Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: X+1k4Acywws19r/TrGc84ILqzGK6T0KCH/M+HWk/8+Q=
Subject key identifier: CB:07:50:12:91:9C:E0:08:64:14:6A:CD:E8:47:EE:63:12:67:A2:43
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 019CAB6B9A74236A90DE0C87063E71322B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 12EB
Signing time: Sun 01 Mar 2026 22:01:21 +0000
Manifest this update: Sun 01 Mar 2026 22:01:21 +0000
Manifest next update: Mon 02 Mar 2026 22:01:21 +0000
Files and hashes: 1: ICH7QlH8-My8EF2NHU5TQA04o8k.roa (hash: tNyfEnCLQhnnGR56E80TEWwMugIJUGjzMZjCruGv2JM=)
2: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: tjicN6mzD/5082Tnz2E9C4OnuRJLiepGHQtnSCyBKpk=)
3: sRtXhXnTV3BV5O7Uk5pPU6e6DHY.roa (hash: kK2zj8c+pEZD+bWtboW9Noev8kavvORxA7HxKk4tpBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:9a:74:23:6a:90:de:0c:87:06:3e:71:32:2b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Mar 1 22:01:21 2026 GMT
Not After : Mar 2 22:01:21 2026 GMT
Subject: CN=cb075012919ce00864146acde847ee631267a243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:a3:8b:67:db:5f:26:c3:24:91:05:80:c1:
35:8e:3f:6d:31:bf:95:10:80:d9:ff:43:f4:88:eb:
0f:2f:1d:ec:d8:f6:f7:eb:36:34:fd:12:f0:02:f1:
bb:93:e6:3b:d2:0f:56:96:29:0d:d0:90:07:e5:a3:
d3:ef:5d:01:6b:c8:29:66:b3:ff:42:f1:26:23:df:
97:c6:b1:05:60:9f:ce:25:02:e9:38:c2:ea:e8:99:
8e:32:c3:2e:17:65:d2:cd:48:8b:91:19:7e:66:5f:
d6:4f:99:cd:b7:76:87:bf:45:98:3f:e5:30:ec:27:
e0:0f:4f:cc:2e:9f:69:b2:98:e3:73:b1:0d:9f:14:
1a:53:08:86:02:9b:d0:5c:0f:8a:02:5d:90:78:43:
60:9c:4d:e7:da:38:cc:6f:93:11:d1:d7:1f:18:f3:
3a:dd:be:03:61:1d:46:32:b9:de:cb:49:ff:0f:d2:
28:69:3b:8c:16:df:ff:a7:4b:92:2c:60:43:41:41:
d3:81:a4:11:eb:7d:b1:1d:84:f4:3e:9e:e5:79:4c:
a9:ed:ff:47:2f:3b:e1:5d:dd:c0:1f:15:eb:99:1f:
bc:ae:97:b5:f3:43:e3:75:da:c7:d4:01:e5:32:b7:
1b:ef:59:0e:6b:18:a0:38:60:db:18:7b:78:cd:c7:
e0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:07:50:12:91:9C:E0:08:64:14:6A:CD:E8:47:EE:63:12:67:A2:43
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:dc:33:48:5a:a3:20:e0:dc:9d:0c:cc:39:43:b0:c6:5d:65:
12:fc:81:d8:89:93:a4:e5:c0:f4:9b:25:bf:10:e1:f8:9f:7f:
27:5e:93:f5:93:fb:d9:49:95:dc:68:c6:d7:ed:41:aa:13:7b:
03:19:c0:58:53:da:e7:1d:cc:dd:a3:cd:30:54:30:ab:dc:6e:
d5:28:54:b7:0d:68:a8:4d:f0:b2:de:f8:5c:bc:b6:22:2b:8c:
b5:95:2d:ee:48:63:47:01:74:2a:7f:f1:1d:09:6e:4b:51:68:
7e:9a:ac:16:22:37:9d:c7:0f:d8:88:c2:87:4e:1f:46:27:59:
67:c4:6d:b4:af:02:ee:29:f1:97:ca:b2:98:e1:0a:96:0c:92:
1c:8b:ee:8d:18:59:e0:fd:3c:6f:23:2a:07:ca:8d:aa:f0:e8:
57:8a:65:f1:0b:bd:c9:52:33:5c:c4:2d:b2:82:70:6b:7c:6b:
30:4c:34:76:ec:18:02:ad:c2:83:ee:63:e7:06:07:b2:cf:5d:
17:5c:df:5a:a4:51:f6:0d:ea:e5:44:64:fd:5e:97:03:fd:6b:
0b:92:68:66:4c:e9:7f:d6:3a:2c:6f:0e:a7:61:0e:bc:7e:25:
6b:e7:42:f8:85:b4:05:cc:2e:25:ca:7e:09:c2:9b:e4:27:30:
a0:45:b7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:51 2026 by rpki-client