Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: 6e3mY+kPSt2Ie/8iWzURKH9rxQlrH7ZilZUbV1JHVrg=
Subject key identifier: 96:29:1B:08:F7:C4:23:ED:9F:4D:A5:E0:A2:44:D2:DA:D3:00:C9:FA
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 019E1FEC5158FC2C204E587B1D34577EBCB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 10FE
Signing time: Wed 13 May 2026 06:00:41 +0000
Manifest this update: Wed 13 May 2026 06:00:41 +0000
Manifest next update: Thu 14 May 2026 06:00:41 +0000
Files and hashes: 1: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: W6l79PN5vLC5go2GgN3HyK0LFyZwfh4fm087TxVW8VY=)
2: iliXSfFW9CmHSeqMey9o5nQh8YE.roa (hash: Fb6bIsCY/5XAoXMXg9zGQmjVCnZpfmN1KdROzLuLLmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:51:58:fc:2c:20:4e:58:7b:1d:34:57:7e:bc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: May 13 06:00:41 2026 GMT
Not After : May 14 06:00:41 2026 GMT
Subject: CN=96291b08f7c423ed9f4da5e0a244d2dad300c9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:a7:13:01:d4:07:7e:02:c3:28:52:32:93:
92:05:56:4a:2e:ab:b8:dc:2f:74:4c:03:3e:74:8c:
5d:38:5c:fe:17:7f:0c:54:86:a4:b4:e2:0e:02:02:
4d:d7:84:30:03:ca:08:ff:06:bb:51:7c:71:b9:e0:
81:b3:22:9e:60:5c:56:66:d4:3e:38:a4:17:91:fa:
79:c8:46:ee:55:60:8a:ba:3e:72:04:d2:13:c3:d7:
b3:e7:30:9c:17:ad:f4:30:1a:78:c5:57:39:8d:23:
74:a9:34:cb:4c:17:b0:83:44:a8:ee:f1:35:b2:5f:
31:cc:58:ca:3f:c7:fd:af:a5:40:32:d1:96:a7:63:
d8:b9:0b:ab:49:02:b5:86:de:0f:03:1e:fc:dc:9c:
28:91:aa:10:00:31:c5:ac:d0:ba:e2:c5:22:a3:a3:
58:b4:8b:b7:23:ab:79:4c:15:73:a8:87:a3:3e:9c:
1e:05:0e:6b:98:2a:0d:a8:f6:48:19:74:47:8f:ee:
10:8e:e3:b5:2f:aa:29:a5:4f:21:22:32:d7:0d:83:
9f:0b:79:06:f0:78:27:f1:7a:d3:7f:f8:98:05:a1:
10:97:65:7f:07:ed:11:b4:9b:d3:cf:0b:7c:00:65:
41:69:b1:a5:25:b1:e6:ed:56:56:fe:82:63:79:99:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:29:1B:08:F7:C4:23:ED:9F:4D:A5:E0:A2:44:D2:DA:D3:00:C9:FA
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b3:eb:87:f3:65:f5:fd:83:b5:df:2e:23:37:ef:57:22:2c:
dd:c3:c7:1b:51:f2:ea:6c:f4:b5:99:ab:2a:0b:69:95:20:ec:
c3:f0:e9:31:93:ad:d7:73:70:da:8a:74:b5:7c:db:18:cc:4f:
1e:af:2f:bd:d6:82:f9:46:00:e3:d2:67:72:8f:df:a8:0d:31:
49:bd:95:90:59:40:60:04:ce:7f:26:df:38:f1:33:0a:4c:90:
7a:f2:84:d3:e5:f9:20:11:dc:30:2c:7a:fa:2f:36:12:e8:96:
c2:d0:c0:5e:01:0b:d9:31:e4:00:01:74:03:fb:76:dc:1a:b7:
f7:15:96:3c:cc:09:05:e2:50:de:49:11:7f:63:30:a1:81:9d:
2a:b0:98:4a:58:98:f4:c3:82:6b:23:24:92:86:53:d5:ec:7d:
ec:ae:78:36:f0:18:a5:38:ee:3a:3e:d5:1a:3b:a1:07:08:c1:
07:37:98:ba:d3:d3:d1:15:8c:14:4f:78:a6:fd:4f:c4:4f:cd:
da:9f:f6:ad:dd:18:73:11:f0:22:3a:f8:90:cc:fe:0f:fe:bc:
48:1e:4f:7c:4d:78:37:5d:95:56:a0:48:76:a2:da:5b:99:1e:
6f:ca:f0:4a:f7:c8:03:c8:95:04:3d:aa:df:66:7c:90:67:e0:
93:85:e0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:22 2026 by rpki-client