Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.mft
File: YGJTXxy15qOxIa5FTarA7I9IguA.mft (raw, json)
Hash identifier: 71Wukeu5OW48gBDR+qXWZC+mlEoIJDx4p7exja+8/Ss=
Subject key identifier: 9F:2A:55:AE:1D:62:C8:AE:F3:E5:47:8D:89:BB:56:A6:E2:59:82:05
Authority key identifier: 60:62:53:5F:1C:B5:E6:A3:B1:21:AE:45:4D:AA:C0:EC:8F:48:82:E0
Certificate issuer: /CN=6062535f1cb5e6a3b121ae454daac0ec8f4882e0
Certificate serial: 019D26CD0A4DDF1CFD4D1FCDB5485F8D5708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGJTXxy15qOxIa5FTarA7I9IguA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.mft
Manifest number: 3B
Signing time: Wed 25 Mar 2026 21:01:04 +0000
Manifest this update: Wed 25 Mar 2026 21:01:04 +0000
Manifest next update: Thu 26 Mar 2026 21:01:04 +0000
Files and hashes: 1: 1BRhgtJA35xnIWmejycuk647-Ls.roa (hash: JqxLysLlgCUW3lKOcvDTbWR1yBUeuWUhf/40tgJNSQ0=)
2: YGJTXxy15qOxIa5FTarA7I9IguA.crl (hash: UH+q2+MCmbsDY9FmrnM1U0WZsfPxYQtSPE7Js9L8wOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGJTXxy15qOxIa5FTarA7I9IguA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0a:4d:df:1c:fd:4d:1f:cd:b5:48:5f:8d:57:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6062535f1cb5e6a3b121ae454daac0ec8f4882e0
Validity
Not Before: Mar 25 21:01:04 2026 GMT
Not After : Mar 26 21:01:04 2026 GMT
Subject: CN=9f2a55ae1d62c8aef3e5478d89bb56a6e2598205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:ed:81:b6:10:e6:e0:47:2c:95:43:af:a3:
01:b0:5b:2b:7b:8d:e7:96:2d:40:71:b8:24:01:c5:
4d:97:fb:2a:f8:eb:2a:51:b3:92:ff:8e:af:0c:9f:
d5:5c:3f:64:8a:9b:eb:3c:5c:80:7d:88:bd:bc:15:
ff:d4:48:39:f6:7f:26:d5:e1:9f:7b:68:c6:9c:c3:
12:89:b3:e8:2a:81:09:4a:ae:f8:8e:e9:17:34:67:
4f:ba:9a:89:ef:11:e3:db:cf:cf:61:4d:af:21:50:
8f:81:52:5c:5b:55:45:78:31:08:fb:9a:cc:40:0d:
f5:4c:99:49:3b:07:21:19:53:1d:65:b3:63:93:38:
fa:e3:ee:af:f1:ea:49:9b:8d:ac:f4:f0:82:d9:1f:
81:e0:18:c4:8f:72:d1:4b:08:e0:f2:e9:3b:aa:06:
77:86:96:a2:74:c8:08:9d:db:d4:8a:cc:77:9a:eb:
38:43:42:d7:2c:ad:07:71:81:ee:6f:21:61:67:0f:
1d:41:ac:d3:06:28:07:e9:97:9d:fb:fc:0a:5d:a8:
f5:44:04:8f:67:8e:63:66:b3:df:6f:1c:c2:a0:56:
ea:eb:7c:34:5f:81:98:b5:a0:5a:3d:09:7e:26:7a:
f6:b5:4b:1f:79:b7:0d:ee:60:4c:53:6a:06:ca:b2:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2A:55:AE:1D:62:C8:AE:F3:E5:47:8D:89:BB:56:A6:E2:59:82:05
X509v3 Authority Key Identifier:
keyid:60:62:53:5F:1C:B5:E6:A3:B1:21:AE:45:4D:AA:C0:EC:8F:48:82:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGJTXxy15qOxIa5FTarA7I9IguA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:40:e3:c0:e1:0f:3f:cd:fd:e7:6a:55:b9:6f:79:9b:6e:e5:
f3:0b:e3:16:ef:f7:dd:6e:f8:df:8c:8c:37:28:b7:72:a0:39:
0b:e5:01:73:72:4b:7c:65:b2:9c:17:1f:dc:7e:fa:2d:b8:bd:
81:f6:12:2c:fc:5b:b9:ca:05:7b:39:40:37:a3:9f:63:6b:4f:
5d:e2:29:b3:2b:3a:93:c8:19:f3:b7:d3:ca:76:77:ca:d9:45:
26:d9:a0:e2:63:75:57:07:e0:41:ed:e3:fa:94:a2:79:24:a8:
6e:11:87:ae:2f:40:d1:ef:b6:79:0f:99:a3:b2:5b:80:9f:06:
c7:f2:19:17:8a:2b:8d:21:f9:26:94:45:e3:e3:11:c0:9d:a6:
c5:80:9c:b7:b7:0b:e8:17:5e:45:f3:a7:64:fd:0b:8f:3e:d8:
88:55:33:93:7c:c8:1c:6d:64:f2:ee:a9:4d:9d:4a:da:50:bd:
c2:2f:0e:26:f3:24:c5:8c:a9:a2:bf:b2:ab:ad:32:3f:dd:59:
b0:36:80:06:54:b1:31:52:c6:c8:17:72:97:bb:8e:46:55:a3:
f0:13:80:8a:05:bf:9d:0c:0d:73:2d:31:05:aa:29:a4:57:07:
52:7d:05:c5:96:87:14:2f:3c:78:0b:60:00:7a:f4:70:e1:61:
1d:05:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:31 2026 by rpki-client