Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
File: YPa89uKxCboqFKc7l1rZVEhLS6U.mft (raw, json)
Hash identifier: uzzgIDOPJIwco05r11N291hQSo2r9mMz/stgeiVIX+k=
Subject key identifier: 61:C3:D6:DB:9F:7B:00:43:74:47:FA:51:63:AF:E8:72:A1:22:A4:C8
Authority key identifier: 60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
Certificate issuer: /CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Certificate serial: 019D9AABAC953017F44B574B5F064A99F67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
Manifest number: 0D44
Signing time: Fri 17 Apr 2026 09:00:35 +0000
Manifest this update: Fri 17 Apr 2026 09:00:35 +0000
Manifest next update: Sat 18 Apr 2026 09:00:35 +0000
Files and hashes: 1: YPa89uKxCboqFKc7l1rZVEhLS6U.crl (hash: hht4Tw+pBvg2mBXZLR7WskBVM1tTyHg7XLvofY0ThCo=)
2: iYF3KvUl8FH939niefVDnuUP2E0.roa (hash: hm0pJ2uzYWg+4xRBDq9krSLEFM5bGxPbKMQmAB2V7Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ac:95:30:17:f4:4b:57:4b:5f:06:4a:99:f6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Validity
Not Before: Apr 17 09:00:35 2026 GMT
Not After : Apr 18 09:00:35 2026 GMT
Subject: CN=61c3d6db9f7b00437447fa5163afe872a122a4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bc:49:46:c5:d4:31:1a:f6:4a:74:b9:a2:f4:
bb:05:db:3b:9f:97:dd:39:50:ae:55:41:5b:6a:6d:
fd:28:67:39:4c:40:a4:83:8e:70:89:36:01:ee:49:
10:7f:dd:2b:c5:66:7f:76:99:0b:5f:f0:a9:00:93:
da:dc:b8:a1:4f:35:2b:8b:5b:95:86:e0:55:44:ff:
46:bb:81:ec:b7:72:6c:a6:2c:18:5e:84:d9:00:da:
51:f3:df:f4:69:75:ac:d1:46:9d:bd:0a:75:a1:3e:
ef:56:36:b7:e8:b2:cb:34:7e:70:8f:61:40:a3:ca:
0b:ee:c0:57:62:23:ff:ec:7e:f6:3a:20:ab:7a:fb:
06:0c:b8:1c:d5:05:9e:95:6e:49:c4:2b:3a:2e:aa:
b0:b0:c0:db:56:03:6a:ac:70:8c:74:8f:d6:27:16:
94:1b:23:14:30:00:df:5a:6c:60:2e:bf:7b:b1:45:
2a:09:3d:1f:cf:fc:9c:bf:ca:98:9b:78:a9:84:4e:
3c:17:f2:6a:dd:93:b4:5d:51:f5:06:b8:a1:dd:7c:
f1:61:ca:17:db:43:a2:8e:1d:44:1f:22:ae:67:e0:
d9:a7:5b:dd:17:ad:bb:0d:08:dd:88:f0:88:3a:1b:
d7:a6:35:50:a9:85:91:f7:e6:9a:55:c3:03:8e:af:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C3:D6:DB:9F:7B:00:43:74:47:FA:51:63:AF:E8:72:A1:22:A4:C8
X509v3 Authority Key Identifier:
keyid:60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:25:bb:f4:a5:74:c2:64:7f:79:d1:b5:a6:c8:77:a5:cc:27:
75:d5:40:3e:ba:9f:2c:08:1b:ff:fd:0f:19:36:a2:02:aa:df:
14:be:b8:7c:aa:ff:2d:3c:0f:11:14:8b:f8:30:3f:a6:a6:4b:
74:7f:be:1e:9e:fa:29:01:7c:dd:88:5a:8b:25:3d:eb:f6:47:
4a:85:4e:c1:46:d1:bd:a8:7f:a2:6f:b9:d2:01:5e:a1:3b:63:
a2:68:c6:49:6a:fa:2b:99:eb:1c:30:6b:56:1d:60:e3:ef:ae:
86:b9:78:bd:01:a1:b4:40:a5:2f:56:38:01:0c:76:8e:10:91:
ef:07:ed:15:79:ae:cf:21:ac:5c:08:7a:a8:b5:30:26:dc:68:
b4:d9:8a:94:95:64:68:7e:f5:74:88:99:96:42:67:23:9a:bc:
15:93:12:72:a6:3f:53:49:97:e8:39:fe:30:d8:e0:7f:39:53:
1e:be:d1:a1:b7:b8:d8:35:50:ae:9e:0e:ae:36:60:cf:b3:23:
0c:cf:ed:5c:41:d5:6a:eb:91:0b:25:08:43:9b:a5:9b:29:6c:
65:93:b3:75:dd:66:92:4e:17:54:64:e5:12:4e:dd:3b:d4:e4:
36:34:32:99:ec:55:4d:4f:2b:45:47:21:b3:0f:65:38:60:f3:
5e:42:a1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:45 2026 by rpki-client