Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier: oXQOAlGBKoZHSuleDSvhSHqv1iHNNJAHRIafHsi8JDw=
Subject key identifier: 95:4C:47:2B:B6:EC:86:9C:C4:B9:4E:E2:CB:40:1B:3D:DA:07:BE:DD
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 019CAA900BBD954B2F93277539B362F86629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number: 0E42
Signing time: Sun 01 Mar 2026 18:01:32 +0000
Manifest this update: Sun 01 Mar 2026 18:01:32 +0000
Manifest next update: Mon 02 Mar 2026 18:01:32 +0000
Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: Vjq9zsSEmqFeicJs9c3UUqsfCylWADFZT5HrVAO0AOI=)
2: e265eCVZ_zfTOldsmbK9OxkmQeY.roa (hash: YosQ/clAH+U408bmGplqWhphkTjsVjwp5LPxq1REEA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:0b:bd:95:4b:2f:93:27:75:39:b3:62:f8:66:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Mar 1 18:01:32 2026 GMT
Not After : Mar 2 18:01:32 2026 GMT
Subject: CN=954c472bb6ec869cc4b94ee2cb401b3dda07bedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:e6:35:2e:3f:c9:9d:13:a3:29:13:48:db:
61:3c:cd:a6:58:18:35:28:e4:ab:47:5d:0d:0f:4d:
b8:9b:94:88:8d:c4:f0:75:6c:30:93:16:12:e6:f1:
11:09:2c:45:b3:19:ce:a1:2b:25:9a:46:b0:68:ac:
6d:82:81:89:ef:df:fb:f6:22:e8:eb:07:48:ca:0d:
3a:7e:38:fc:ce:fb:6e:20:8c:fa:6a:3f:5c:60:6b:
0f:ff:9d:a0:5b:20:5a:97:1e:af:0a:6f:0b:a9:21:
39:7f:8a:85:21:39:69:2b:e8:84:b3:5e:d5:8c:a4:
62:7a:c6:29:bc:5c:38:39:a7:7e:2b:d4:70:d1:ec:
b4:dc:2c:e8:d9:4a:3c:33:2b:ee:50:8f:14:ba:53:
db:7e:94:65:e9:5a:c1:00:32:3d:b5:50:4b:8a:35:
95:0b:08:25:13:8b:50:b6:58:91:eb:1b:73:ab:9f:
63:89:ac:8f:8d:75:76:a0:a8:5b:ed:0d:34:2c:e2:
1e:dd:d8:33:79:78:a6:f4:65:70:0c:1e:49:a2:15:
49:05:7a:4d:04:bb:58:26:89:a4:d4:f0:d4:9e:84:
b1:47:52:5a:ce:6f:f1:23:7d:1c:18:d8:f2:fb:7d:
48:6b:1e:37:17:bd:80:5c:fe:64:a9:55:fc:2d:d3:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4C:47:2B:B6:EC:86:9C:C4:B9:4E:E2:CB:40:1B:3D:DA:07:BE:DD
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:35:f1:42:ce:25:55:de:2c:cf:8a:32:fb:96:a6:bb:d2:a1:
e6:d6:05:70:69:e0:d7:30:f8:71:b1:75:49:1e:83:4d:7c:e6:
72:ff:14:02:0a:69:37:84:5d:42:c7:3e:f1:cd:b5:d2:f0:b7:
9a:58:d2:64:1f:8b:2c:24:2b:56:2a:ca:40:7a:7f:6d:90:f8:
66:18:c0:aa:87:c1:58:25:b9:2c:5b:48:92:78:d3:f4:49:6c:
3a:2c:e3:6c:29:e5:96:b8:a8:db:bc:0b:cc:98:f7:0d:a3:cd:
5f:bc:50:6d:10:b8:86:75:73:73:5e:61:93:73:15:d2:84:a0:
d6:ac:cb:85:cf:83:4d:ce:2d:5a:9b:5d:24:13:a4:58:83:c3:
b8:12:eb:ff:83:7c:16:11:78:c3:48:7a:f7:80:c9:5b:a4:41:
bd:28:26:24:82:9a:fa:1a:a3:5b:7a:d5:86:db:c1:a8:8c:74:
9e:1f:28:40:f0:65:2b:01:64:e4:ad:36:d3:95:98:2a:c2:08:
98:5f:63:d3:46:17:95:9a:4a:80:ec:09:d8:b1:f3:b6:d4:c5:
b5:ba:70:74:75:1d:4b:72:cb:24:a0:03:e7:75:23:b0:e5:e7:
52:ff:dc:ca:30:c3:07:e7:be:fc:c0:67:41:78:1a:2f:71:dd:
e4:c6:00:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:24 2026 by rpki-client