Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
File: YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft (raw, json)
Hash identifier: YByMjk1QLZlSxJoxFEXulA8R6OFQxaGE2mHTtyTM7+0=
Subject key identifier: 88:F1:06:CE:6A:83:B4:57:8D:54:E2:E9:CC:2C:EE:29:40:16:24:C0
Authority key identifier: 62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
Certificate issuer: /CN=62719c6d8b9950378a7489315fb078111a18ad55
Certificate serial: 019CAD2306F77086B6677862CE96BE6705B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
Manifest number: 0160
Signing time: Mon 02 Mar 2026 06:01:19 +0000
Manifest this update: Mon 02 Mar 2026 06:01:19 +0000
Manifest next update: Tue 03 Mar 2026 06:01:19 +0000
Files and hashes: 1: VUDvlZ3nSAHzKEKmaHgmcWJvSvw.roa (hash: iFi7PsloEbqYTaE+ZoaxZ5YffALEaqzMtJKrKwdONy0=)
2: YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl (hash: z/6uLCmum/jAaVQZgLUhSkqT9m9cb9F9iRTOqNuZMPk=)
3: sJpbC87SMVa4vt5NI5bryF6Soa0.roa (hash: Kq0qKJZ6NJFyN4KPgrXNyOIY6c6Ykn/I7S4MDDkskPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:06:f7:70:86:b6:67:78:62:ce:96:be:67:05:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62719c6d8b9950378a7489315fb078111a18ad55
Validity
Not Before: Mar 2 06:01:19 2026 GMT
Not After : Mar 3 06:01:19 2026 GMT
Subject: CN=88f106ce6a83b4578d54e2e9cc2cee29401624c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:7c:17:5c:e3:8e:df:8b:a3:af:b9:93:b0:
b0:e8:d4:4d:de:1b:8f:64:12:1f:6a:12:a5:f5:b1:
84:5f:88:43:16:70:31:36:c1:2c:d1:56:30:7e:59:
0b:6f:c6:9d:5e:5d:02:bc:a9:ca:fc:98:38:8d:56:
61:42:69:9d:00:ae:29:f0:35:76:7d:a6:d9:04:08:
c8:44:51:08:f8:40:5c:40:ac:1e:4d:81:90:e9:50:
e1:c1:45:82:66:f3:76:1c:52:39:61:24:c5:cc:be:
91:c6:7a:94:fe:50:74:7c:9b:14:b0:52:e9:ee:11:
e7:11:7f:90:5b:65:10:c6:8b:ec:25:7b:c8:7d:b4:
79:cc:7e:96:46:b0:f4:a6:e2:8d:25:55:a5:ef:c8:
7f:ad:62:5c:8b:fd:73:5d:4b:ff:32:3a:24:46:b2:
1a:a2:bd:71:88:9d:88:20:95:45:b9:50:57:ad:2f:
3d:cd:2d:4a:af:e7:c0:24:28:7a:6b:6c:45:3f:80:
f8:cf:2b:67:21:89:db:6a:83:fa:ab:87:90:7b:49:
a3:3a:af:4c:6b:59:a7:40:f5:af:be:ad:01:b1:a3:
8e:46:18:5e:a8:17:b0:73:ed:f2:dd:a4:aa:75:cc:
08:7a:3e:38:58:d2:f1:e4:6f:39:af:10:22:db:90:
43:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F1:06:CE:6A:83:B4:57:8D:54:E2:E9:CC:2C:EE:29:40:16:24:C0
X509v3 Authority Key Identifier:
keyid:62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:a0:50:68:18:b1:8c:b8:77:d3:7c:c3:2a:b6:7e:7b:09:ec:
37:bc:f1:5a:3f:c8:91:2f:a4:7e:35:94:22:75:50:bd:77:9e:
c8:5b:f8:1d:c5:8d:8c:df:17:85:5e:10:66:bf:d6:b0:8e:e4:
20:73:ae:ca:8d:c1:65:15:fb:74:fb:af:4a:d7:54:51:f0:5e:
c9:3d:bf:4e:b7:47:e5:94:fc:c9:97:32:f1:80:b3:a7:9c:40:
5a:7f:6c:50:14:9f:72:cc:5f:f2:e4:1e:7b:4d:ba:ea:fd:c3:
09:58:40:9e:31:ae:43:b8:60:8d:9b:18:c2:61:fd:ca:90:7c:
03:87:f3:c2:27:7a:16:16:a8:f4:d8:60:99:17:41:15:13:63:
d9:01:de:f2:38:79:e0:60:63:12:56:df:4f:5c:7d:c6:6f:cf:
d2:fc:cd:45:f7:96:06:5b:72:01:fa:14:92:5f:51:83:dd:74:
22:8e:9e:18:2e:ec:1c:0e:4b:64:ba:81:a6:2d:be:fb:7c:4f:
a2:dd:2f:9f:c0:0f:a0:17:26:0f:85:0d:dd:5b:7b:e4:49:91:
a2:5e:56:54:c4:eb:bd:86:bd:6d:99:45:ba:6f:39:b6:e3:34:
1c:ae:3b:b6:d8:7a:c1:00:9f:f8:f4:4d:35:38:1c:2e:f5:2d:
8f:57:d6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:59 2026 by rpki-client