Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
File: YE6Z8sS9AZ63cxUmRSbdauHWK00.mft (raw, json)
Hash identifier: op8ZP4eLT6yslqo8M0TcW2HSpeE88xHw/a2o21EiMCg=
Subject key identifier: 99:F8:00:C3:28:4E:84:A6:91:8C:D0:06:EA:2C:65:5C:19:CD:16:12
Authority key identifier: 60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D
Certificate issuer: /CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d
Certificate serial: 019D265F8BEEA3D788BF171A79F772907DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
Manifest number: 033B
Signing time: Wed 25 Mar 2026 19:01:29 +0000
Manifest this update: Wed 25 Mar 2026 19:01:29 +0000
Manifest next update: Thu 26 Mar 2026 19:01:29 +0000
Files and hashes: 1: 1dXa5tkWoInu3h4FaYx5vYuGYA0.roa (hash: 9b7WB/pq7Bp5CHCI2z/vInewOBDZyN3RbRsEInhEG7c=)
2: YE6Z8sS9AZ63cxUmRSbdauHWK00.crl (hash: Knt3pJH25jsFBmL5yj3L7eGQYCklHu2Zlv+C+RERh+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:8b:ee:a3:d7:88:bf:17:1a:79:f7:72:90:7d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d
Validity
Not Before: Mar 25 19:01:29 2026 GMT
Not After : Mar 26 19:01:29 2026 GMT
Subject: CN=99f800c3284e84a6918cd006ea2c655c19cd1612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:82:c5:0c:03:93:17:d5:aa:4a:a5:ec:5f:
9d:24:c9:d4:91:cb:c3:86:46:8d:c2:ab:eb:01:40:
d1:50:86:be:67:13:79:6a:f9:62:f6:d4:45:bd:eb:
9f:cc:f8:2d:1f:82:80:1a:98:d1:ab:c3:f4:a5:33:
17:7d:a1:be:1a:35:2a:d5:97:87:e1:ff:4b:89:24:
cf:84:42:3d:94:bb:2e:b8:ac:32:b9:78:7c:d9:cf:
a1:67:e6:16:e9:5d:9f:aa:6d:82:87:6e:4d:9d:b6:
89:74:96:3d:9c:91:6e:c3:44:87:b4:af:da:7e:0d:
2e:96:bd:96:09:55:7c:b0:3e:4d:f6:4b:ee:56:ce:
0a:a7:71:06:42:d4:8a:5c:ba:86:52:23:18:94:51:
e4:f2:3e:4c:5f:a6:f7:21:4c:47:e3:7c:b4:d1:77:
e7:71:fd:40:35:07:c3:c2:56:cb:99:09:dd:26:3e:
3a:6c:58:4b:7e:b1:11:0f:43:62:13:b3:f1:9d:99:
55:52:3f:d8:5a:b7:04:07:6b:5f:7e:9d:8a:4f:2a:
8e:ff:c5:ff:ea:dc:18:4f:7a:f2:32:2c:07:f8:3e:
80:f7:63:c9:c9:25:31:eb:90:ca:ef:f7:83:30:bc:
70:77:55:a1:b3:cc:80:a0:cc:14:77:05:fc:b0:20:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F8:00:C3:28:4E:84:A6:91:8C:D0:06:EA:2C:65:5C:19:CD:16:12
X509v3 Authority Key Identifier:
keyid:60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:64:4b:11:36:16:76:dd:e7:00:0a:f5:21:54:25:b5:d9:46:
67:c2:87:ff:f4:6a:c5:6b:c6:b7:f4:3e:ca:69:78:e7:67:37:
a2:00:e9:cc:af:bf:01:cf:b5:a6:ad:1c:84:98:97:c3:f5:a3:
2d:0e:08:a4:da:85:8f:fc:c2:b6:85:b1:de:68:2e:29:8b:b4:
b3:90:c9:eb:3e:6b:e2:2e:4c:d6:64:23:40:94:58:17:75:ca:
9c:a3:b2:84:aa:fc:fa:0c:3b:88:ff:08:c1:55:e3:18:7e:ba:
5d:b6:d6:21:0d:11:90:41:8d:fa:8a:da:77:12:bc:2a:98:5b:
be:3d:9c:0e:7c:11:e0:cf:d9:67:ab:0f:10:77:d4:1f:6b:96:
b6:9e:d3:31:24:10:b7:ea:95:97:37:81:08:44:12:6e:86:f0:
8f:d0:7f:fc:2f:1b:ad:18:66:98:ce:d7:10:6d:b7:c5:50:4a:
2a:af:79:94:6e:f3:9f:6a:7c:dd:84:cc:e9:0a:8b:4b:56:5b:
e0:36:ab:42:85:ec:b3:d6:f6:d9:8b:a4:1f:19:f6:09:64:5f:
76:47:d4:cf:82:f3:df:a1:68:40:2c:b2:ea:aa:8f:5e:6a:e2:
d8:b7:d1:d2:bd:35:1b:6b:72:d5:5b:f2:cc:18:e4:1c:e5:45:
66:33:ed:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:51 2026 by rpki-client