Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File: YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier: i5g9cIuLZEOo7/HVIV2hSyKUzigaPsmRJqNo+tBNQg8=
Subject key identifier: 42:44:8F:6B:87:73:94:A4:6D:37:55:A9:8F:21:AD:E9:D4:6D:C7:3B
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 019D2816F4EA5DE36A9476B2BE1205B915AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number: 0906
Signing time: Thu 26 Mar 2026 03:01:26 +0000
Manifest this update: Thu 26 Mar 2026 03:01:26 +0000
Manifest next update: Fri 27 Mar 2026 03:01:26 +0000
Files and hashes: 1: 2RyLE_LZuHzSXkTYOvkYFBYiy4o.roa (hash: W8178gzARc8G7/wIunYzbf9dlIqJEul5+nB0lBaUQhw=)
2: 4415GxEj-TYr3AidYcdJ8bhsDy8.roa (hash: cE5GPiOmnznkFTHE5XfxrOsWeoTa87SB/CFxhnlAtck=)
3: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: ODR+iQkpgJOynLW976431jaJJrEsn2Huz3A7EU2FrW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f4:ea:5d:e3:6a:94:76:b2:be:12:05:b9:15:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Mar 26 03:01:26 2026 GMT
Not After : Mar 27 03:01:26 2026 GMT
Subject: CN=42448f6b877394a46d3755a98f21ade9d46dc73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:3f:6e:07:ee:bb:45:e2:14:61:81:c5:a9:
e5:6f:22:e0:0a:51:91:c2:63:7f:f4:b3:59:15:1c:
de:44:3c:ba:fb:5b:53:c9:86:10:d2:44:f9:a4:e0:
bd:68:67:76:3d:18:69:e1:67:7a:52:ec:f2:80:0c:
03:5d:d0:dd:66:50:55:23:ab:a3:6d:ca:25:d8:5e:
5e:ea:ee:88:83:3b:f3:24:53:cc:7d:59:41:a8:29:
e4:e2:2b:84:7e:a7:6d:d3:41:17:62:9f:c2:44:76:
4f:39:ca:0a:42:8c:87:7e:6e:b5:42:1e:4f:cc:1d:
5c:64:01:1e:ae:e3:eb:23:bf:9e:b6:38:9c:a3:65:
fa:85:59:35:43:52:4c:a0:70:e7:b4:0a:08:61:da:
9d:bc:7b:d1:10:be:49:57:98:19:b8:37:ba:9b:09:
08:69:cd:1c:a7:25:89:af:7b:78:d4:25:47:33:14:
4b:4e:39:13:89:ad:af:d0:4b:ac:01:7a:f2:b3:64:
61:9e:42:da:bf:dd:55:05:09:8f:8f:b9:08:41:7e:
4f:83:92:46:e6:42:f6:e9:d0:15:9b:b0:59:e1:f8:
bd:14:46:49:ca:f6:bb:7f:34:e1:78:c0:ce:1e:7a:
e7:86:ae:70:19:bd:69:4c:dc:78:79:a0:c8:ae:0d:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:44:8F:6B:87:73:94:A4:6D:37:55:A9:8F:21:AD:E9:D4:6D:C7:3B
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:92:77:f5:2d:14:46:95:8f:a3:2f:a3:b1:6e:ba:4e:0f:5c:
ea:d9:f5:0d:92:aa:a4:29:60:42:ca:9d:3f:4e:56:e9:5f:fa:
3e:df:42:45:74:5a:dc:f5:cd:6e:2b:f3:7d:50:f5:0a:21:d7:
f0:8c:0a:ff:f4:49:b9:b8:f9:67:1b:6a:90:99:42:da:51:70:
43:be:1e:d5:38:bf:b0:c1:d5:e8:19:59:b0:71:e5:c3:ea:91:
c0:da:8c:d5:64:02:07:ed:2e:da:37:c5:39:09:71:37:6e:8f:
19:70:48:b1:2f:37:b3:34:d8:f1:fd:70:f3:73:5c:8d:a9:e0:
97:fe:00:27:c1:cd:34:17:62:7c:b6:e2:b1:f6:36:82:66:1f:
3c:1d:04:41:b8:5d:9f:29:32:cb:9d:b7:ea:69:c4:eb:47:46:
73:5e:78:27:92:cc:2c:03:a6:14:72:f4:64:cb:1a:33:55:5e:
3e:22:65:f5:36:40:f0:15:36:77:db:4a:c8:b3:8b:c4:01:3c:
23:f9:17:e8:8d:c6:3d:4b:5d:28:aa:af:87:61:47:89:02:98:
6d:bc:5c:b2:fa:ca:c1:d1:ed:99:ad:0e:9f:db:2b:a3:02:d3:
8d:9c:51:3c:66:8b:12:54:b2:86:87:32:e3:e7:e8:ee:90:18:
18:92:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:20 2026 by rpki-client