Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
File: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft (raw, json)
Hash identifier: 0SBrK3D9o12Jr+WpGgd+d3t4VleK8UV7e6OPBNCNHFs=
Subject key identifier: DD:C9:F4:A8:EF:FB:49:29:1A:0A:DD:CE:77:3A:32:4A:3B:4A:F0:0C
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Certificate issuer: /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial: 019CAF7F2D1409CF443B3E102FC4EB3D4886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
Manifest number: 38
Signing time: Mon 02 Mar 2026 17:01:13 +0000
Manifest this update: Mon 02 Mar 2026 17:01:13 +0000
Manifest next update: Tue 03 Mar 2026 17:01:13 +0000
Files and hashes: 1: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl (hash: FXGP9fhS+bO2dKGFEMmivsKmufbtDmISNtT2xNpqQZc=)
2: dfKf0SUwjmWHGeIDN6xaPuWneS0.roa (hash: KNktDMnqe7pkdReM74aezUUfDskVVEXdt3/JJZM1pKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7f:2d:14:09:cf:44:3b:3e:10:2f:c4:eb:3d:48:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Validity
Not Before: Mar 2 17:01:13 2026 GMT
Not After : Mar 3 17:01:13 2026 GMT
Subject: CN=ddc9f4a8effb49291a0addce773a324a3b4af00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:c7:ca:02:b6:9c:70:59:bc:38:cf:af:2f:
54:d3:e9:10:c3:8b:0c:07:1d:d6:bd:9e:65:ae:14:
62:32:6b:e6:bc:f1:9b:c1:ec:57:0c:e7:21:83:0a:
64:a9:ab:7a:61:98:86:9e:c7:b6:d9:82:43:a7:12:
9f:80:24:26:5f:00:fb:a6:94:27:95:ea:f9:a0:b5:
39:e2:f5:8c:6c:b2:ea:6d:0a:bd:15:5c:bd:3b:16:
48:7b:1e:91:9a:c8:ff:ef:06:d2:2c:44:20:bc:be:
f9:b2:e0:c3:8e:09:1e:fd:69:99:ca:35:e3:3c:27:
5e:ce:f2:24:3c:41:1c:56:c5:26:c5:10:eb:e6:06:
06:95:43:54:b7:78:b7:d7:a9:48:6e:58:58:d0:c3:
9a:d5:18:1f:11:ad:91:04:26:e2:2f:c3:b8:8f:da:
2a:12:47:a1:84:02:86:e8:22:df:6a:c0:91:30:a3:
cf:25:32:15:63:95:5c:24:9c:70:12:ea:a3:3e:bd:
17:e3:b1:ac:99:44:60:38:f2:4c:bb:2c:b0:2e:4d:
ef:c9:9b:eb:d2:12:71:8d:00:d7:bc:fc:d4:45:70:
b3:5b:ad:ae:08:f1:1f:86:f0:2f:64:eb:40:d5:e1:
59:50:0c:aa:e0:0e:20:7d:51:a8:aa:3c:74:92:ea:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C9:F4:A8:EF:FB:49:29:1A:0A:DD:CE:77:3A:32:4A:3B:4A:F0:0C
X509v3 Authority Key Identifier:
keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2f:16:f7:a9:7d:dd:a2:c5:e8:18:7c:7f:01:56:7e:35:23:
0e:0c:a2:43:75:42:21:7b:6f:9b:77:a2:8e:b0:05:6e:24:96:
14:36:50:be:34:38:e3:7b:43:ac:c4:38:21:b7:77:ca:98:b7:
0c:ef:23:3d:28:6d:c7:01:6a:94:5e:86:0c:04:0d:f9:3e:ea:
5f:75:3c:7f:c7:e6:2a:35:7e:2e:7b:c0:11:bc:6b:43:6e:f9:
92:4b:a6:f4:cb:e1:19:b3:ac:55:08:72:36:bd:a4:f6:45:73:
d3:3a:02:a7:0d:58:8c:1e:2d:34:0f:cd:13:51:70:9d:3f:d4:
a6:a7:f6:d9:88:c8:42:4b:85:5e:a3:d9:3a:0d:0c:9a:12:92:
43:5f:1b:17:aa:28:14:cd:43:7c:ab:a5:aa:dd:ff:88:79:f5:
5c:37:49:b7:84:7f:27:15:80:c6:74:b0:3d:c8:9b:95:5a:ca:
2e:ab:0b:e1:71:a5:e8:ed:27:f2:45:b8:44:1a:df:34:70:ae:
f5:0d:b6:c4:5b:75:c9:65:1b:42:81:34:39:fb:00:3c:f4:4d:
cf:39:43:5d:ab:a2:ff:99:52:fc:1d:19:e5:c5:b7:e0:ed:67:
88:b8:1f:cd:5c:81:87:b0:f3:dc:7b:36:8f:10:5e:8c:3c:30:
a8:95:ce:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:44:29 2026 by rpki-client