Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File: YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier: uegt9RpVkKQ5L4H2XzlDdtFQWATW11VrkpZDUFJ0Ozg=
Subject key identifier: D9:56:BE:42:13:F4:09:C1:16:CF:75:93:42:F1:82:79:25:16:7D:2C
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 019D2816CA7A3AF86671A5F25A3C8EFA05BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number: 0CAE
Signing time: Thu 26 Mar 2026 03:01:15 +0000
Manifest this update: Thu 26 Mar 2026 03:01:15 +0000
Manifest next update: Fri 27 Mar 2026 03:01:15 +0000
Files and hashes: 1: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: vR0TJAW6kw5hLsQeCGAkH4e4EhxZEG5CJaACQOFSQ18=)
2: n9mxzIt_205s9vyeaLn8CBdcCG4.roa (hash: rvZ5m2zISXN1TJw2DOfdTsy2gRGtTRFcUGePQPD44jY=)
3: uT_DZnppDbYyGpbRufk93-G-qXc.roa (hash: DhGqIEL5HRNKYGVeysWOoXm6c538KCGb6awXVVDvM3c=)
4: zXN8Zo903MoyG9swu9ptS1d7Y-o.roa (hash: wf4nwKfhrGscwzAC+PKo2qMsSU5af4zzL/Bk9hi/rJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ca:7a:3a:f8:66:71:a5:f2:5a:3c:8e:fa:05:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Mar 26 03:01:15 2026 GMT
Not After : Mar 27 03:01:15 2026 GMT
Subject: CN=d956be4213f409c116cf759342f1827925167d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:33:d5:f1:eb:db:aa:e1:0b:69:87:3b:f2:
88:9c:98:70:ee:c0:ab:49:ec:bb:95:3e:fa:2b:ad:
05:0e:4e:9c:04:20:bc:49:37:c1:df:98:73:9f:6b:
17:71:0a:e5:7e:5d:29:32:df:df:5d:08:03:01:b3:
9c:59:7f:31:f6:db:ec:6a:48:32:af:05:1c:a3:ae:
7a:17:04:d6:ee:d2:1d:3c:cd:63:90:17:42:f7:e6:
d6:9f:c5:03:ba:31:71:b6:27:b2:d0:11:11:61:47:
b7:0e:6d:41:c9:df:0f:ff:0d:89:d1:15:a1:c5:80:
f0:48:98:c2:e0:e2:eb:86:ee:e3:41:2a:d4:b0:19:
ea:05:c8:3f:7d:82:91:94:3f:dd:25:7d:82:2e:15:
7d:0c:ae:ff:a5:9c:21:22:1e:75:84:a0:88:27:84:
8b:fd:91:1e:23:f1:d3:84:8d:9b:f5:ed:22:ce:8a:
9b:80:f2:38:04:ce:c4:bb:3b:cb:e9:98:e7:e1:b7:
df:5b:0c:41:87:03:6b:a3:0a:62:2f:9d:59:97:e6:
12:98:9e:98:5b:72:8e:7b:ad:b1:d9:77:5e:a7:e1:
5d:da:e1:7f:60:6c:51:9c:93:5e:fd:ad:42:9d:eb:
0a:26:ce:22:2b:d1:80:9b:62:77:ef:6b:6c:4e:a4:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:BE:42:13:F4:09:C1:16:CF:75:93:42:F1:82:79:25:16:7D:2C
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f5:e3:8d:59:ba:ed:8e:f5:2d:fa:a9:a4:53:a9:55:16:fa:bc:
51:b4:f6:50:ed:81:25:e4:0c:aa:38:81:4f:5a:1f:2f:87:1e:
8f:f4:cf:b1:8b:81:44:ba:d9:c1:d9:4d:c4:de:75:34:b6:ff:
7e:2b:90:db:09:89:c0:77:db:9a:b9:cc:f9:89:35:3c:2f:2f:
04:c1:2f:ce:d1:bc:88:9c:51:cd:e0:0b:a4:8c:48:38:23:50:
3a:0e:4f:ca:0a:88:27:81:61:0e:48:30:3f:cd:84:e1:40:12:
f0:4a:6e:d7:96:8c:6d:35:ea:d1:da:be:60:c2:9e:4d:86:5d:
9d:fe:ac:f2:28:8a:6b:8a:78:6e:3b:88:e9:bc:35:66:a4:7d:
0c:6f:4f:1d:f9:d1:2c:3d:84:37:0f:a1:d3:cc:39:e3:cd:4b:
5c:19:60:fd:95:c5:b9:cd:bd:9b:94:81:43:c1:c8:30:da:07:
0a:fd:8f:a7:a2:4b:4f:2d:38:a2:f8:76:d8:dd:bb:1f:62:4f:
90:3c:4d:a6:ce:c2:2a:79:8b:84:ba:7a:78:43:4b:23:37:82:
b8:10:48:7c:74:e4:e9:bc:3f:7a:09:80:90:74:6f:3c:ce:21:
3d:5b:0d:55:51:4d:b5:57:cc:c9:ab:85:f7:65:00:c1:7b:ee:
08:97:61:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:05 2026 by rpki-client