Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
File: YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft (raw, json)
Hash identifier: RW0pxo77dLbJHFRJ3IQy0El6hJruEcCGqv7A6nz7AgI=
Subject key identifier: F2:98:D8:DD:9E:34:FB:6F:D6:E5:E4:74:6F:7E:74:01:BB:78:05:55
Authority key identifier: 60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32
Certificate issuer: /CN=60b28e2723955a3f63e47b3230317eae9292ff32
Certificate serial: 019D27E058F037E84FFECA8A0380DB46B487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
Manifest number: 1558
Signing time: Thu 26 Mar 2026 02:01:47 +0000
Manifest this update: Thu 26 Mar 2026 02:01:47 +0000
Manifest next update: Fri 27 Mar 2026 02:01:47 +0000
Files and hashes: 1: BD2ZmB5rSja_kZITrzXPI22Piww.roa (hash: XlOMlSw4i/XGorHygY9Vhf1MrDCgaP31EVtyPn5p+tU=)
2: YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl (hash: GOws+2fzXq/24rlkfjnQ8RYdvCUaxncJDilDi+Vzyx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:58:f0:37:e8:4f:fe:ca:8a:03:80:db:46:b4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b28e2723955a3f63e47b3230317eae9292ff32
Validity
Not Before: Mar 26 02:01:47 2026 GMT
Not After : Mar 27 02:01:47 2026 GMT
Subject: CN=f298d8dd9e34fb6fd6e5e4746f7e7401bb780555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:27:47:12:e9:a6:ae:ab:a4:bc:ac:02:d0:
31:3d:9f:c3:1b:89:91:4a:11:96:d6:d4:ac:83:a6:
93:e2:83:d4:ea:f3:ad:c7:42:c4:fa:43:df:9c:ea:
35:97:40:2c:33:f2:ef:05:e4:1b:53:46:60:db:31:
d1:e5:0d:1a:6b:33:52:4f:9e:da:33:0e:1a:ef:ba:
07:2a:62:34:36:74:ef:b6:42:ef:ee:04:40:49:b5:
7f:7c:d0:5a:ae:b4:85:3e:dc:90:8c:c5:e3:56:7c:
2d:3f:4f:62:42:5f:69:f2:c4:ec:be:dc:fc:0a:b9:
a8:09:ac:16:e0:22:94:8c:bd:38:61:74:82:d8:c1:
fc:fb:f0:67:d7:42:ce:0e:ff:ec:be:e6:98:ae:63:
96:23:d9:71:8c:07:8a:89:4e:06:6c:86:b1:4c:94:
2e:48:49:76:75:11:58:ee:27:a8:b2:d8:7f:fb:b7:
14:09:3b:50:4f:d8:2a:f0:7a:c8:be:c2:1e:62:07:
d8:f3:b6:fb:ca:73:07:a5:12:3d:ea:2b:6e:0f:80:
70:b5:74:a4:55:3e:45:89:c2:45:a3:f6:57:05:62:
fc:f1:fc:9b:90:a4:25:5a:37:fe:6f:dd:16:8b:3b:
54:8d:7c:d8:96:89:c8:d6:b4:94:93:04:ef:21:d1:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:98:D8:DD:9E:34:FB:6F:D6:E5:E4:74:6F:7E:74:01:BB:78:05:55
X509v3 Authority Key Identifier:
keyid:60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1d:48:1b:70:cf:2d:8e:bd:24:a0:b9:a6:e6:8c:35:d1:d5:
ff:30:f0:65:44:3a:8e:3e:12:d8:a8:c0:00:cc:9c:20:32:c8:
a2:f0:97:9b:01:a1:94:90:50:99:d1:ad:31:13:28:7d:8a:a5:
6c:61:e0:55:74:92:44:49:d2:68:79:7e:10:df:b9:68:f7:16:
46:ff:80:dc:fe:20:cf:d4:95:d8:85:5e:6e:57:90:4b:39:03:
01:55:6e:3e:0b:46:60:33:58:d1:d5:f0:73:d5:b7:e4:a5:c8:
0a:1d:11:d2:81:16:af:83:0f:ce:6e:63:82:76:e1:40:f2:da:
80:fd:85:3a:9f:75:2b:b3:c4:84:56:48:2e:64:cf:bf:28:60:
4d:32:d7:f0:d8:df:5b:e5:00:f0:6b:23:6f:a5:be:2a:43:f1:
16:31:dd:e1:f0:df:c5:e0:f6:da:4e:1e:ad:66:56:72:5c:47:
4c:90:76:47:b2:e7:af:6e:d4:6f:e2:de:f5:50:4c:93:90:07:
ec:63:3c:65:a4:3a:ee:d4:00:02:1d:64:5a:10:d3:f5:85:82:
19:56:62:6d:74:d3:3a:da:57:7e:0a:2d:bf:ff:b2:8d:4f:cf:
16:ad:4f:bf:07:5f:b2:93:21:36:13:52:53:a6:c7:7b:a5:21:
3b:cc:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:25:41 2026 by rpki-client