Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
File: YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft (raw, json)
Hash identifier: nK+XvvM6WnoF5rWpFNeL+nIToKdrC3sBG1h1EhiZQ54=
Subject key identifier: D0:8B:AF:DE:6F:9F:A6:77:7D:B2:AE:84:99:36:66:9C:CE:24:06:C8
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Certificate issuer: /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial: 019CAB6B1FF8CDFE89369AD981EA34F7BD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
Manifest number: 08AA
Signing time: Sun 01 Mar 2026 22:00:50 +0000
Manifest this update: Sun 01 Mar 2026 22:00:50 +0000
Manifest next update: Mon 02 Mar 2026 22:00:50 +0000
Files and hashes: 1: 45ppuvoiJYQJiK8xXl1hgMdRWz0.roa (hash: LmMNhIsl4kRzjwmrT9h+IBDFabhZvSaVZDhVFHa5NQE=)
2: T5IQ4IhshTRiFenVlDb9H-uzNG0.roa (hash: 6i4yB4JY7PrncdZg9kkNq7TpPmD1RLEzHYX4D9lyu0U=)
3: YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl (hash: zsmwUGK9+WqKwhZisGBQhPSYjqflXTVJqq7ngUTgpO0=)
4: u4_p9gq8PxyzNdqeO2tr-kmMvH0.roa (hash: e0t9kEWRvLOzDfbUzdP5JA+w9dbBhqKylm3ESrjwKB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1f:f8:cd:fe:89:36:9a:d9:81:ea:34:f7:bd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
Validity
Not Before: Mar 1 22:00:50 2026 GMT
Not After : Mar 2 22:00:50 2026 GMT
Subject: CN=d08bafde6f9fa6777db2ae849936669cce2406c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:09:24:85:65:86:32:8a:be:33:ac:cd:97:
88:c3:07:03:84:19:2c:60:25:f3:22:31:f0:92:b8:
4d:7e:33:fb:32:4e:15:f2:db:bb:2f:d1:77:87:c0:
07:c7:8a:bf:5b:fa:25:21:7e:e6:e3:71:7c:41:9a:
2d:6b:df:15:a9:cd:c9:7f:45:d0:86:47:4d:31:97:
79:aa:26:a9:1f:3f:99:71:94:b3:e1:cd:ec:8e:20:
16:c3:50:af:be:b5:be:6c:73:61:de:7c:8c:de:54:
76:3f:4f:ec:e7:c3:14:da:59:c5:0e:6b:66:65:84:
ea:c7:d2:4f:3f:0b:00:1f:08:01:6c:60:04:f0:67:
40:f5:9a:fc:22:58:0d:77:ad:de:65:83:d5:ad:53:
9e:58:25:fa:36:a7:26:eb:eb:32:8b:da:01:82:57:
ac:99:4c:58:cc:05:31:06:7e:64:25:3b:26:a7:29:
7e:aa:44:64:92:1c:7a:11:d7:1f:2a:52:20:f5:20:
07:01:1e:ef:23:f9:d4:25:bf:d3:5b:3a:f0:42:94:
c9:9b:e5:ab:7d:a2:d2:04:97:fa:80:b1:57:50:79:
75:28:e9:6e:ba:ce:c4:48:74:74:d0:86:32:cb:45:
b5:d3:8d:73:f2:9c:9a:be:ef:e1:4f:74:88:b8:df:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8B:AF:DE:6F:9F:A6:77:7D:B2:AE:84:99:36:66:9C:CE:24:06:C8
X509v3 Authority Key Identifier:
keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:53:cb:72:17:e3:ff:0c:1d:91:49:d8:e4:ed:aa:ea:ce:ae:
3a:43:9a:8e:d1:50:65:a5:41:f7:ae:63:b4:49:b7:d9:19:a0:
04:0e:92:e4:88:fe:60:e7:92:94:0c:b1:8c:8b:c7:f7:49:50:
60:55:30:47:bd:34:f7:6a:96:3c:14:c0:3f:3c:ed:b7:ae:6b:
f1:9e:48:f9:2e:82:74:90:07:85:b6:d6:a7:89:77:cc:41:c6:
4b:5d:a8:44:ea:a3:83:7a:ae:8c:b5:f3:84:c2:e9:7e:21:d5:
9a:6d:6b:8e:6f:4c:4d:fd:13:43:d4:ce:ae:fd:fa:29:f3:29:
50:99:21:fd:be:95:75:12:36:c4:c3:2a:4b:0b:1d:d1:f0:60:
2c:1b:96:fd:ff:09:fe:7f:69:16:5f:75:67:3a:08:ce:78:63:
80:b4:17:76:3d:39:90:39:b4:ac:fe:39:de:c5:31:84:8c:1d:
41:58:ea:9f:a2:0e:4b:4c:8e:db:a3:73:59:c7:22:08:6f:97:
2b:4c:43:85:35:ee:fe:77:aa:0b:d6:fd:12:65:c0:b5:b3:22:
19:b2:6a:81:c5:c5:e1:63:b2:b3:cc:4f:e3:6a:81:64:ae:8e:
3d:ce:8d:27:43:ef:31:84:3f:7a:c9:66:ee:c2:90:19:81:37:
05:2d:1a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:41 2026 by rpki-client