Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File: YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier: 1d3fQNJY3UgKNGVzmk2sGkpNXjJY4yOMGKZLbd70vRE=
Subject key identifier: 14:2E:D1:9E:82:33:51:D6:BB:AC:11:AE:5B:55:27:91:E0:C0:D8:E2
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial: 019D265FB8E6059B38C4235A90432E3AF940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number: 1831
Signing time: Wed 25 Mar 2026 19:01:40 +0000
Manifest this update: Wed 25 Mar 2026 19:01:40 +0000
Manifest next update: Thu 26 Mar 2026 19:01:40 +0000
Files and hashes: 1: EQx1wUCuiGcSybnkD5TgNdIBeuo.roa (hash: +Isu6bVHjGg3xsr/3cAHcDSJ6upAxfIWHFQwmfRPNOw=)
2: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: UOpt4fN8Kaggn+iP6645rurTXo250iX5aq6ViqJmioY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b8:e6:05:9b:38:c4:23:5a:90:43:2e:3a:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Validity
Not Before: Mar 25 19:01:40 2026 GMT
Not After : Mar 26 19:01:40 2026 GMT
Subject: CN=142ed19e823351d6bbac11ae5b552791e0c0d8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d5:c1:b6:2a:22:69:09:fa:f5:bd:77:9d:4e:
ea:dd:7c:72:0e:b5:4b:52:4f:e9:d7:f5:1f:7c:ac:
7f:6b:7a:c3:41:63:89:ce:5e:40:ed:68:27:0d:32:
63:f3:f5:45:32:48:86:12:b6:38:9c:a5:30:95:da:
50:74:5b:a2:ac:e2:60:fd:93:e7:d8:a9:ff:0e:01:
a0:75:60:f2:25:5e:f5:28:8d:94:61:5e:48:bc:9c:
64:1e:89:03:d0:26:2e:51:a5:8d:91:de:7f:22:04:
21:01:54:a1:d1:2c:89:bb:a4:e0:0d:78:f6:57:89:
1a:19:9d:3c:95:e5:32:1a:24:37:61:1e:54:f6:66:
de:71:50:54:a5:5b:81:32:64:cd:13:3c:54:c2:7c:
bf:ec:29:f0:43:5c:f7:6f:fa:46:3e:66:b9:3f:dc:
e9:30:6b:cf:2e:ea:4a:e6:7b:3c:37:21:f3:c4:ff:
1e:ca:70:98:15:41:ad:0a:7b:ca:ab:e8:ba:f1:a6:
19:9c:1c:18:33:a6:18:e5:bc:7e:85:f9:30:6c:b9:
5e:20:c0:b5:91:e1:3e:6f:55:83:db:9c:bb:ce:51:
0d:ee:49:c9:d0:f0:d3:70:77:51:1d:de:8f:1f:20:
74:6f:4d:1b:1e:82:dc:27:eb:11:fc:70:2e:aa:d9:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2E:D1:9E:82:33:51:D6:BB:AC:11:AE:5B:55:27:91:E0:C0:D8:E2
X509v3 Authority Key Identifier:
keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:30:79:3a:27:22:a2:c3:d2:96:fb:3d:92:b0:d7:e2:58:cf:
95:5f:7f:71:eb:15:65:ab:ac:f2:5c:52:79:1e:10:59:0a:39:
75:22:05:dd:fe:17:87:57:e7:1c:b4:d3:ab:00:93:0d:33:bd:
72:86:7c:7d:e0:10:c5:89:ae:a9:10:98:2d:5d:71:ed:cc:01:
e4:46:89:64:09:cd:a1:c9:50:bd:04:23:b0:c0:93:19:5e:c0:
29:db:0f:69:85:2d:01:35:ee:7f:f3:60:4d:27:38:35:34:d7:
d7:03:f6:e9:07:a2:43:bf:32:d8:a8:c4:d0:33:c0:ce:ba:a3:
45:35:4b:82:4c:e3:1a:dc:3f:e6:fb:cc:6a:2e:2a:a0:3a:4a:
de:ab:17:62:d3:07:45:80:2f:a7:6f:89:12:7b:bf:a4:46:0a:
0e:1b:22:7f:8e:b4:73:74:bc:83:6b:d4:1c:9b:cd:b4:81:a5:
bc:cc:8e:4c:dc:c4:3d:f6:f6:f9:a2:26:d2:1f:e3:1d:ec:92:
e0:8a:01:35:92:19:05:d1:08:12:a2:21:32:09:b0:c1:63:4b:
fc:05:a2:c3:bc:da:55:61:b6:1b:40:05:23:29:7e:77:fa:3c:
5c:49:88:9a:9a:02:dd:d9:e4:fe:88:a5:cd:6a:58:22:26:d9:
64:73:1f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:52 2026 by rpki-client