Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
File: Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft (raw, json)
Hash identifier: uh9vFUtDttSKyR3bE3AYBokWH7kppyKyD23m6WZUsI0=
Subject key identifier: 6D:AF:7F:CC:2C:71:13:F6:C7:1A:64:4C:0F:B4:3F:81:1C:BC:06:21
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Certificate issuer: /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial: 019D27DF5E4AC6235BF806F4F1401A4D0F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:00:43 +0000
Manifest this update: Thu 26 Mar 2026 02:00:43 +0000
Manifest next update: Fri 27 Mar 2026 02:00:43 +0000
Files and hashes: 1: F4LbTheuqBEGIn6fr-Y_BQ5eBhY.roa (hash: ylWhqGU3POwfkleabzCnfc3VdGfQhOi+YLiDFBo46HY=)
2: QsJVa7ALHglGVdigmvX7md5Q674.roa (hash: 22/vuBN3pEmuYMdjZicb7ImHZcbO8Ev5qKlpNkyNuag=)
3: Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl (hash: rOyhCK1ywHmJAL21PSCxVps5RSHiDVlRfWEstX9PzCs=)
4: lpSnG-y0Lsx00PzPj6wFEetzroU.roa (hash: 8nc2ssk8ohlYgfLFFN1OlzwafOrvoQKJGYQ+TMSGKjY=)
5: vnsB4kAOFnGsHN9CBVoZnqSF5lo.roa (hash: WojFRS0zJ8gYXjOIS9R3kP7lD+l+nHPXLrf3+5L0IXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:5e:4a:c6:23:5b:f8:06:f4:f1:40:1a:4d:0f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
Validity
Not Before: Mar 26 02:00:43 2026 GMT
Not After : Mar 27 02:00:43 2026 GMT
Subject: CN=6daf7fcc2c7113f6c71a644c0fb43f811cbc0621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:57:b5:a5:7b:4c:b8:85:01:91:b9:4f:cc:
3f:07:c7:49:ec:a2:ed:00:b2:8d:c2:07:b2:58:c5:
eb:48:02:45:c6:d7:6e:94:55:90:34:25:86:b4:be:
88:ee:1e:6d:81:ee:5c:20:85:e5:17:9a:ed:a5:8d:
c1:00:80:d7:9e:17:51:3e:19:45:57:10:84:b7:5e:
ac:c9:08:64:35:f9:d4:c7:16:27:10:8e:47:d0:73:
65:5d:00:a4:af:23:40:8b:bc:54:8f:a1:37:9f:49:
6b:e3:17:ef:31:12:6b:92:83:b1:36:5e:df:48:3f:
cc:5e:5f:49:4d:7a:e6:c7:8e:6b:b1:07:5c:4e:c9:
2f:df:2f:0a:63:3b:53:19:ed:b0:b0:c1:0c:7a:62:
c6:ff:88:40:42:7e:cc:99:b3:34:a5:a4:8d:66:e1:
3e:23:ab:cb:3c:f1:e5:ed:8e:1c:37:8c:90:64:8e:
f3:3d:51:18:d5:28:56:9a:19:31:bd:53:90:93:5d:
b3:4b:61:fd:b9:93:ac:75:2d:d0:0e:42:9e:51:ac:
ce:1c:df:7f:f2:e6:d0:eb:43:21:e5:f1:fe:ab:d6:
6d:65:f9:9d:6c:52:81:e4:94:a9:d8:e8:d2:25:f8:
8b:a7:48:df:26:c9:38:ac:48:69:76:67:be:2b:59:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AF:7F:CC:2C:71:13:F6:C7:1A:64:4C:0F:B4:3F:81:1C:BC:06:21
X509v3 Authority Key Identifier:
keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a0:2c:55:3e:47:78:da:fd:73:c2:31:26:0d:96:f9:0e:48:
93:81:b5:cf:7f:1f:e9:e2:2e:14:39:b6:bb:f6:ab:22:88:71:
09:22:8e:64:de:51:01:72:fd:0b:bb:e3:68:6b:d7:a6:38:98:
f7:19:a4:02:ba:45:64:4a:37:50:a8:0d:bd:3f:a7:0f:c3:3f:
87:c7:fa:8d:ea:1a:95:e0:de:f9:eb:b5:f1:f5:8b:f5:c5:ac:
c8:1d:ee:2f:77:66:36:45:18:26:ce:2c:df:71:1c:54:5e:d0:
56:eb:fc:53:ca:7b:29:3e:5f:84:f9:73:84:04:3d:c7:66:0e:
3d:3a:0e:df:d1:5c:f8:9d:1c:44:d8:ef:50:64:0a:f5:38:14:
c1:7d:3a:6f:86:73:d7:7c:00:3f:aa:08:9c:3f:ab:a8:72:c6:
87:9b:1d:a6:b8:cb:1c:12:e1:66:a9:6f:b3:39:6f:70:fb:c5:
64:02:14:cf:50:3b:4d:38:13:0c:bb:ca:ba:1a:25:a3:80:70:
5b:23:ce:92:d7:58:6b:a4:76:db:d6:0d:46:43:c4:16:f9:b4:
96:a8:8d:a6:55:fc:03:be:49:0f:6b:48:9e:8c:89:44:d0:33:
da:fd:86:50:9e:ce:ec:3e:d2:10:24:5e:b0:ca:ef:32:a0:30:
0e:b4:0c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:37 2026 by rpki-client