Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: v8po1e0EuAvzQpCmYh0OuaHyUanWz+BgPW8zQAFdyP4=
Subject key identifier: 63:11:13:51:52:B1:7A:41:A0:0A:B0:03:AF:AC:85:41:8A:5E:2B:60
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 019D273AFB065E67579F370E6F8F41544A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:01:09 +0000
Manifest this update: Wed 25 Mar 2026 23:01:09 +0000
Manifest next update: Thu 26 Mar 2026 23:01:09 +0000
Files and hashes: 1: IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa (hash: 9nBExfSnL3g+4CNDTe8481JrkpEVyvy2139EXebjOIs=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: pa5XYQyAhBOIV45rRSc+fiFc1ByaE6lBJ7WyedMzDLM=)
3: vNHV1DYtOsfUinz5gwCFoBzKiIg.roa (hash: OIxUV31cdJf2l/w+qSDbXSkKEcQlTRfi/zGOENFvc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fb:06:5e:67:57:9f:37:0e:6f:8f:41:54:4a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Mar 25 23:01:09 2026 GMT
Not After : Mar 26 23:01:09 2026 GMT
Subject: CN=6311135152b17a41a00ab003afac85418a5e2b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:11:6c:d3:83:5a:b5:8e:37:3a:d3:7e:67:
40:57:22:c6:69:c7:e3:95:b8:f7:99:89:4c:4c:81:
c2:9b:e9:b9:79:db:dd:48:b4:93:92:d1:04:8b:d7:
24:36:48:1f:2f:3e:25:5e:99:67:a2:43:44:ec:72:
2f:15:19:ac:35:2e:b6:46:3d:63:30:53:fd:b9:48:
ad:c5:11:e7:1d:25:5f:b6:6d:40:97:7b:eb:87:0c:
e2:da:b4:2e:b5:65:b8:70:9b:10:a3:69:32:c3:20:
1d:cb:ef:f2:e6:f8:ff:f2:d2:72:07:bd:a7:99:2a:
c6:e7:fc:6b:93:bb:73:ff:3a:43:24:e1:66:2e:30:
92:b0:0d:e1:4c:1c:9c:c6:b4:5e:6e:a4:73:8a:bd:
d0:b3:a9:12:2a:0d:ce:c5:d2:c1:f2:a9:f3:3a:5d:
9c:38:0a:bf:f2:c8:c3:be:3d:23:fb:d3:19:1a:dc:
47:33:54:3b:fb:75:81:d7:33:c4:9f:73:e5:f1:26:
b8:a4:cc:eb:4a:56:5f:14:ac:cb:38:2a:a8:ea:e0:
09:9b:72:d6:6e:a3:fc:f4:c7:72:4f:71:93:f7:9f:
38:8f:69:b5:d1:02:4d:e7:dc:fe:79:38:72:ae:b9:
7e:81:9d:00:db:f0:2d:93:81:54:35:ed:78:52:2e:
74:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:11:13:51:52:B1:7A:41:A0:0A:B0:03:AF:AC:85:41:8A:5E:2B:60
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:eb:eb:83:a8:d1:76:40:0f:78:05:53:e7:85:37:e0:4a:14:
a5:8a:19:55:dd:d6:20:b4:47:c0:1f:c3:27:29:96:63:07:42:
cf:bc:ba:2e:f1:54:96:f2:49:f0:77:30:c8:f2:e1:db:49:ff:
e0:cb:4e:d4:31:3e:7e:21:cd:4a:76:db:e5:91:18:38:1f:3b:
82:d1:d0:00:2a:f3:22:c1:ac:21:dd:5e:ad:3e:b8:d5:93:7a:
c7:22:d9:46:a2:81:6e:f1:78:c2:fb:e4:a2:a9:9c:67:db:6b:
bf:10:79:f7:3e:68:45:10:90:7e:11:df:a7:8a:8c:11:0a:e0:
12:dc:82:da:74:80:5c:fa:94:33:6f:5f:1b:a1:49:68:25:39:
3b:9d:57:37:fb:c3:bf:d3:64:35:9c:be:b1:4e:15:49:80:07:
95:49:88:b9:45:c1:5b:82:7f:61:27:bc:b3:db:34:ec:e1:14:
d9:b6:0a:08:4c:61:a8:1b:e3:17:95:fb:6f:6c:e9:bb:49:33:
9a:d2:7d:6c:fb:b9:f1:69:3d:e1:43:d1:ef:f4:54:f4:55:5b:
9b:de:7c:28:d4:e3:cd:24:de:bc:73:39:b4:13:06:99:3c:1b:
6e:87:3b:2b:46:e9:cb:25:63:ad:54:a7:81:80:f2:1f:83:80:
80:7f:43:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:25 2026 by rpki-client