Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
File: YGVg4D7ogzLu-_ppROvRA4rg6rg.mft (raw, json)
Hash identifier: 76tRCDUyaH1n8Y81loIkC95DVIbNVYsqtX9X5vfpcxU=
Subject key identifier: 22:9E:88:9E:DC:8D:FE:8B:02:BF:73:69:CA:E2:A9:D0:76:72:1B:3B
Authority key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
Certificate issuer: /CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Certificate serial: 019D27E00444CE655691A7DF86539E84F507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
Manifest number: 1060
Signing time: Thu 26 Mar 2026 02:01:25 +0000
Manifest this update: Thu 26 Mar 2026 02:01:25 +0000
Manifest next update: Fri 27 Mar 2026 02:01:25 +0000
Files and hashes: 1: 9nPguctHaB_7gscvVC8bMWUEEhg.roa (hash: tgJSmONimeZaLDAFkdP2njX6XOWmQAy8RBHAeP1bFuM=)
2: YGVg4D7ogzLu-_ppROvRA4rg6rg.crl (hash: YaRm95LtN+kT8S+cOL9KJ+FzsLXf1eqiQCqklCRMshw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:04:44:ce:65:56:91:a7:df:86:53:9e:84:f5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Validity
Not Before: Mar 26 02:01:25 2026 GMT
Not After : Mar 27 02:01:25 2026 GMT
Subject: CN=229e889edc8dfe8b02bf7369cae2a9d076721b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:3c:16:2b:12:64:8a:ad:f3:2e:ce:c5:53:
87:ed:ee:4b:17:be:29:96:8c:af:2c:ea:e0:00:73:
4e:56:2b:e6:0b:b4:32:21:ad:8c:f9:9e:1d:28:e7:
8d:e9:3b:27:29:0d:d5:7c:00:3d:8c:58:c3:a0:bd:
c2:a1:3c:24:f6:71:3c:6e:2d:3c:e9:d5:7a:ae:4c:
e6:63:05:7a:51:7c:81:c4:17:d3:db:d9:31:91:a1:
df:08:36:a9:49:b0:81:92:c2:7b:c2:91:18:23:97:
43:4c:19:79:ad:f6:e9:25:8f:dc:fd:59:0c:e8:c1:
62:d3:8d:6f:5d:92:36:49:77:f0:7f:87:42:f9:5b:
04:b6:fb:6e:32:ed:09:eb:3a:11:82:fd:34:ac:01:
fe:fe:f4:97:11:af:d4:e2:46:a1:19:eb:ef:84:21:
ba:d6:3e:f3:ba:4f:5f:6a:b4:8e:fd:81:40:17:ca:
7f:a9:73:0d:6a:3c:2c:1c:69:f6:8e:98:8b:07:0b:
68:53:a3:a8:8a:f3:5c:f7:0b:1f:62:81:98:26:ad:
8b:a7:5f:f3:6c:06:2b:52:48:e7:62:58:40:7d:22:
d8:89:2c:5a:eb:bc:dd:7a:b3:66:57:8c:aa:fc:93:
9f:8f:cc:88:dd:88:23:74:df:4f:ff:02:58:e5:a8:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9E:88:9E:DC:8D:FE:8B:02:BF:73:69:CA:E2:A9:D0:76:72:1B:3B
X509v3 Authority Key Identifier:
keyid:60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e6:38:15:35:05:19:22:58:d2:6d:d9:83:a3:b5:47:60:b0:
85:69:28:e2:01:20:f8:ab:a5:b9:b9:e6:d4:39:6a:f3:2c:f8:
25:c7:b1:df:86:22:ca:a0:01:09:8d:68:11:07:ac:d5:b5:c1:
d1:95:8e:45:8b:38:d5:86:d0:5f:6f:50:c5:f1:06:9b:11:38:
01:18:bf:c6:b5:5a:4f:62:89:ae:84:fb:34:a8:41:42:bc:fd:
fd:50:7f:42:45:c0:7a:27:c2:8c:cb:05:ab:39:74:33:7d:a1:
f5:2b:fd:72:04:3c:bb:de:d7:ef:42:bc:5d:49:1f:4a:4c:24:
d4:70:89:42:72:c4:f5:0f:3e:2a:e0:ac:38:3e:74:f3:ca:14:
07:30:ce:06:a7:f8:bf:af:b0:9d:be:b3:99:1f:57:20:df:59:
b4:31:d8:c9:a0:51:ca:9d:c1:a5:89:a6:7d:d8:e3:66:08:18:
2f:cf:a4:5d:4e:f1:d0:a5:1c:90:50:b5:25:2e:61:8d:af:75:
35:ac:13:c7:12:68:72:af:ed:73:c4:6b:c7:19:4e:84:fa:60:
6a:2d:50:5d:52:0a:fb:0e:b3:22:42:60:11:6f:64:51:7b:d0:
76:fc:37:1d:68:c2:03:f4:25:0f:43:8d:8b:32:31:05:12:1b:
bc:4f:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:01 2026 by rpki-client