:29:6b:e1:15:
23:dc:bd:79:dc:1e:df:1c:38:ba:35:ba:be:68:3a:a6:6d:93:
ec:83:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:52 2026 by rpki-client