Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File: YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier: 1M0bYgQdN+bBktCn+O636aaPaZ3MprgJvJxnbN+bg3k=
Subject key identifier: 1E:A4:59:6C:43:2C:68:DB:74:76:6E:21:1C:81:BE:B5:DB:21:60:5F
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 019CAA8FDEA029F8ACBBD900E2D9526A58EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number: 0C6D
Signing time: Sun 01 Mar 2026 18:01:21 +0000
Manifest this update: Sun 01 Mar 2026 18:01:21 +0000
Manifest next update: Mon 02 Mar 2026 18:01:21 +0000
Files and hashes: 1: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: k3DBewZUwrR1OVGTYiWUGB+Ngd9nqx3q5FKJKHYlW0c=)
2: n9mxzIt_205s9vyeaLn8CBdcCG4.roa (hash: rvZ5m2zISXN1TJw2DOfdTsy2gRGtTRFcUGePQPD44jY=)
3: uT_DZnppDbYyGpbRufk93-G-qXc.roa (hash: DhGqIEL5HRNKYGVeysWOoXm6c538KCGb6awXVVDvM3c=)
4: zXN8Zo903MoyG9swu9ptS1d7Y-o.roa (hash: wf4nwKfhrGscwzAC+PKo2qMsSU5af4zzL/Bk9hi/rJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:de:a0:29:f8:ac:bb:d9:00:e2:d9:52:6a:58:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Mar 1 18:01:21 2026 GMT
Not After : Mar 2 18:01:21 2026 GMT
Subject: CN=1ea4596c432c68db74766e211c81beb5db21605f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:59:da:9a:93:85:7f:dc:2f:be:32:05:ce:
d0:3b:1d:3e:98:35:df:84:4a:f7:ce:49:b0:17:32:
b7:cd:5a:88:50:33:66:d1:8a:fb:a1:db:ea:d1:27:
df:b6:8e:7b:77:92:44:19:76:85:4f:0a:e5:55:a7:
ea:bd:e6:cf:4d:49:37:86:79:30:e9:40:2b:c0:f9:
c9:8d:67:ef:96:08:ea:b9:43:12:2b:8b:b3:ff:a2:
3c:5a:bf:74:94:92:3e:47:a2:78:be:99:aa:c6:cf:
db:37:52:67:62:58:50:7d:3d:22:4a:a6:00:fc:a1:
4e:aa:d0:08:40:ce:cc:94:47:1f:9f:9b:a2:2c:00:
c3:74:25:a9:60:4b:30:66:a0:55:e3:b1:ba:b8:f0:
5f:fd:48:9a:02:9f:e2:a6:d8:12:ac:a2:ab:fd:36:
2b:0e:7f:55:bb:f3:c4:59:3d:43:3d:17:04:97:0a:
04:b7:47:6c:95:5c:a6:13:aa:84:ee:31:a0:ca:1e:
8e:ac:33:f3:22:7c:7d:e1:83:53:52:59:cf:b0:5b:
da:3c:10:ec:70:bb:11:fd:f3:53:22:4d:2e:13:95:
26:c0:d1:53:5f:34:e0:ea:80:e7:7f:4b:a8:58:92:
45:99:1a:bd:43:91:f1:46:44:66:30:00:c7:62:b5:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A4:59:6C:43:2C:68:DB:74:76:6E:21:1C:81:BE:B5:DB:21:60:5F
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e8:4c:20:3a:0e:01:c2:84:ee:c0:8e:c9:ac:dd:ca:ab:6f:
dc:5d:cb:bc:cf:52:99:7e:f0:c4:3d:31:f6:f8:cd:55:94:ed:
9a:36:b6:e4:dd:46:90:66:f0:07:eb:35:d3:29:57:ee:7b:56:
49:2a:37:3c:83:4d:2e:81:30:62:b7:ea:dd:a3:40:0d:e2:47:
e1:7b:48:a9:63:c8:f7:de:17:06:34:04:ee:ae:08:9d:96:a9:
b6:f8:55:ae:22:4d:d0:72:8c:8c:21:21:88:29:7d:33:f2:70:
ba:4f:b6:b0:be:b8:9b:b8:ea:55:bb:32:fa:83:2e:94:62:3a:
a9:62:e6:1c:4f:3e:b6:b3:4c:bf:dc:44:83:eb:62:3d:36:4e:
c6:84:8a:c1:0f:06:0f:e5:d4:ca:86:2c:e5:6c:14:10:e9:40:
c9:52:ab:86:f0:12:ac:78:03:50:a4:27:03:7f:b6:8d:71:90:
ae:a4:71:26:51:b1:7c:75:60:e4:ad:e8:87:7c:24:88:9d:52:
87:a5:bc:f5:01:40:0c:f7:de:7a:cf:63:0c:50:60:11:7f:ca:
18:24:58:91:c7:d0:4b:0e:88:12:fa:29:f6:96:ff:7c:57:ed:
c7:40:7e:d6:49:c5:ef:0a:b9:30:9d:79:46:11:13:1d:91:4b:
75:ea:be:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:04 2026 by rpki-client