Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: 9+tyOpL36v46UUtVl3UQ7aby7g11b4DAvWXeenXcK7I=
Subject key identifier: F8:F2:49:BA:45:70:CC:FD:62:61:6D:AE:CB:0D:86:48:D3:38:A0:E8
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 019D26CD8FC5E56A15FB70A7C3616AF363CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 21:01:39 +0000
Manifest this update: Wed 25 Mar 2026 21:01:39 +0000
Manifest next update: Thu 26 Mar 2026 21:01:39 +0000
Files and hashes: 1: Lft1TVXiYVdikjn_A01iU-k02DE.roa (hash: AUhYpOdbzarhMkv1M+Fv4hjTQh+rQF7twSf3TVX7HXM=)
2: PejTwsBdKH5-f3Vp_HDi2lV40HI.roa (hash: sQMSKyXDXZzbEaxAsB9c8v4n+R0LYVRrVo36SmpYF40=)
3: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: xESEC9Fvuy0DA7Tt4gD8L2VTnd6iAP1Egz005jZak10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:8f:c5:e5:6a:15:fb:70:a7:c3:61:6a:f3:63:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Mar 25 21:01:39 2026 GMT
Not After : Mar 26 21:01:39 2026 GMT
Subject: CN=f8f249ba4570ccfd62616daecb0d8648d338a0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:ff:19:9d:0b:26:fb:f2:4b:ce:42:d7:9b:
ca:f1:14:5b:d4:7e:bc:04:86:a7:24:b6:5c:18:30:
04:e2:3b:05:c5:08:bb:c1:8b:32:ae:e2:c5:de:f0:
c3:ba:55:42:8e:6c:f1:fb:0b:41:ad:90:56:0c:29:
69:6a:01:5d:5b:28:36:26:0e:5b:b0:d5:35:15:54:
ae:eb:2d:36:99:63:8d:09:02:48:ce:5d:23:89:92:
72:e4:06:df:6b:bd:10:91:8b:8b:d7:c1:16:b4:11:
fe:ff:eb:3c:fd:01:e8:1e:ad:48:5f:86:d5:d3:1a:
b4:c7:2b:04:e3:2d:ab:a3:0c:62:93:e6:71:53:de:
67:ff:36:aa:2d:2f:ed:b0:c7:7e:bb:fa:a3:9e:05:
11:9d:27:ab:3c:ad:cd:39:1b:a1:b6:db:fe:e1:0c:
df:89:ab:a8:05:6a:5b:5b:c7:de:9b:c8:55:6b:9b:
c3:78:23:21:67:d6:75:bb:8e:b4:c4:3e:57:41:f6:
b1:07:e1:ef:6f:2d:7e:e3:3b:05:92:fa:3f:a9:92:
19:ba:e3:26:4a:10:46:a2:b2:54:44:46:58:40:e7:
53:aa:c2:ce:25:eb:9c:31:88:77:f5:e7:57:f0:0a:
e5:a5:c3:51:79:65:3e:a9:da:a7:6d:31:a1:27:1d:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F2:49:BA:45:70:CC:FD:62:61:6D:AE:CB:0D:86:48:D3:38:A0:E8
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c7:bd:cb:45:e5:c0:3c:6a:47:ea:14:19:d3:a8:12:83:50:
eb:81:96:96:62:b0:93:e4:ce:78:1a:18:66:c8:5f:b2:9c:03:
aa:0d:89:2a:29:14:d8:cc:c2:42:df:e8:7e:89:39:1c:cb:1f:
b0:ed:49:bc:9f:4a:da:bd:d6:2c:e2:ca:4f:2f:0b:7d:13:6b:
70:98:38:40:a5:1c:09:1f:c8:37:a4:a5:90:ad:2e:e3:72:23:
d2:53:49:d3:d9:f1:82:c5:9e:1b:fa:56:2f:de:ad:60:ae:de:
98:14:77:2a:e7:ce:79:ee:98:93:91:9a:7d:cb:9f:9b:3d:58:
7c:48:9e:39:8f:e0:25:e6:0c:bd:f2:d4:3a:e5:89:f1:ea:dd:
ef:47:6d:0e:3c:c1:93:3f:e2:a2:8b:42:51:c4:29:d1:dd:93:
f4:e8:d9:dc:81:38:4b:63:58:a3:f2:87:6d:9d:41:49:b3:60:
44:23:37:6e:79:a4:17:89:6e:e8:e0:00:da:f7:8e:f3:dd:7f:
0a:63:e2:b4:7d:1b:12:cd:12:28:2b:fd:fd:cc:5e:0e:2c:db:
1e:f8:67:b5:d5:2b:40:02:f4:93:3b:2a:3e:8b:7d:6e:4a:8c:
6d:33:fb:14:e8:e6:c4:43:71:99:22:73:ba:fc:32:7a:cf:74:
e5:72:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:42 2026 by rpki-client