Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: 4XrzydR4fxOWMDPgYZLGH4UDxDhVgJHBwClWIJFMifg=
Subject key identifier: 24:C0:25:23:4F:39:D6:46:68:4D:71:66:30:C4:1A:2C:C6:1A:23:D2
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019D2884AA57141F3E9A314B336AF58A4A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 15B2
Signing time: Thu 26 Mar 2026 05:01:16 +0000
Manifest this update: Thu 26 Mar 2026 05:01:16 +0000
Manifest next update: Fri 27 Mar 2026 05:01:16 +0000
Files and hashes: 1: C3nc48r2b2USpSkgOVzgsEQF2h0.roa (hash: kvFI72ZsGMqBnEvEAYRTWIp6gxPL8rac8rSJwcsVy0w=)
2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: B205Hqj4FsZXlPw+85KhJc208zGcb1RvroXKxaqxR18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:aa:57:14:1f:3e:9a:31:4b:33:6a:f5:8a:4a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Mar 26 05:01:16 2026 GMT
Not After : Mar 27 05:01:16 2026 GMT
Subject: CN=24c025234f39d646684d716630c41a2cc61a23d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:76:2c:3b:c0:e8:58:a8:66:51:9a:47:41:
26:4b:93:2e:ae:28:3e:44:0f:8d:70:9a:a4:55:21:
56:83:d6:e9:ee:c0:b3:77:5d:00:65:18:d6:70:35:
89:d1:e8:29:11:2e:5c:4c:00:d7:c7:16:49:68:5f:
e5:df:fc:79:47:23:05:88:05:c8:80:6d:9d:2b:cf:
33:f6:86:d6:92:d2:66:30:2d:8f:b8:b9:82:08:bd:
64:dd:03:c8:e1:70:6a:6e:3a:db:08:ef:4d:6f:4b:
74:a5:18:45:fe:0b:5a:40:37:97:ac:2f:e6:20:f5:
46:8b:0f:bf:03:4e:fb:67:bd:38:ee:8c:5e:d7:96:
cf:58:46:25:8f:fa:f3:38:fd:da:4a:92:c3:24:2a:
20:d3:25:8b:e8:91:ad:ab:b3:3a:14:13:ab:7a:32:
67:42:16:e3:7b:6d:d1:64:56:29:a5:23:0d:89:e7:
e1:70:70:e9:10:80:19:5c:37:69:a4:81:9b:cb:69:
49:b9:d3:be:33:ca:f0:e2:aa:fa:d4:15:bc:43:e7:
bc:c0:0b:22:b4:2a:4e:58:d0:14:66:a7:b5:69:b6:
ae:30:cd:e1:3e:99:8c:00:81:34:20:25:4a:02:ac:
b6:3a:27:00:dd:60:f9:28:6d:e9:ad:1a:30:c9:13:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C0:25:23:4F:39:D6:46:68:4D:71:66:30:C4:1A:2C:C6:1A:23:D2
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bb:77:0e:25:7b:d5:8f:64:29:87:f6:22:7d:57:4a:55:bf:
4a:50:8d:69:3b:88:e5:35:9e:0f:60:fe:f2:10:c3:43:87:4a:
34:32:1a:4b:61:91:e5:02:27:da:96:e2:4a:45:99:e8:bb:8c:
58:7b:70:dd:96:f1:02:fd:08:3e:bd:4f:52:9b:37:06:e2:b8:
5c:59:57:d4:1b:dd:3a:95:67:9e:e9:64:49:42:9b:b4:a5:87:
a0:62:8a:a0:e5:27:71:b0:9b:56:53:b0:a2:9b:28:ad:32:45:
a6:d3:15:60:00:7d:31:18:8a:20:cc:24:0e:8d:e6:83:47:7c:
f2:c1:eb:7c:41:e6:4a:2b:b6:b1:6e:02:4e:3f:3f:e6:00:9b:
42:76:53:a0:e4:8a:04:42:84:af:fa:cf:b5:39:50:4c:ab:23:
5a:a1:b2:40:23:58:69:82:48:84:4c:52:de:67:af:e3:43:90:
0a:89:d6:19:d2:c9:75:c2:6a:47:82:ed:f9:04:b8:15:b9:64:
e1:88:5d:92:8e:cf:6c:4c:de:82:8a:28:71:6d:8a:8c:88:de:
ce:58:df:d8:38:5e:82:75:24:15:a4:a8:f8:3a:97:a8:b2:97:
3b:96:a3:6a:5e:1d:9f:39:8b:16:f8:25:03:fb:e8:2d:41:46:
c4:7e:b5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:10 2026 by rpki-client