Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File: Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier: EdYBCq97YP5xDLKo4oZZKhcNUl1O/E8/sj/5n7SgMz0=
Subject key identifier: 8A:DD:CB:1E:AD:DF:7F:2B:AB:CA:8D:5B:EE:22:4D:16:AA:36:B3:AC
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 019CABA2626D3BF22F1D7F4A584AE8C191EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 23:01:11 +0000
Manifest this update: Sun 01 Mar 2026 23:01:11 +0000
Manifest next update: Mon 02 Mar 2026 23:01:11 +0000
Files and hashes: 1: 2dU_Wx7maoKES4uWBmISrFThyIU.roa (hash: ffH0TAg9XSxzOXt+6AV+6sDEvW+c8igbg9XX2e6NJUY=)
2: HZb22Oio0r0dOkO7Ylc22UNpmkI.roa (hash: 4bxPJ8gmL9NMrQNM+ipouVsdrPbO9cdpsR6HkCC+6eM=)
3: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: gM5uFByiEohRzymJgvJ/ytxGIFGsI3Ae5sQCrt619R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:62:6d:3b:f2:2f:1d:7f:4a:58:4a:e8:c1:91:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Mar 1 23:01:11 2026 GMT
Not After : Mar 2 23:01:11 2026 GMT
Subject: CN=8addcb1eaddf7f2babca8d5bee224d16aa36b3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:9e:c1:d0:7a:f5:e3:fa:08:dc:bb:de:3b:
b0:73:4f:43:4f:c5:4a:37:20:3c:43:67:bc:67:f7:
db:70:35:e3:84:39:f0:4f:c8:f0:5d:04:c1:19:c5:
65:2f:52:03:e5:df:4d:0e:b1:6d:43:52:c2:51:11:
55:cf:3e:34:da:c7:54:85:a5:72:42:25:19:3e:f5:
f7:47:80:c1:14:d0:eb:5a:9d:5d:26:27:da:20:17:
85:2a:61:28:5a:c3:b0:27:28:9c:ca:c7:cd:7b:15:
b7:93:e7:88:2d:50:f3:d9:a6:0f:43:b2:ae:d3:ac:
2a:4c:8d:c9:49:0d:ba:bb:ff:f6:cd:f2:89:41:fb:
d8:78:89:fe:f3:76:d5:04:c2:7f:ad:c1:a3:7f:20:
a6:29:d4:c6:a4:1a:d8:34:f0:34:77:84:df:b0:d7:
7c:52:5f:60:df:f1:9b:ba:6e:bd:45:5c:53:a6:95:
ca:f6:c5:cd:74:7e:ce:40:6b:65:af:88:8b:1e:81:
d1:68:3d:47:ac:8f:a9:b4:15:cc:df:ac:17:41:e2:
ae:a2:72:f8:e8:96:b1:bb:4c:72:0c:01:d6:88:d9:
49:1e:86:3d:61:ed:8b:86:47:84:a8:a8:e1:64:43:
34:8c:da:13:07:7a:4b:cc:07:42:78:2e:98:3d:3d:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:CB:1E:AD:DF:7F:2B:AB:CA:8D:5B:EE:22:4D:16:AA:36:B3:AC
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:30:fd:60:76:c2:f8:ff:20:92:6f:97:a1:f0:a3:f0:2b:23:
cb:3c:81:07:0e:75:8f:68:58:2e:c7:9f:a4:6a:93:2f:3d:1e:
7b:4c:25:5d:64:df:bf:a1:03:73:40:3a:1d:d6:85:2d:3a:b7:
19:d5:17:a0:72:7c:c5:22:9a:1b:21:74:b0:23:37:54:62:64:
07:9a:41:d0:55:2c:aa:7e:72:37:53:bd:7d:b5:f9:a7:81:78:
12:3f:83:78:6f:4e:ff:aa:23:04:e8:9a:bc:19:35:a0:0c:08:
a0:53:4d:0c:dd:2d:dd:83:ad:f1:f9:da:17:1c:70:1b:fe:e7:
32:50:0f:6c:66:6f:65:78:af:db:bd:81:a8:be:82:59:f0:fd:
e3:74:5b:65:e0:cb:e1:cd:48:cb:96:4d:bb:64:6d:ff:e5:f1:
d3:32:5e:a5:71:62:75:13:a3:e0:7d:ef:29:c5:ed:af:6f:69:
60:5b:2b:1d:8d:49:a3:20:45:85:3a:b6:a0:61:29:f0:1b:56:
03:0b:9f:9a:98:f2:b5:1a:ba:be:d6:89:33:41:a6:5e:f9:7b:
42:e6:f0:24:bd:1d:c4:b8:fa:01:0e:63:d0:13:28:7b:3d:11:
f6:1e:f8:07:15:df:21:2c:95:6b:c5:b4:a8:50:5c:df:6b:8a:
0c:2f:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:50 2026 by rpki-client