Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: 6kMDyxY7ERjeaJ39PTSr2LKiVMGC+LLBzjBILkznMQg=
Subject key identifier: 1E:4E:7B:1C:3F:A4:52:89:D7:BB:0D:9F:07:EC:26:96:10:1B:DE:AB
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 019D28F24364C08BE2A9B8A5B8B5F48BBA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 132C
Signing time: Thu 26 Mar 2026 07:00:58 +0000
Manifest this update: Thu 26 Mar 2026 07:00:58 +0000
Manifest next update: Fri 27 Mar 2026 07:00:58 +0000
Files and hashes: 1: ICH7QlH8-My8EF2NHU5TQA04o8k.roa (hash: tNyfEnCLQhnnGR56E80TEWwMugIJUGjzMZjCruGv2JM=)
2: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: 3nzE6/rmG1VGKtm6wM204Hdt6zWZjTMJCYyc9Brx5zo=)
3: sRtXhXnTV3BV5O7Uk5pPU6e6DHY.roa (hash: kK2zj8c+pEZD+bWtboW9Noev8kavvORxA7HxKk4tpBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:43:64:c0:8b:e2:a9:b8:a5:b8:b5:f4:8b:ba:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Mar 26 07:00:58 2026 GMT
Not After : Mar 27 07:00:58 2026 GMT
Subject: CN=1e4e7b1c3fa45289d7bb0d9f07ec2696101bdeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:a1:23:ed:d4:ac:87:12:4e:99:47:a8:f5:
9d:70:8f:40:ff:e7:30:f0:be:e2:d3:e9:35:3d:45:
b2:52:61:78:c9:41:69:82:0e:a8:2a:ae:3f:45:8c:
fc:7d:59:74:20:ef:9d:45:2b:56:9a:d1:d0:d5:03:
20:39:d2:2e:11:07:72:c0:c4:f5:0c:4b:63:b7:f9:
63:9a:8f:69:f7:e0:bb:39:fc:84:1c:64:91:ac:b7:
d6:ed:7b:21:8e:a3:71:48:70:d1:38:40:e7:aa:df:
8a:f3:b8:30:a3:51:a0:75:c8:7e:9e:df:5f:c6:37:
ff:0d:26:c4:69:ea:06:a8:74:20:e9:62:51:e8:67:
9e:ec:82:94:f1:78:6e:3d:ba:4f:f6:39:f9:75:03:
36:9b:a0:62:a0:a8:9b:08:39:0b:1e:5d:46:39:91:
cf:18:bf:70:d1:9a:e7:4c:23:99:36:27:96:16:56:
31:1d:6a:49:9a:76:cc:07:22:67:0c:a9:09:76:28:
6f:c9:3b:b0:65:26:dd:1a:c1:db:76:e8:d8:c4:01:
16:32:1c:8a:f8:db:21:19:5e:6e:f8:ba:4c:4d:26:
53:7a:6e:be:a6:10:43:c9:e5:db:51:be:b9:27:7b:
f6:40:bc:40:74:2c:3c:42:6d:f4:29:bb:a2:36:56:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4E:7B:1C:3F:A4:52:89:D7:BB:0D:9F:07:EC:26:96:10:1B:DE:AB
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0c:7b:02:ef:78:6c:84:4e:07:da:67:55:c9:d5:d9:10:a4:
d9:95:0f:37:86:62:71:a9:76:53:83:92:78:10:0f:11:74:c7:
0b:1b:74:44:c5:88:be:0a:c4:64:cf:75:df:59:94:07:0b:02:
2a:bd:81:4c:0e:31:41:40:88:d9:cf:d0:84:c3:c6:fc:bd:74:
d1:33:80:ca:af:37:3d:8f:99:ef:e7:30:ca:65:b3:03:b2:7e:
cf:17:df:65:24:6c:18:3b:99:71:42:c6:88:b1:cb:0b:59:b7:
10:46:0d:43:4e:15:19:16:d4:18:3c:d3:72:82:ea:ef:67:77:
6b:c0:30:44:86:6b:d4:72:fa:d3:49:48:3a:1f:6a:b4:96:3e:
ec:b5:3a:72:45:b4:db:32:e9:5b:5c:e4:9b:1a:98:70:98:75:
35:ab:59:2a:d6:ca:7a:0c:fd:7a:ae:a8:e4:14:74:91:5a:73:
fb:60:21:3c:fc:6b:de:42:7c:05:80:38:2e:bb:f0:f7:ef:6d:
35:76:bf:dd:1e:da:ff:51:88:9d:56:d5:8a:13:7f:6d:6f:02:
62:98:dc:65:a3:4c:12:ff:9f:18:09:59:f6:ca:ed:4f:1a:b8:
bc:e5:22:4a:45:6c:30:b3:84:9b:18:9a:99:bb:3d:c0:c8:e8:
f4:38:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:06 2026 by rpki-client