Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.mft
File: YhBMyFNVHixMLSKBXsEcYMLVu8s.mft (raw, json)
Hash identifier: /LkrCpPpP6p0xDLnDKsZulDiW3bFxkkgyvkWVIKfNsc=
Subject key identifier: D9:66:FA:8D:D7:AC:AD:56:98:56:81:AD:BD:14:D2:9B:44:D2:26:35
Authority key identifier: 62:10:4C:C8:53:55:1E:2C:4C:2D:22:81:5E:C1:1C:60:C2:D5:BB:CB
Certificate issuer: /CN=62104cc853551e2c4c2d22815ec11c60c2d5bbcb
Certificate serial: 019D341A30325F90E7128E40F0360438B563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhBMyFNVHixMLSKBXsEcYMLVu8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.mft
Manifest number: D1
Signing time: Sat 28 Mar 2026 11:00:24 +0000
Manifest this update: Sat 28 Mar 2026 11:00:24 +0000
Manifest next update: Sun 29 Mar 2026 11:00:24 +0000
Files and hashes: 1: T-rY0qRo1e14m28Gif45TSalcCQ.roa (hash: uqzM/eYecGektorBHHReJyonRfAQRMoZKQLvLEOFZIQ=)
2: YhBMyFNVHixMLSKBXsEcYMLVu8s.crl (hash: fQ4y9/ArgFckylhXqaJ8YZvpcqJNVuLoaHZdCsEguQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhBMyFNVHixMLSKBXsEcYMLVu8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:30:32:5f:90:e7:12:8e:40:f0:36:04:38:b5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62104cc853551e2c4c2d22815ec11c60c2d5bbcb
Validity
Not Before: Mar 28 11:00:24 2026 GMT
Not After : Mar 29 11:00:24 2026 GMT
Subject: CN=d966fa8dd7acad56985681adbd14d29b44d22635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:af:8b:1f:4d:a0:cc:ee:30:7e:51:08:34:4b:
21:ad:f7:09:1b:23:94:8b:d4:80:ef:f0:7c:a8:a7:
26:e2:7b:2d:30:f1:33:31:ca:92:b0:29:91:ca:dd:
c6:f8:73:d4:15:70:fa:ba:09:00:37:88:d3:19:19:
54:2a:ef:23:87:a4:2b:a9:9f:7f:58:fa:5c:2c:47:
32:f9:95:37:08:d1:e2:43:d5:4a:b2:f9:17:01:cf:
a0:63:b3:74:88:75:14:94:d2:e8:03:00:7c:90:90:
bf:7b:fe:48:b1:96:99:c2:d0:41:32:b8:25:1a:e3:
92:11:82:4f:12:fe:69:de:53:09:48:b5:61:5b:01:
8f:57:77:21:f4:38:20:a0:57:b5:e0:0a:1c:b1:4f:
c5:b2:3c:4a:86:65:aa:d3:83:44:cd:2b:bd:df:15:
c7:2f:5e:1b:0f:a4:8a:e3:83:5c:f3:d3:8f:48:db:
b9:39:65:5b:7c:20:3a:d4:35:6f:9d:b9:19:ae:b5:
3f:f8:b2:e5:a9:a8:57:97:6f:a0:21:b5:df:1e:49:
17:5d:62:7a:97:c6:38:15:6c:e8:5f:03:6d:a2:69:
9b:b9:b2:94:4c:e0:18:0a:3c:f5:6e:e5:56:74:36:
64:a3:1d:39:18:25:90:7c:36:22:99:52:52:3b:62:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:66:FA:8D:D7:AC:AD:56:98:56:81:AD:BD:14:D2:9B:44:D2:26:35
X509v3 Authority Key Identifier:
keyid:62:10:4C:C8:53:55:1E:2C:4C:2D:22:81:5E:C1:1C:60:C2:D5:BB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhBMyFNVHixMLSKBXsEcYMLVu8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bd:14:fb:83:0c:f7:67:41:4f:2e:ee:8f:32:7f:20:47:ee:
0f:7f:16:86:24:6c:69:40:dd:6c:af:03:54:85:26:36:4e:f5:
fb:1e:15:4e:54:2f:1c:93:04:bc:9a:9a:57:5b:42:7d:73:e2:
90:f1:c6:ae:41:b9:51:7f:f5:e3:2a:2f:bd:11:67:04:43:93:
27:c1:9d:8b:ca:61:7f:ac:8e:7f:1a:5b:01:0c:01:cc:9b:43:
50:ec:7a:b0:f7:2e:e0:0b:c1:5f:09:60:ca:57:b5:a1:9a:ba:
69:36:b7:72:3c:1e:fc:2c:84:6c:da:21:ca:1c:f4:12:bd:29:
79:d1:37:05:16:d4:67:af:77:50:e4:7a:06:fd:24:79:d2:7d:
48:28:ac:11:a0:0a:c8:92:4d:cd:09:58:36:7a:f3:07:a7:e4:
3c:f6:72:4a:ad:6e:44:d7:8e:5f:5a:e0:cb:73:73:14:1c:60:
7f:77:84:c1:14:58:95:5e:ad:d8:32:6b:e0:4c:b2:b9:be:c2:
bb:e8:5b:d3:a9:f1:1e:ec:32:77:dc:c5:ac:ea:06:c6:b3:93:
03:f7:dd:1c:ef:0e:37:2e:91:de:6a:f7:09:36:bb:58:de:58:
92:90:c8:38:0a:17:d6:27:dd:25:90:6e:79:bf:71:0c:d6:45:
a0:0c:e2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:30:01 2026 by rpki-client