Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
File: YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json)
Hash identifier: wQWWJVzR8u1SSYb6NaYNHoMPElfcbSB5u6a0TSvSi7c=
Subject key identifier: 91:EC:2D:37:93:E4:F5:85:60:F1:92:47:F2:06:4A:45:54:94:45:A7
Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
Certificate issuer: /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Certificate serial: 019D9A3E1972E3F09443CCE8BF34B096A4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:00:54 +0000
Manifest this update: Fri 17 Apr 2026 07:00:54 +0000
Manifest next update: Sat 18 Apr 2026 07:00:54 +0000
Files and hashes: 1: X2IqazocGBh2TzPpbjgU543EV3k.roa (hash: bpCuK7CG9CoRNnFqOKdhYMABq2l/U8E9Zuo+llQrjU0=)
2: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: bMNTJB9cBKDB7yxFA833FAMAKMlQT1MjNH0Jyw/D+2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:19:72:e3:f0:94:43:cc:e8:bf:34:b0:96:a4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Validity
Not Before: Apr 17 07:00:54 2026 GMT
Not After : Apr 18 07:00:54 2026 GMT
Subject: CN=91ec2d3793e4f58560f19247f2064a45549445a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:f6:51:be:ed:e5:aa:5c:fa:4e:51:89:47:
a7:d4:d9:d2:1b:8a:16:ee:57:4c:a4:0d:e9:8c:40:
69:9d:ec:56:cd:59:c4:79:07:8f:59:c7:80:1c:74:
c9:bc:cc:c1:b4:46:4d:54:82:6b:f0:21:0e:64:34:
40:3a:bf:22:a1:1f:fa:95:b5:2a:72:6b:6d:2f:db:
2b:3e:a4:fb:13:54:7e:62:3f:0b:46:8f:d9:80:b0:
a6:59:ae:ab:de:4d:52:4d:53:2b:12:5d:f8:89:4b:
5c:41:2c:26:39:59:d8:22:be:a5:f5:54:b2:ab:74:
90:d1:36:9a:c4:cf:75:90:65:ec:13:29:87:63:29:
23:62:a4:e1:bf:44:7a:e0:18:7d:ab:2d:71:6b:9f:
cc:b0:bc:9d:2b:33:57:8d:29:16:7f:a4:f5:42:6b:
93:75:2d:e9:c3:fb:67:4a:85:b1:ba:9e:c7:39:5f:
35:78:eb:ce:61:5c:e0:14:75:35:75:5b:b7:18:53:
03:2b:43:cb:c9:0d:9d:f6:ea:1e:a1:2f:2f:54:3c:
57:dd:5c:b6:ff:42:c4:8f:7c:e4:7d:41:0c:cd:3e:
5d:6a:12:69:f9:49:ff:2c:0f:53:08:24:72:79:cc:
50:bc:d4:bb:f0:f4:16:78:07:02:b4:65:81:d2:89:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EC:2D:37:93:E4:F5:85:60:F1:92:47:F2:06:4A:45:54:94:45:A7
X509v3 Authority Key Identifier:
keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6b:8a:3d:d9:2f:99:06:44:17:34:28:55:20:a1:50:c0:4f:
45:5f:64:4b:c4:fa:ac:7a:41:8f:84:1c:f2:51:57:0f:3c:00:
e4:fb:6d:2f:b8:f0:0b:3f:1c:c4:4b:73:d9:04:a2:c0:3b:96:
af:e4:d7:8d:cd:d9:7a:cd:00:e9:b4:d3:36:b7:99:b2:6c:ae:
92:d7:e9:51:ba:fc:95:f4:71:dc:94:4d:3f:af:87:70:da:8d:
72:9e:9f:2e:d1:b7:60:94:91:a0:ae:d6:a9:62:37:e4:57:44:
a9:1f:92:41:a4:79:93:ca:00:a2:4e:36:98:50:4e:c4:89:76:
f3:57:ec:94:6e:3a:1e:ae:a4:23:25:c6:99:08:92:5f:18:8c:
09:8d:2b:23:54:41:32:85:dc:33:20:a5:56:88:db:0a:de:1b:
59:23:b6:03:d0:ae:ae:8a:6a:0c:1b:2a:86:7f:d8:91:e4:90:
d4:b3:ee:4f:e0:d7:51:fd:c5:00:33:47:28:06:c8:3c:fd:57:
80:58:b6:88:92:e0:f5:b7:e7:fd:eb:ca:b9:ff:c7:bb:59:8e:
80:11:7b:20:82:19:9f:df:96:e6:54:5e:07:80:49:25:53:ea:
2c:1c:1f:06:63:7d:bc:44:fb:9f:e4:40:28:23:05:5f:d3:9c:
d5:e1:5c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:49 2026 by rpki-client