Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: xdb9qThPkdVGjZSRvjBp1jL8DUgUl9doe8lPxs72Kik=
Subject key identifier: 67:F2:11:A0:B5:F5:0D:4E:05:24:EF:15:EA:EE:9E:00:B2:10:1C:63
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 019D2771D98FB1260D8CA255B89C63DCB00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 02F5
Signing time: Thu 26 Mar 2026 00:01:05 +0000
Manifest this update: Thu 26 Mar 2026 00:01:05 +0000
Manifest next update: Fri 27 Mar 2026 00:01:05 +0000
Files and hashes: 1: IPEVX9NburliCOkL_8My8KZEvxc.roa (hash: vKtzd4qXyz9EWKAKarv5HXYhJ7hA2jvu9rmJAemDTXw=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: 95RBIR4F+JR+XpT6bv0jwoDvj7AZaAbt3/4ys7rruUM=)
3: g3UM-mxo9surPyGX-ua-Jw8Hwy0.roa (hash: rLTMTj/qJ9X8Z52HM7aUZCnlG5iT1wzURKa+BIyHlNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d9:8f:b1:26:0d:8c:a2:55:b8:9c:63:dc:b0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Mar 26 00:01:05 2026 GMT
Not After : Mar 27 00:01:05 2026 GMT
Subject: CN=67f211a0b5f50d4e0524ef15eaee9e00b2101c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:08:b4:0b:22:82:28:38:52:8f:3e:fd:ce:
61:7f:3c:ce:12:08:f7:f9:30:1e:26:b4:cc:5d:62:
b4:81:1d:19:68:bc:b1:ea:90:d0:44:4e:f0:3b:4e:
5c:b6:84:30:04:ed:74:73:1c:48:d5:ae:46:f1:6a:
e6:17:6f:c8:bd:58:10:de:d1:cd:bd:3d:c1:d0:0b:
0d:8a:74:b3:ab:a6:bd:a7:8f:23:65:6b:a4:4b:4d:
07:8a:23:c9:a5:9c:22:71:b2:23:22:79:df:d3:e5:
90:5b:80:24:fa:51:aa:d7:69:e4:f3:64:1d:36:48:
7b:1f:5b:10:36:60:fb:95:72:32:38:7c:9b:24:82:
fa:db:ac:66:61:9c:9f:f4:3c:43:51:cd:dd:9b:ae:
29:2f:4c:e0:d7:74:ab:1c:3d:34:7a:fb:ff:eb:f3:
d7:c4:52:da:d2:0f:dd:6c:a6:6b:8e:b6:d1:95:02:
23:76:f6:90:29:96:32:33:69:27:2e:3c:c7:21:8a:
a5:95:3a:fa:0c:98:87:38:45:ec:05:f2:09:1d:59:
46:f9:e3:ce:08:6b:a8:b6:2b:6a:46:8f:ed:f7:77:
fc:10:6e:3e:bc:ce:27:0d:f7:d1:8d:81:9e:6b:ff:
fa:5f:fe:a1:1a:b4:62:43:5a:fa:62:1c:0f:35:25:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F2:11:A0:B5:F5:0D:4E:05:24:EF:15:EA:EE:9E:00:B2:10:1C:63
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3b:02:de:71:95:d9:06:47:53:ed:cf:db:12:00:4a:2e:bc:
de:1d:5e:6a:5b:e4:12:da:d2:71:49:0f:32:29:01:19:f9:98:
fb:02:0e:7b:b1:7b:e3:15:c5:3b:dd:34:a5:fa:e7:f7:a1:95:
e0:f7:3d:96:c0:78:cb:73:6b:d0:da:8b:c0:fa:0a:40:43:0c:
b6:2a:df:01:83:60:80:0d:a1:e9:d0:ce:1c:58:e4:35:22:4a:
e3:9b:90:db:b2:04:d4:dd:56:4c:16:15:d9:8c:8b:10:6c:12:
b6:f0:d1:a3:f1:b4:ae:7b:8d:8c:0d:4f:17:61:4b:79:52:26:
f7:f3:f1:a7:28:0d:46:6c:34:14:b6:ae:0b:9b:a6:6e:dd:6c:
ce:a4:c0:2e:77:d9:30:7b:8a:36:26:be:b8:43:d7:14:a4:2f:
e2:ad:fa:47:0c:1c:3e:ce:55:f6:bd:04:5f:d5:e7:d2:85:e3:
56:dc:e6:9a:4a:82:77:37:b6:46:84:ee:81:95:e6:fe:ce:ed:
35:b8:12:69:3a:86:0a:de:08:09:9d:b9:b6:80:81:2e:c6:16:
bd:fd:c4:c1:1e:4e:10:31:67:6a:56:bc:38:fb:f4:7f:ec:19:
58:69:a4:65:2a:a2:04:bc:da:87:43:57:bd:85:71:0a:ec:1b:
e9:ba:51:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:48 2026 by rpki-client