Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier: ysnXg98GrA5SVEkuB4/HTKKlfpIYVRtTCx/kmx3GzBo=
Subject key identifier: B1:33:D4:08:F9:A8:6A:1B:86:66:D1:69:2A:68:78:C9:23:61:DB:12
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial: 019D273AC876032C3007BEB09821CB2B66E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number: 062E
Signing time: Wed 25 Mar 2026 23:00:56 +0000
Manifest this update: Wed 25 Mar 2026 23:00:56 +0000
Manifest next update: Thu 26 Mar 2026 23:00:56 +0000
Files and hashes: 1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: cUWEiVlAo3AxpwhMCaUH3iOxpxKAoiyVsx1sOeudRAg=)
2: ZoWDl6ndQ9Hfznn3PsQgxbbAxbw.roa (hash: kikQlykcn+WarGEP2RIaDoLYfnMDSfgY1GHVB0fe+tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c8:76:03:2c:30:07:be:b0:98:21:cb:2b:66:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Validity
Not Before: Mar 25 23:00:56 2026 GMT
Not After : Mar 26 23:00:56 2026 GMT
Subject: CN=b133d408f9a86a1b8666d1692a6878c92361db12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:7f:8f:fe:f2:17:a5:13:d7:b5:67:3f:a4:
9f:e4:9a:dd:ec:7c:79:bd:52:53:25:0f:8b:a0:3e:
f7:38:68:b0:8d:84:a1:e2:f8:7c:6d:25:46:4e:ad:
75:eb:92:ff:93:9d:dc:6c:1c:6c:ed:85:27:e3:fb:
15:a7:f4:16:51:e2:b6:51:a5:4c:92:1d:e9:7c:9f:
0d:63:46:c7:fe:8b:2e:20:c5:77:2a:cc:93:31:21:
45:f9:fb:84:65:70:d7:86:61:7c:6c:07:d2:8a:f7:
8d:4d:e6:94:a6:58:24:4c:bd:cc:c5:04:ad:4c:b8:
c8:7e:2c:9d:36:9b:3f:83:25:67:02:1f:63:b5:51:
5c:53:1f:d7:bf:8b:36:e7:8f:df:24:2e:d7:0d:81:
00:e4:72:4e:31:be:4a:df:91:66:64:85:19:b9:92:
6b:d3:4c:e7:68:21:7b:e8:bd:53:53:cf:86:90:0a:
dd:28:3a:01:62:93:29:50:16:59:73:ca:ab:13:52:
c7:06:3a:66:39:c5:41:53:b2:c0:f5:3d:f2:b9:7b:
b5:59:91:be:55:98:cb:ed:46:55:d3:43:10:6a:04:
a7:52:a6:86:55:5a:7c:e9:33:51:70:f6:8c:08:d5:
f0:2d:15:29:1d:a1:40:50:49:19:a9:28:a0:92:a3:
1c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:33:D4:08:F9:A8:6A:1B:86:66:D1:69:2A:68:78:C9:23:61:DB:12
X509v3 Authority Key Identifier:
keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:71:c5:3b:1d:3b:16:6c:30:ea:b1:12:d6:72:3a:5e:53:77:
a5:d9:11:12:50:23:b6:c0:e0:85:dc:0a:c2:39:0f:96:76:6d:
ee:61:7e:9f:36:87:ee:14:e8:16:c3:13:87:1c:27:b8:1f:8e:
f4:21:44:44:df:b1:ea:6a:93:15:c4:89:89:85:75:71:6b:bf:
d9:d4:a6:bf:ba:f1:bb:fe:d9:62:1a:f4:71:45:6b:8d:fb:db:
bf:11:5e:da:c7:10:52:a2:c5:47:d0:60:66:12:b7:7e:9a:54:
31:bf:8c:58:c4:c4:19:20:7f:88:d6:33:9c:8c:a0:a4:04:f5:
a3:bf:6e:61:55:8d:d7:7e:3c:fa:63:58:70:64:fe:1d:f3:b6:
36:3b:44:d1:b7:c5:da:6b:06:f8:fd:93:ca:3d:c7:57:4e:86:
f1:fd:0f:07:d8:dc:91:72:38:dd:ca:48:d9:5b:69:21:3e:3f:
84:0e:b4:36:68:14:8e:35:cf:7e:80:3b:eb:d8:7d:ef:cd:25:
82:ee:ca:b4:ab:86:b9:87:34:9e:58:b5:28:5f:73:5a:29:62:
24:f2:f8:42:0f:d1:1d:f1:d5:c1:e5:bf:41:f3:db:bf:7e:ae:
1f:18:35:fb:f7:a0:10:b6:f7:c1:74:fe:27:80:23:be:5d:0c:
da:5b:4c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:32 2026 by rpki-client