Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: /2VFWDFXT6OokEMDlml70taUdGhQMKa//Uh6yFLfav0=
Subject key identifier: 07:A2:95:C4:62:39:A5:B9:FB:F3:78:DE:FC:EF:09:03:87:AD:02:4D
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 019D28BBDD790E05B7803CA53C29BE903A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 107E
Signing time: Thu 26 Mar 2026 06:01:33 +0000
Manifest this update: Thu 26 Mar 2026 06:01:33 +0000
Manifest next update: Fri 27 Mar 2026 06:01:33 +0000
Files and hashes: 1: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: v+iFbjpVLNWcfeH48hl9kKrXM2I9geP994gRRMaYVgc=)
2: iliXSfFW9CmHSeqMey9o5nQh8YE.roa (hash: Fb6bIsCY/5XAoXMXg9zGQmjVCnZpfmN1KdROzLuLLmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:dd:79:0e:05:b7:80:3c:a5:3c:29:be:90:3a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Mar 26 06:01:33 2026 GMT
Not After : Mar 27 06:01:33 2026 GMT
Subject: CN=07a295c46239a5b9fbf378defcef090387ad024d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:70:bf:58:f8:d9:81:8e:59:94:19:5a:23:
5d:e7:46:dd:e9:9e:6c:ab:31:5e:6d:93:2f:42:94:
16:b4:b4:18:71:bf:d7:9c:65:ec:b0:ba:78:7b:d2:
a4:1a:16:45:3d:05:a3:13:fb:12:24:aa:82:b5:08:
56:39:f0:3c:55:3a:39:d6:b4:0e:77:d1:4a:d2:c8:
7a:d7:12:e1:b6:e8:63:02:b6:7c:7f:aa:ce:f6:b6:
d9:de:99:fb:e0:cf:bd:c8:fc:d3:d3:65:a3:2f:93:
42:a3:50:a2:c8:4a:19:81:57:7d:3b:53:45:09:ca:
0a:ba:6a:56:7c:18:12:e5:ec:8c:bc:06:a3:a0:2a:
3b:cf:71:fa:8c:38:0a:86:cb:ba:9a:ba:de:72:70:
4b:db:53:7c:52:64:2d:20:cd:28:41:98:87:40:20:
12:92:f1:2e:b8:a4:77:93:d3:fe:20:43:90:44:2a:
b6:5e:0d:ba:7d:6d:a6:3e:2a:b4:80:ee:f0:31:4a:
13:b2:9b:03:4e:ad:a2:a9:a9:19:40:0e:01:e9:b3:
9a:65:d9:2f:a9:18:b1:8d:4c:c1:be:db:ac:18:0b:
14:41:2a:64:a7:01:ef:a4:71:16:f0:28:5e:6f:ed:
41:f0:3a:10:3e:3b:4b:62:a8:22:52:25:f8:e2:69:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A2:95:C4:62:39:A5:B9:FB:F3:78:DE:FC:EF:09:03:87:AD:02:4D
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1d:b6:d2:8f:5f:02:32:5d:13:2a:89:0a:91:10:25:2e:19:
ff:b0:54:45:e9:c4:66:4d:66:3a:87:39:c2:c0:4f:7f:49:d4:
fd:a0:df:fd:ac:95:30:6f:12:34:54:33:5c:3a:82:aa:b0:4d:
71:76:1b:0d:b4:93:1f:c4:d4:fa:95:8b:c2:ef:c5:dc:a3:25:
73:61:ef:0e:14:61:06:66:ec:8c:9d:1f:4e:9d:12:50:35:d4:
8c:f8:ea:db:4d:bb:ed:99:6c:b7:07:28:8c:58:f3:63:a7:a8:
88:0a:15:a9:71:d7:e3:0d:ed:d8:34:1f:93:33:9f:be:0a:8f:
84:61:0b:fd:a7:af:19:de:8d:81:f1:8d:22:75:e1:a5:13:84:
63:01:28:14:74:da:c7:c9:04:e3:c7:d1:51:c3:c4:a8:3f:65:
f5:78:1e:22:75:81:44:cf:4c:e9:52:84:4d:ea:87:e0:a9:86:
68:9f:67:97:08:07:89:c4:02:d0:fd:8f:02:b4:f0:b9:c6:e9:
25:25:b4:43:55:4f:5d:8d:a0:5b:63:b8:1e:bd:82:1d:8a:e2:
2b:e0:81:24:17:4d:1a:70:53:c5:50:dd:38:df:54:22:ba:8c:
79:17:cc:ac:ec:21:54:9a:c9:5b:40:5a:ae:5d:4b:41:af:9d:
16:7e:54:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:31 2026 by rpki-client