Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: XB/3aUXpSONcTvCfwT3R9YEJVpS+JWGetlDvwsLPim4=
Subject key identifier: 0F:B5:E6:0D:23:90:B9:95:3B:36:A9:0C:FC:BB:50:7C:B2:64:83:C4
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 019CAC10163FE4F7F318CFE5AFDA5B6AF0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:01:01 +0000
Manifest this update: Mon 02 Mar 2026 01:01:01 +0000
Manifest next update: Tue 03 Mar 2026 01:01:01 +0000
Files and hashes: 1: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: epGOxQn55zNZL6IqzLbNIm3cVCx8ptohe2o9eNgjRnc=)
2: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (hash: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI=)
3: yrgQph9zHMA3wU0ZObxjZhTJQrM.roa (hash: XV/X6CYSDEZtr00aa1x8ls6ykfziXhFe1fHOXXDEkhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:16:3f:e4:f7:f3:18:cf:e5:af:da:5b:6a:f0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Mar 2 01:01:01 2026 GMT
Not After : Mar 3 01:01:01 2026 GMT
Subject: CN=0fb5e60d2390b9953b36a90cfcbb507cb26483c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:d5:e0:de:80:f2:00:ed:f8:f1:8f:a6:5a:
ba:a4:9d:e5:5a:41:fa:c9:bb:c6:5b:eb:f4:18:8f:
71:36:df:26:95:61:49:6b:7d:a5:9b:11:cd:3e:a3:
66:d7:e4:2d:94:3a:34:c7:26:fa:73:3e:e7:6b:ca:
e5:29:03:34:f3:f1:27:06:dc:85:27:79:43:48:81:
6e:20:51:a6:c5:75:ab:14:52:8e:4c:b3:a4:4f:0a:
ba:67:e1:a1:73:07:07:9b:1f:f6:8b:8a:fa:88:93:
3f:16:fc:59:5c:e3:e0:16:5e:66:15:f0:42:03:1e:
1f:8a:66:35:ad:54:cd:b9:df:6d:98:db:fe:18:a2:
05:70:a7:09:a1:66:8b:7b:3f:5a:39:9b:ad:08:10:
1c:05:54:9d:69:1f:71:24:e9:09:ce:80:e8:49:16:
f9:9a:68:fb:e1:c7:c1:ce:cc:1b:48:29:fe:8b:21:
31:5b:57:ab:e5:13:1e:d2:3d:0e:e8:e3:bf:53:28:
8d:37:f7:b9:11:08:cf:44:fb:40:d7:e8:59:a2:fa:
af:30:e1:b5:39:18:fd:ad:37:06:16:b2:3e:2f:49:
7d:27:fc:92:4f:d2:06:91:38:c1:e2:fe:32:cf:fd:
08:6e:83:59:f8:8a:81:84:92:21:b6:24:c0:c9:3d:
7d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B5:E6:0D:23:90:B9:95:3B:36:A9:0C:FC:BB:50:7C:B2:64:83:C4
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:03:28:7d:39:f8:9a:1f:37:d4:c9:0d:32:06:ec:31:ae:e0:
e7:64:d7:e3:47:89:75:8f:2a:f0:82:50:89:d4:6a:26:84:aa:
91:0e:a5:37:3b:45:06:2b:32:57:ab:35:53:43:17:81:fc:be:
3f:8f:ee:d0:b9:a9:12:e3:8e:2f:d7:5a:7a:19:69:28:d0:62:
0c:9b:4f:ee:70:91:18:64:10:c9:9f:8e:1b:d9:fa:df:90:bc:
39:56:40:26:2a:aa:9d:f0:a4:23:36:71:c9:04:a2:ac:08:70:
a4:b1:c3:04:3c:a7:31:09:30:58:ac:1f:1e:b2:cd:76:f7:9c:
d1:f6:f8:64:95:b7:30:18:65:ed:03:0c:76:2b:14:34:05:62:
98:c7:01:5d:01:ac:28:7d:f0:9a:53:9a:6b:63:45:21:8a:df:
b8:ae:75:f5:76:58:96:ae:aa:7f:14:e9:3c:67:3b:78:6e:2f:
ef:1c:c6:21:50:7d:c2:da:6f:76:59:52:e0:9e:d3:28:9e:b4:
6b:f6:ea:cf:ee:ba:6c:0c:b8:30:49:c6:5a:92:0a:2d:5a:dd:
33:8c:e5:ef:af:7b:ea:3f:43:44:35:40:ea:22:f8:a4:19:6a:
93:d0:4a:0a:23:30:88:c0:17:88:28:d2:31:12:9c:cf:7c:6e:
ce:cc:db:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:42 2026 by rpki-client