Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: PUDMuK0mWvUa4qTd+NM8MvdouozwGZJIZ/W19ixWr4A=
Subject key identifier: A2:F7:F7:2C:7A:AC:10:98:FE:CD:E8:ED:37:99:38:9B:E2:EB:49:C7
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 019D9AABFA6263821DA7E4E0BD5DDF535A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 10B9
Signing time: Fri 17 Apr 2026 09:00:55 +0000
Manifest this update: Fri 17 Apr 2026 09:00:55 +0000
Manifest next update: Sat 18 Apr 2026 09:00:55 +0000
Files and hashes: 1: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: 0VCgDdmrLKciKm4y23B8Cy+hdwSL3Ma4paYa5UVzoo4=)
2: iliXSfFW9CmHSeqMey9o5nQh8YE.roa (hash: Fb6bIsCY/5XAoXMXg9zGQmjVCnZpfmN1KdROzLuLLmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:fa:62:63:82:1d:a7:e4:e0:bd:5d:df:53:5a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Apr 17 09:00:55 2026 GMT
Not After : Apr 18 09:00:55 2026 GMT
Subject: CN=a2f7f72c7aac1098fecde8ed3799389be2eb49c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fa:82:0b:90:2d:6a:d0:b7:dc:57:48:12:06:
d8:55:83:19:fb:02:7f:c3:4e:e0:59:9d:6b:fd:15:
a2:24:71:02:0b:b7:18:5f:75:17:3b:7e:09:15:c2:
af:fb:ae:23:f8:9b:dc:2d:97:8a:0f:c4:fb:ff:da:
00:2b:5a:6c:1e:06:20:66:a1:0e:e6:ec:4c:6b:4a:
05:c1:c2:31:81:ef:93:87:0b:31:bf:ff:65:bd:6c:
00:f4:51:65:2f:71:a6:85:59:e2:83:06:52:c7:2b:
f5:60:18:22:fd:ba:43:d3:42:93:14:2f:13:b0:1f:
82:d5:bc:23:c3:50:1c:6a:6d:8c:ac:18:5f:a8:03:
5a:7e:b1:e7:8c:2d:94:50:44:f3:5d:fd:88:6d:ec:
db:d3:ee:f5:38:82:16:2f:cd:ec:eb:2e:b1:5f:2c:
7b:ea:22:79:1e:7b:a0:df:06:07:db:9e:3c:b7:b6:
34:92:b3:34:82:85:98:1b:b7:f4:92:93:a8:b5:9a:
af:b0:57:b1:95:99:c8:09:2b:7c:be:49:6b:17:16:
bd:95:7c:39:9b:a2:74:f6:d4:33:f2:44:d3:4f:ba:
55:e3:41:dd:95:01:fc:aa:7d:5b:a3:f2:dc:0b:64:
18:ce:ae:f3:77:69:a3:b0:58:aa:aa:1d:2c:c4:53:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F7:F7:2C:7A:AC:10:98:FE:CD:E8:ED:37:99:38:9B:E2:EB:49:C7
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fc:12:38:d4:26:61:ba:e5:57:60:6d:08:38:dd:23:40:9d:
9a:f3:5f:68:c7:0b:73:64:31:6a:7a:ea:74:5b:3a:91:11:a4:
87:b8:48:42:58:28:83:8d:1c:35:98:94:c0:5f:3a:70:7e:19:
58:0a:c6:1a:40:af:b7:02:c9:c3:c0:59:0f:98:df:5d:0d:70:
1e:f9:9e:12:91:fb:c2:39:3f:f3:42:46:a6:0a:b1:1d:ce:64:
85:97:29:f2:18:7c:b6:6e:db:22:fc:ba:a2:03:95:9d:0e:25:
ac:98:f3:3a:88:6b:71:07:0e:b3:4a:15:10:23:b5:d3:76:af:
a7:4e:38:64:ba:11:66:14:ac:8c:3a:e9:bb:f2:c0:29:f8:70:
0f:a0:8d:e7:7b:09:09:a5:54:24:32:17:d7:39:d4:5f:01:16:
ac:75:32:52:e5:5a:fb:65:84:2e:65:1f:20:4b:4e:4a:ef:bd:
2f:88:07:33:fa:a6:82:7f:84:60:e9:35:a1:d6:25:7d:b1:ad:
ee:ce:7f:19:ca:b4:14:4f:e4:98:62:ed:c7:6b:66:3f:f5:4d:
de:b8:3f:31:46:8d:96:44:4b:02:ee:e8:6f:1f:6b:bc:00:fd:
2b:e2:6f:4d:5e:70:e4:a2:51:8d:15:74:d9:aa:cc:7e:f1:2a:
c6:f1:bb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:57:12 2026 by rpki-client