Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
File: ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft (raw, json)
Hash identifier: JovJeC+gRwjdoyiHQRaAdIdkrE+0oIHit9MrXfPhQM8=
Subject key identifier: C4:E9:E2:E1:AB:71:5C:57:8E:68:07:6D:63:15:59:E3:47:D0:4E:C2
Authority key identifier: CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
Certificate issuer: /CN=ca09149f34784f5b202c56761b01d35dd02569cd
Certificate serial: 019D265F98A154D4E791E667C6BAD56E042E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
Manifest number: 0629
Signing time: Wed 25 Mar 2026 19:01:32 +0000
Manifest this update: Wed 25 Mar 2026 19:01:32 +0000
Manifest next update: Thu 26 Mar 2026 19:01:32 +0000
Files and hashes: 1: saLkMBpBsWlxL5YAPxjxZxzwLm0.roa (hash: HWMfF/NkSXptcowH52WnAePE/1Sax5XIolYonHNfsPw=)
2: ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl (hash: jm+Fb0GLwe8+R1eA0z4jcDzPVeJtjumb30bUnygkmBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:98:a1:54:d4:e7:91:e6:67:c6:ba:d5:6e:04:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca09149f34784f5b202c56761b01d35dd02569cd
Validity
Not Before: Mar 25 19:01:32 2026 GMT
Not After : Mar 26 19:01:32 2026 GMT
Subject: CN=c4e9e2e1ab715c578e68076d631559e347d04ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:1d:d0:ba:df:48:bc:ec:22:dd:e5:c6:7d:
c0:05:6f:bb:ee:02:22:87:b2:9d:02:2d:de:97:66:
f0:8a:25:07:86:78:8e:67:b4:aa:5f:98:6e:76:80:
9d:9e:b8:83:b1:a1:9e:24:2f:29:20:02:36:a4:b3:
3a:30:d7:5b:1a:d6:c5:72:cb:00:ec:72:94:89:50:
90:56:45:0c:ff:89:b7:16:c8:53:fa:84:e4:73:b7:
27:69:29:1c:e1:6b:f7:27:d6:fd:e6:79:31:30:1c:
84:32:17:17:ca:b0:09:a8:23:8d:aa:ca:0c:37:e9:
8e:85:2c:b5:68:8d:fa:41:aa:4d:92:78:c2:f8:12:
55:87:ec:6e:1b:39:f4:87:1c:02:64:45:25:17:e2:
55:49:e0:26:3a:a7:99:4c:d8:90:46:ca:94:79:2d:
68:a2:2b:87:08:45:16:6d:bd:01:d6:1f:cf:e7:4e:
c9:46:4c:fb:50:01:5b:5c:2b:1b:14:ca:89:8e:72:
9b:58:5e:5d:32:9b:3c:e7:f1:87:61:86:fc:a9:47:
78:73:38:25:fd:c0:48:e7:01:dc:4b:c3:94:7a:5c:
fb:34:db:40:df:8d:66:f1:5d:52:b5:47:a6:61:74:
3b:34:07:18:46:84:70:36:ea:e0:68:a4:60:f7:b2:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E9:E2:E1:AB:71:5C:57:8E:68:07:6D:63:15:59:E3:47:D0:4E:C2
X509v3 Authority Key Identifier:
keyid:CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:80:ad:78:e3:5f:15:4c:0b:5b:7c:1a:54:8b:2a:4b:3b:22:
c5:d0:39:97:b5:e3:50:b1:fe:fb:01:1a:99:ba:69:9c:18:1f:
ad:8b:36:9e:08:f4:a3:d9:1c:11:ef:d0:46:1d:f9:7b:84:eb:
f1:56:42:d0:eb:12:34:69:f8:c2:5a:6f:dc:b1:fa:33:49:65:
97:24:8f:ef:e7:12:b0:b9:b5:76:39:53:c6:ea:f1:ee:12:88:
d1:06:18:8b:9d:a8:f9:09:a9:d5:b2:36:33:86:e3:ad:13:b9:
35:8d:93:2d:c8:db:1d:f4:bb:57:3c:58:91:05:5a:c5:18:fc:
3a:21:12:2d:e9:7f:04:52:b3:a1:52:e6:79:6b:04:92:1f:b6:
07:3f:2c:ad:ae:87:6c:2f:20:5f:9e:58:09:5d:2a:df:ac:16:
6e:70:57:5e:ad:88:44:18:f8:d6:d3:07:84:46:be:68:45:77:
9a:0a:3d:c2:1b:67:cc:64:26:6b:8a:03:7e:df:7a:b7:ea:30:
be:5d:8f:be:d0:8c:69:1f:ea:2a:18:ae:c0:e4:86:12:f3:e7:
45:49:aa:21:2a:69:f6:1b:2d:d8:43:cb:31:f6:9b:25:51:01:
45:42:0e:f9:1a:6d:f6:2c:2f:90:92:5e:ca:4f:f5:c6:00:f7:
0f:f6:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:01 2026 by rpki-client