Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: 61zODotaUXXCsnLl37xhDO1j5GE/sdymY5mYZbR/YUk=
Subject key identifier: CB:7D:CC:F9:AE:DF:60:0E:13:DF:FC:6B:76:1B:11:AB:DA:53:64:38
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 019D28846E23EE3DDF15E8C96077B31D8052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 144A
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: ET5vMhLbSdWsUS7cNiMD0Da89x0.roa (hash: +AkKc2WCnmOlPOxnIiAKu7no0yZQrgr6+XgFHwBRgZU=)
2: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: Ahogt442hYTE5bqApWF1NG1qAJ7BzlE2A+tFPpGBk1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6e:23:ee:3d:df:15:e8:c9:60:77:b3:1d:80:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=cb7dccf9aedf600e13dffc6b761b11abda536438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:b4:56:25:11:61:41:06:88:d7:f8:cf:fb:
8a:f9:e4:29:c4:7d:6b:43:fd:1d:95:4a:1c:d2:5a:
d1:dd:48:55:6b:67:5d:42:bf:1f:3e:e0:57:3b:8c:
22:98:ac:63:75:fd:a4:73:59:9c:3e:4b:36:65:a6:
d5:73:28:99:3f:28:f8:29:99:98:e9:3d:13:37:72:
ea:91:9f:12:5f:b1:0b:7c:7d:72:5a:c1:36:8a:16:
31:c9:1d:17:0a:73:fd:c0:28:81:bb:d1:91:c0:af:
71:28:92:03:c4:01:a9:83:fc:8d:6b:a2:ed:80:b5:
9d:bf:6c:d7:67:fa:4c:e6:ea:4c:35:1b:48:95:36:
5e:89:ee:12:ad:10:2e:1f:c3:ea:26:d5:72:48:3b:
52:5c:0c:b5:b6:11:da:ef:f5:b2:34:df:e7:79:ab:
3c:a0:2f:36:01:05:2e:04:f2:15:ae:f9:fa:f2:49:
1c:02:23:60:11:6b:c7:5f:1d:54:76:0c:55:0b:bf:
ce:16:d1:c3:bd:1a:69:ec:6c:98:cb:e1:2a:f1:97:
f0:f2:84:3c:b2:94:3c:8e:ea:60:90:85:62:9e:f6:
fc:f9:e7:d1:2e:56:1d:17:8f:f1:f6:0e:fd:be:2d:
a6:9d:3e:b2:16:f6:a7:ef:9b:34:70:48:49:01:5c:
84:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7D:CC:F9:AE:DF:60:0E:13:DF:FC:6B:76:1B:11:AB:DA:53:64:38
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:31:44:cf:14:5c:84:26:ce:2f:4f:b1:6d:74:df:ba:6e:a6:
e2:9a:6b:e5:8d:ba:00:95:56:3b:94:27:66:a0:3b:ee:0b:5b:
b5:fd:ab:10:44:22:d5:70:4e:08:f8:e3:e0:24:c9:36:7d:e5:
94:6b:00:f4:85:ac:99:82:78:7f:f2:fd:ea:14:fc:96:68:23:
fb:fa:7c:3b:c2:c2:64:5e:ab:62:af:d4:fe:74:f7:a6:0d:97:
14:89:c6:f7:c4:69:05:c8:6c:3c:8e:09:91:e2:d9:e4:21:47:
13:56:0d:e7:b5:23:e5:01:6f:4f:bc:84:46:87:8a:27:4d:f1:
b6:19:ea:38:1f:ac:7f:af:9c:07:90:1f:9f:67:5e:a6:74:13:
75:df:45:30:4d:54:01:de:4c:86:07:70:a8:af:8e:db:7b:16:
d7:9b:05:cb:6c:46:03:d6:39:66:dc:9c:3b:4e:62:3d:8f:f6:
e7:4b:a3:72:8c:8e:70:cc:5f:83:e8:b9:41:ea:9c:94:61:8d:
e6:bc:bb:af:da:1f:f9:a3:09:39:96:19:6f:74:10:47:5a:bf:
9d:e9:5a:a2:0c:94:d3:1d:41:61:d2:bf:4f:e6:c2:44:2c:57:
6c:f6:af:58:b7:65:02:67:dd:dd:00:a4:c1:b9:f0:e3:79:5e:
20:6f:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:06:49 2026 by rpki-client