Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: feEVbejpre2iIfigNTawT8sMFLCOefcaqUCohLA4hDk=
Subject key identifier: 6B:1D:1E:C8:98:7B:32:18:27:D0:1C:13:D0:DA:4E:4D:B2:61:F5:ED
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 019CABA200354601465AE11D331AF9102BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 168E
Signing time: Sun 01 Mar 2026 23:00:46 +0000
Manifest this update: Sun 01 Mar 2026 23:00:46 +0000
Manifest next update: Mon 02 Mar 2026 23:00:46 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: JCF2/HLsb74eBpRfUX77lJXw9Rhx/18mW4YFonH0R/I=)
2: tCO87qgLeHdiJcQ1IV_bd46Jvho.roa (hash: 2SSHDUuNwyIUrIbmZYF0QjOFxPKwxanOkPswUq79oUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:00:35:46:01:46:5a:e1:1d:33:1a:f9:10:2b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Mar 1 23:00:46 2026 GMT
Not After : Mar 2 23:00:46 2026 GMT
Subject: CN=6b1d1ec8987b321827d01c13d0da4e4db261f5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:01:f7:7d:e4:c5:75:ca:ce:9f:91:4c:50:b4:
33:61:fb:c4:04:2b:60:88:01:81:73:ad:7d:b6:1c:
4f:e6:8f:47:16:6f:1e:01:89:a6:08:b8:44:90:61:
95:60:c0:44:bc:5a:03:91:b6:4f:95:5e:42:71:a8:
5a:88:96:49:7f:2a:9b:6d:02:2a:af:8f:b7:1b:90:
ab:1b:c5:3b:98:af:2d:5a:e9:64:1a:c9:1b:2d:26:
38:f9:9f:d0:06:f3:cf:30:6a:20:dd:70:02:1c:ee:
f0:b3:1d:f6:01:57:6c:58:16:c8:96:60:5f:b3:e8:
8d:8b:b1:19:ff:1c:f6:27:2e:7b:58:36:c6:73:39:
c4:fd:30:f4:3c:3d:56:f0:5e:f1:df:68:88:e8:09:
78:e0:06:ce:08:1d:35:e7:7e:c0:64:0c:74:13:8a:
14:64:e3:b1:45:d8:98:4e:22:4f:a0:6e:6d:33:aa:
2c:61:59:50:e7:77:35:05:ac:a6:1e:e7:28:31:30:
34:4f:08:90:ac:a6:cb:80:c6:b1:1f:c1:84:23:fc:
75:1a:96:4d:8c:f7:57:bc:30:a2:21:59:20:57:49:
06:97:db:40:27:25:f3:85:9b:d8:5b:c9:07:aa:4c:
ea:7c:1f:25:91:c7:8d:4b:92:1a:73:94:09:0a:98:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1D:1E:C8:98:7B:32:18:27:D0:1C:13:D0:DA:4E:4D:B2:61:F5:ED
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9a:24:54:9a:b7:95:20:03:fc:1c:82:64:7f:94:88:07:16:
27:3b:34:12:f6:c1:7b:dc:e1:a4:d8:1e:21:d8:96:e1:74:c7:
16:82:54:73:e4:4f:0c:43:e1:5d:8a:0e:93:be:8f:e1:36:3a:
b8:17:7b:be:31:2e:dc:90:05:5f:99:9e:65:a8:84:5a:5b:9a:
42:bf:fd:43:69:cd:ea:6d:1d:28:7a:fc:10:15:07:a7:a3:44:
5f:e3:17:6f:f0:77:9d:b3:34:4f:8a:f6:ac:87:34:3e:17:c2:
e6:eb:f6:11:20:7b:14:7e:8b:bc:6b:3e:9a:62:e7:c0:78:b2:
ff:fd:e6:c9:da:c5:ae:e9:6d:19:d4:0d:5b:df:b6:2c:05:07:
ba:d6:cb:89:0b:1f:5c:35:fa:19:40:b6:d7:28:07:06:6c:e1:
96:85:c3:03:fd:4c:ce:76:38:ea:87:a8:4b:e0:b2:fa:58:ec:
3f:6b:c9:3a:f1:89:7d:46:f5:7e:33:70:d9:31:33:13:58:90:
06:f6:bf:6e:fe:5b:6e:0d:66:70:d2:d0:05:95:11:32:53:f7:
91:eb:17:fe:69:99:b2:71:3d:43:5c:88:a9:7c:ac:9e:38:af:
fe:2e:be:6b:9e:34:b5:b8:17:da:7b:10:0b:43:95:f1:11:a9:
53:20:79:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrogA1RgFGWuEdMxr5ECukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMTMzMWVjY2Q5NmQwMmMxMDM1NzM0Y2QwMGEzOTBlODMx
MWQ5NDIwHhcNMjYwMzAxMjMwMDQ2WhcNMjYwMzAyMjMwMDQ2WjAzMTEwLwYDVQQD
Eyg2YjFkMWVjODk4N2IzMjE4MjdkMDFjMTNkMGRhNGU0ZGIyNjFmNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QH3feTFdcrOn5FMULQzYfvEBCtg
iAGBc619thxP5o9HFm8eAYmmCLhEkGGVYMBEvFoDkbZPlV5CcahaiJZJfyqbbQIq
r4+3G5CrG8U7mK8tWulkGskbLSY4+Z/QBvPPMGog3XACHO7wsx32AVdsWBbIlmBf
s+iNi7EZ/xz2Jy57WDbGcznE/TD0PD1W8F7x32iI6Al44AbOCB01537AZAx0E4oU
ZOOxRdiYTiJPoG5tM6osYVlQ53c1BaymHucoMTA0TwiQrKbLgMaxH8GEI/x1GpZN
jPdXvDCiIVkgV0kGl9tAJyXzhZvYW8kHqkzqfB8lkceNS5Iac5QJCpiOFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsdHsiYezIYJ9AcE9DaTk2yYfXtMB8GA1UdIwQY
MBaAFGATMezNltAsEDVzTNAKOQ6DEdlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUt
M2IxMTMxZTUwNGI4LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUtM2IxMTMxZTUwNGI4
LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZokVJq3
lSAD/ByCZH+UiAcWJzs0EvbBe9zhpNgeIdiW4XTHFoJUc+RPDEPhXYoOk76P4TY6
uBd7vjEu3JAFX5meZaiEWluaQr/9Q2nN6m0dKHr8EBUHp6NEX+MXb/B3nbM0T4r2
rIc0PhfC5uv2ESB7FH6LvGs+mmLnwHiy//3mydrFrultGdQNW9+2LAUHutbLiQsf
XDX6GUC21ygHBmzhloXDA/1MznY46oeoS+Cy+ljsP2vJOvGJfUb1fjNw2TEzE1iQ
Bva/bv5bbg1mcNLQBZURMlP3kesX/mmZsnE9Q1yIqXysnjiv/i6+a540tbgX2nsQ
C0OV8RGpUyB5QQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:19 2026 by rpki-client