Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
File: YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft (raw, json)
Hash identifier: ay7Y8WxgG0ejWgXGs8QOIU0MtF8nnr74T+BaQEAmTD8=
Subject key identifier: 13:A9:BF:42:FD:E7:C3:A5:5C:D6:68:49:A6:F6:99:71:EA:43:11:57
Authority key identifier: 62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
Certificate issuer: /CN=62719c6d8b9950378a7489315fb078111a18ad55
Certificate serial: 019D26CD76A1804308C657B4E5D808DB1FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
Manifest number: 019F
Signing time: Wed 25 Mar 2026 21:01:32 +0000
Manifest this update: Wed 25 Mar 2026 21:01:32 +0000
Manifest next update: Thu 26 Mar 2026 21:01:32 +0000
Files and hashes: 1: VUDvlZ3nSAHzKEKmaHgmcWJvSvw.roa (hash: iFi7PsloEbqYTaE+ZoaxZ5YffALEaqzMtJKrKwdONy0=)
2: YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl (hash: i25DPIGQl5Hi1/deFgW9xUKqfWneNloEQIBKgGaTfOY=)
3: sJpbC87SMVa4vt5NI5bryF6Soa0.roa (hash: Kq0qKJZ6NJFyN4KPgrXNyOIY6c6Ykn/I7S4MDDkskPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:76:a1:80:43:08:c6:57:b4:e5:d8:08:db:1f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62719c6d8b9950378a7489315fb078111a18ad55
Validity
Not Before: Mar 25 21:01:32 2026 GMT
Not After : Mar 26 21:01:32 2026 GMT
Subject: CN=13a9bf42fde7c3a55cd66849a6f69971ea431157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:82:16:c1:ee:9f:6a:9d:20:b1:14:83:6f:
cd:66:d5:29:67:c3:dc:39:82:f0:27:5b:0f:0a:e6:
41:26:b7:e6:36:d7:0c:ee:89:bd:a4:74:31:45:29:
68:af:64:aa:d5:cf:21:44:a5:b5:6e:1c:e4:29:a7:
a5:cd:6e:72:b4:f8:f7:8f:5c:18:d0:42:f8:86:8f:
e2:a0:d6:82:56:5d:fe:91:1e:0b:34:60:e6:f4:ca:
59:1b:ff:94:55:32:ed:0f:c4:76:ed:c7:3a:11:6c:
ac:5a:d5:07:ca:02:e6:0c:a9:2d:7e:c8:67:60:07:
46:a9:84:8d:69:95:d1:50:28:71:ac:b0:86:e5:b3:
22:b3:45:6f:7d:1f:86:62:70:64:5a:90:3f:d1:cf:
4c:5a:8f:ea:76:1b:61:82:3e:a1:23:d9:f9:74:d7:
27:e4:1e:a6:46:fb:61:c1:87:47:9c:15:c4:40:b6:
d3:24:ae:69:1a:09:8a:74:33:c4:6b:59:53:1a:cd:
54:ee:81:d7:40:3b:00:5f:fa:a5:e5:08:d0:76:59:
85:ae:30:52:c5:df:1b:46:30:b2:57:e9:56:da:f7:
43:bd:de:2e:5b:db:93:3b:e1:9b:5e:82:28:19:68:
e6:f7:cc:84:62:07:b8:47:02:80:e1:69:13:0b:64:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A9:BF:42:FD:E7:C3:A5:5C:D6:68:49:A6:F6:99:71:EA:43:11:57
X509v3 Authority Key Identifier:
keyid:62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:db:a1:a4:d7:6f:2c:71:2b:54:ee:c5:4a:18:0d:df:0a:e5:
a0:41:45:13:f7:0b:03:0b:01:ee:34:b1:ce:e2:c9:75:c1:d4:
dd:23:d1:9e:02:89:5e:59:14:0f:40:b4:88:50:4d:52:51:b9:
09:d3:6d:77:cf:95:44:f8:67:ba:bc:5c:c3:d9:de:fa:e9:1f:
78:9b:cb:0d:2a:46:7e:61:d0:a5:7a:f1:7f:01:e2:0d:5f:03:
41:3b:87:25:71:a0:2e:4a:2f:6d:9d:7e:b9:14:79:9b:c6:94:
31:5b:1d:11:a6:5d:12:03:89:01:ce:b8:32:75:fc:e5:83:ed:
2d:0e:92:64:e4:41:bc:1f:24:b8:60:1f:38:85:b6:11:8b:87:
bd:35:94:b7:a4:08:50:69:4b:ff:db:07:be:d0:58:27:9a:65:
67:2a:24:63:3f:64:af:31:d0:6d:9b:98:74:64:10:5d:ac:32:
99:a0:eb:8c:d1:a3:8d:be:a7:08:09:92:ac:24:51:7d:5c:ee:
ff:0d:76:cb:1d:c5:e1:c8:e7:ff:f2:93:be:c5:08:5f:d7:1a:
66:14:8a:20:a9:6e:89:22:57:29:af:e3:e0:1b:cf:a3:0c:fd:
85:2e:ea:f9:ce:15:12:41:0c:f8:0f:1f:6b:33:c5:47:22:1a:
e2:48:e3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:33 2026 by rpki-client