Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: AELdBcg1s4iBwAVfaTi9eVfu3xm7IFtG8EB0KV2B45c=
Subject key identifier: 1F:1E:A1:5A:15:0C:E9:F4:45:F7:7B:40:CD:B8:96:31:29:1A:47:26
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 019CAB340C81F524D25971AAA0278EE3E413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 103D
Signing time: Sun 01 Mar 2026 21:00:40 +0000
Manifest this update: Sun 01 Mar 2026 21:00:40 +0000
Manifest next update: Mon 02 Mar 2026 21:00:40 +0000
Files and hashes: 1: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: mI/7zCOiUGGVT30pMkUAQW61UO3fdL0fyvPtykYPQAE=)
2: iliXSfFW9CmHSeqMey9o5nQh8YE.roa (hash: Fb6bIsCY/5XAoXMXg9zGQmjVCnZpfmN1KdROzLuLLmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0c:81:f5:24:d2:59:71:aa:a0:27:8e:e3:e4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Mar 1 21:00:40 2026 GMT
Not After : Mar 2 21:00:40 2026 GMT
Subject: CN=1f1ea15a150ce9f445f77b40cdb89631291a4726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:b1:fc:5c:84:1d:49:89:f6:40:5e:1b:49:
0b:6e:b5:a4:fa:88:36:1a:70:75:83:5e:05:be:bc:
94:25:80:1c:34:20:87:d7:f2:cd:ce:cb:6a:d0:31:
5f:0b:3a:a8:c0:36:0a:79:ca:5a:7f:d7:96:4f:1f:
61:6a:21:05:b4:34:e2:57:f7:41:2a:e4:af:d9:90:
42:35:94:69:21:18:94:4b:ee:cd:fa:95:c0:8c:82:
76:f4:e8:cc:f5:95:03:1f:cd:50:6d:8d:87:50:65:
45:ab:18:b6:0a:5a:62:b9:af:48:7f:d7:03:3e:f2:
03:fe:74:a6:75:55:19:0a:5e:0d:df:1a:df:3e:bb:
33:6b:63:77:33:87:0b:92:79:4d:82:9b:25:ba:7b:
12:10:8d:4c:be:28:8d:b2:60:68:ae:1c:46:b5:1f:
59:8f:57:2d:84:83:08:60:c9:41:de:7e:32:d6:ba:
a8:2a:fd:40:d2:bf:b8:0e:2e:9b:09:07:ae:23:4d:
90:50:fe:f5:fd:2e:fc:88:be:90:6d:21:55:30:f6:
12:8f:e0:9d:8f:22:19:fe:4e:e6:e3:e0:42:cc:3b:
2e:90:13:9d:04:24:22:58:39:43:44:1d:c0:ae:ff:
0f:15:e1:0d:d6:7c:91:2f:01:b3:32:5d:1d:09:6d:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1E:A1:5A:15:0C:E9:F4:45:F7:7B:40:CD:B8:96:31:29:1A:47:26
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cd:68:ac:16:72:cb:6d:00:15:04:47:02:ea:e4:07:44:61:
55:cc:9b:19:18:dc:40:b3:a5:29:c4:8c:e4:a2:0c:32:ca:73:
c4:62:cb:9e:c7:d5:9f:9f:c8:7a:01:c3:a3:70:bd:9a:a7:47:
a0:11:da:b4:9e:e7:5e:1c:a8:3d:69:ba:9d:19:2b:aa:94:58:
4b:58:93:35:b1:af:d9:17:56:f8:b8:09:9c:40:88:d4:86:a8:
7f:50:46:c3:46:8d:92:5f:8c:3e:30:7f:c9:57:76:0b:f7:1d:
a7:a1:e7:83:d6:6a:a1:3b:71:b5:40:ec:aa:35:c3:5d:c8:b8:
94:d6:a3:dd:58:20:49:4d:33:dd:e1:fb:e0:00:b9:ec:d1:55:
da:6d:02:99:1b:9d:8d:37:79:9a:32:81:2e:0d:9b:30:f0:f7:
b1:87:b2:da:01:f6:75:c9:f2:84:31:58:90:b8:e6:85:4b:b8:
f2:b2:7f:2e:88:3c:f1:b3:8d:2c:07:60:5b:1c:a4:b6:17:17:
04:de:86:fc:7a:ee:8e:1c:0d:be:37:c6:52:7b:10:72:21:d9:
b9:83:c4:74:f3:c0:09:b9:1a:87:84:de:62:dd:43:20:a4:05:
31:9e:b8:4a:6a:0c:d4:5e:bc:9e:2d:f8:0f:34:9a:2e:72:fe:
17:88:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:16 2026 by rpki-client