Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: AJQY2qmTqmV3RTJihEKmD4OJid/VyBMyJa2vJDZYRf8=
Subject key identifier: 4F:66:77:65:59:AF:92:60:93:84:E6:82:13:6C:5D:D7:78:F4:E0:63
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 019CACEBA4944AB375CD1B161EBF68935EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 140A
Signing time: Mon 02 Mar 2026 05:00:50 +0000
Manifest this update: Mon 02 Mar 2026 05:00:50 +0000
Manifest next update: Tue 03 Mar 2026 05:00:50 +0000
Files and hashes: 1: ET5vMhLbSdWsUS7cNiMD0Da89x0.roa (hash: +AkKc2WCnmOlPOxnIiAKu7no0yZQrgr6+XgFHwBRgZU=)
2: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: K+eLjP5J9TAQK5SgRPVrjtvwN2Zm/FsFmXe941rMO3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a4:94:4a:b3:75:cd:1b:16:1e:bf:68:93:5e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Mar 2 05:00:50 2026 GMT
Not After : Mar 3 05:00:50 2026 GMT
Subject: CN=4f66776559af92609384e682136c5dd778f4e063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:dd:14:d4:c4:a5:08:55:ee:9d:d2:de:86:
b0:88:7d:1e:af:0a:40:96:64:3d:98:9f:21:a7:11:
0b:aa:64:66:bf:a9:df:66:2d:b0:3b:02:9e:02:13:
8e:e6:05:92:cd:18:44:b3:49:45:e8:24:5c:dc:cb:
93:5e:3b:f9:a3:01:62:0d:3c:b4:b0:5c:6f:ae:f9:
61:ab:0f:d0:26:5e:f2:8e:f9:44:68:22:b8:ae:bc:
06:02:45:2a:a4:9c:b7:50:6d:98:e8:5c:03:4e:79:
27:12:9c:f2:fd:4d:5c:4f:6e:f3:8a:28:4a:2c:01:
27:3a:27:7c:5c:16:75:e0:ff:06:32:af:62:f8:ca:
a4:2f:55:86:e2:b1:9f:d7:c5:67:9d:5b:c0:f9:03:
88:38:ea:7d:99:1a:01:ef:24:15:52:4d:14:74:96:
d3:be:ea:e0:76:f6:14:41:d1:da:c2:93:79:12:58:
7e:29:6b:f7:c0:7c:59:14:54:e8:d1:09:97:0e:2e:
b5:48:a7:ad:5f:d2:50:fc:e1:26:0a:88:0e:e3:8d:
74:dd:86:1b:dc:ce:16:2e:91:4c:31:71:bd:07:69:
ec:53:3e:19:c4:f6:6c:50:15:59:98:14:16:4b:bd:
17:f2:f3:75:24:3c:13:bd:be:17:95:63:30:b7:f7:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:66:77:65:59:AF:92:60:93:84:E6:82:13:6C:5D:D7:78:F4:E0:63
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:7e:32:be:3c:0e:15:b7:8d:f8:90:d6:a2:b0:f6:61:da:93:
ed:9f:20:ed:1b:f2:8b:15:9e:1f:6c:a2:64:fc:46:9d:90:b8:
4c:4c:b7:8f:ad:3b:b7:ed:e5:a9:18:28:ec:ed:6e:1d:38:a7:
db:f2:a0:44:dc:eb:b1:bd:34:a5:0d:5c:77:f2:6b:3c:62:be:
d8:e5:a6:a6:6d:cf:e7:3b:ab:8a:1a:7c:f4:d1:9f:c8:68:c7:
f1:c4:f0:0e:4c:c4:0d:09:6d:70:77:95:59:d9:58:0a:4d:b7:
f0:e5:4a:2d:93:55:5d:7c:54:2c:5e:19:da:17:71:bb:e1:e4:
68:34:e5:10:1c:04:17:6e:53:84:25:2f:9f:ce:e4:6b:33:d5:
6f:ff:70:9f:eb:62:75:c6:ef:1f:9d:d6:06:06:f0:ae:f8:68:
a2:31:05:a4:2a:54:75:18:2b:40:5c:6b:2a:4f:a4:f9:49:d0:
ca:07:95:5e:2e:33:1a:c7:23:32:71:71:f8:1e:45:f1:cf:fe:
c1:c7:4c:7f:b8:e7:ac:2f:14:88:9c:fd:22:ea:ee:ba:4f:28:
82:aa:d4:df:e8:3c:41:21:eb:5f:7f:69:2d:96:33:a3:2f:0c:
47:ca:a7:88:e8:4c:e0:2b:c5:21:e2:9b:be:81:f4:b4:25:a8:
32:98:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:33 2026 by rpki-client