Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier: 7/AZdvrV5BueaX18QeTcjxUdhIlWTz7N84621Ffnqc8=
Subject key identifier: 04:DA:21:67:6C:A3:C8:92:11:A0:49:09:B6:42:42:4F:40:43:4D:B4
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 019D9A06EE408AF1ED934CC9D910A05101D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number: 0EBE
Signing time: Fri 17 Apr 2026 06:00:38 +0000
Manifest this update: Fri 17 Apr 2026 06:00:38 +0000
Manifest next update: Sat 18 Apr 2026 06:00:38 +0000
Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: zkXIoRexXdY6xsXdMzlu7UNcC81XAGGHBKYS755dfK0=)
2: e265eCVZ_zfTOldsmbK9OxkmQeY.roa (hash: YosQ/clAH+U408bmGplqWhphkTjsVjwp5LPxq1REEA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ee:40:8a:f1:ed:93:4c:c9:d9:10:a0:51:01:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Apr 17 06:00:38 2026 GMT
Not After : Apr 18 06:00:38 2026 GMT
Subject: CN=04da21676ca3c89211a04909b642424f40434db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:63:61:84:c0:14:27:c7:25:6b:b4:25:b4:b2:
3c:8c:5b:01:96:43:6d:cb:a6:1a:ff:35:ac:85:05:
4d:e7:81:b5:ac:16:4f:3f:c7:22:5c:57:34:06:dc:
14:1c:f4:d6:38:4d:0b:5a:26:aa:0f:2b:6a:ce:3e:
ee:3a:3d:d4:70:93:bf:cd:00:eb:df:37:fc:91:f7:
c7:dc:8e:a9:d9:1f:b6:df:78:45:82:a7:04:81:68:
a5:1f:d5:f4:09:39:36:3e:a2:09:38:dc:d5:33:e5:
c7:ef:f4:87:38:08:45:9a:0e:aa:e0:da:ab:e4:92:
74:c6:f6:2c:46:af:54:0c:55:fb:19:27:fe:3f:da:
2f:fd:ca:86:1e:ab:0b:af:0b:05:e7:54:6d:a3:9b:
84:29:2c:e0:88:78:9f:1a:09:01:f4:d4:14:0d:d1:
f7:dd:12:45:05:e7:aa:77:4f:de:8d:f9:b1:88:c7:
56:8b:e6:a6:54:46:d6:8f:89:a5:16:70:e9:79:44:
14:6f:68:a7:46:3a:70:08:42:ce:97:10:76:ef:02:
f5:33:ee:16:30:e9:53:ce:22:5b:9e:29:48:38:68:
52:0b:82:85:54:38:92:80:d9:b1:93:8b:b4:bc:c6:
f1:d2:24:11:d6:91:4b:96:b3:05:84:6f:ed:2d:3d:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DA:21:67:6C:A3:C8:92:11:A0:49:09:B6:42:42:4F:40:43:4D:B4
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6c:a0:d9:a3:f5:1a:2d:99:04:c6:46:b9:77:14:a3:9d:ed:
05:c1:97:39:90:55:a6:ce:92:55:5c:85:ee:d7:5d:df:46:70:
d3:62:21:93:18:e3:29:17:a1:a8:41:b3:47:88:f2:78:12:df:
a7:9c:50:aa:dc:da:94:d7:49:45:b2:e9:1a:09:24:54:63:ad:
85:77:3e:3f:cd:95:58:04:26:b0:d9:d4:e2:25:52:1e:4d:ec:
6d:d3:52:9b:cb:e8:95:04:fa:8e:33:43:87:d0:83:7a:4b:e7:
07:e0:26:d5:fd:dc:14:93:7f:27:df:54:de:87:77:57:39:20:
98:63:61:04:a9:96:31:20:ba:b1:18:04:ba:c7:e1:5b:e0:1e:
60:ed:41:78:24:02:6b:7d:48:53:56:c3:77:bf:59:26:5f:1c:
53:6f:6c:85:fe:76:ef:6e:ff:e8:0b:8a:bc:c6:48:89:5d:97:
04:d1:42:53:10:63:1c:55:e8:35:f9:90:bf:20:bb:8c:1a:6d:
91:a3:d0:a6:0c:e3:9f:45:0e:6e:2d:b7:fe:86:1a:d5:8a:20:
74:38:98:4b:59:ae:87:e0:00:7b:d1:85:bf:43:7b:2e:00:5f:
74:03:77:fb:8f:05:8d:49:14:44:a0:6b:d6:70:e3:15:14:2f:
95:37:82:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:56 2026 by rpki-client