Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json)
Hash identifier: Dtj2rvewpMaR1m+d0uhavANXlEt7hrK6MdJ/BDwRqQ4=
Subject key identifier: 8F:11:6C:50:44:EE:42:9D:05:33:A8:22:E6:1B:BE:71:E5:3E:11:C0
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 019D26CD0EB3EB60EA40BC40CF98BB4AAB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
Manifest number: 0550
Signing time: Wed 25 Mar 2026 21:01:05 +0000
Manifest this update: Wed 25 Mar 2026 21:01:05 +0000
Manifest next update: Thu 26 Mar 2026 21:01:05 +0000
Files and hashes: 1: 4PMuCFyBSoj7qyq3rjq0aPdFuCI.roa (hash: kOdph/hAaSpeDx3Y3960ZxqCLZYMPimF4UrI1AiHxJA=)
2: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: KrLE7n7q8iGBkoFRI8yibwxW8gtDeXUy08HdfqYOk7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0e:b3:eb:60:ea:40:bc:40:cf:98:bb:4a:ab:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: Mar 25 21:01:05 2026 GMT
Not After : Mar 26 21:01:05 2026 GMT
Subject: CN=8f116c5044ee429d0533a822e61bbe71e53e11c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:6d:3b:3f:e4:51:b7:ff:6b:d8:f4:7f:da:
53:ee:f1:51:d2:79:fc:03:83:31:29:8e:7c:af:ed:
e0:5f:d0:4b:ba:7b:f9:8c:65:db:76:e4:31:66:87:
33:0b:af:22:04:af:01:e6:dd:30:22:fc:d0:18:f5:
f4:07:a9:5c:17:f4:16:28:8b:89:58:e7:14:97:cd:
c7:94:72:51:fe:2b:93:d5:94:92:f6:90:b3:3e:9f:
96:29:13:fb:81:67:26:5b:ef:25:ae:0c:d5:90:ab:
d0:b9:84:67:58:ca:57:ef:76:c4:dd:6a:a9:46:cb:
d3:f8:89:bd:fc:df:2a:84:96:59:3c:e1:ed:60:a8:
66:4a:0c:7a:5a:dc:ba:24:21:a2:53:40:c4:2d:ef:
66:7c:2f:8b:14:6a:68:b1:ff:05:2e:83:8d:1b:b6:
5c:d5:30:2e:e0:99:1f:f4:92:67:ff:5b:3c:aa:f5:
84:2f:60:14:f6:c8:eb:2e:5e:ad:3a:df:12:10:e2:
37:41:1e:35:a9:61:6f:97:b4:ab:b0:4a:ee:e4:aa:
f2:ea:b7:c2:49:98:bf:68:d0:f1:b1:c3:24:b0:e4:
95:a9:8f:66:d5:b1:72:c5:77:e6:22:46:40:f0:8a:
1f:49:5d:f0:f5:e2:23:f0:f1:21:55:9d:f2:4d:82:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:11:6C:50:44:EE:42:9D:05:33:A8:22:E6:1B:BE:71:E5:3E:11:C0
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3a:d2:f6:3c:70:fb:99:8f:7f:de:bc:e0:57:39:8e:da:75:
51:09:6c:ea:01:cc:61:80:63:26:f1:62:2e:40:ef:9f:b6:d8:
dd:0d:8a:07:76:78:b7:5e:59:db:98:70:7b:ff:d8:dc:90:e3:
fd:cc:47:f7:33:ad:3e:6b:44:1e:3c:18:fd:1c:c2:24:71:6b:
07:be:df:b5:0d:0e:12:7e:36:af:16:d4:3b:b2:b9:52:20:2c:
e0:fe:f6:66:9c:05:de:27:f5:53:79:f1:ce:5b:8c:84:97:06:
ff:e7:e0:0b:99:87:38:ae:e0:33:99:ef:67:d7:55:c9:26:97:
bc:00:58:16:1d:62:88:ef:b2:e9:09:13:67:6d:a8:29:14:0e:
64:43:85:45:2c:03:1e:09:aa:08:4a:bd:1d:5a:e4:58:4a:5e:
d9:a6:e8:cc:05:92:3d:45:1c:5c:66:79:09:83:6c:f1:e7:ac:
5e:38:3e:60:69:2f:ae:69:56:eb:4b:ac:b5:ab:b4:1d:b3:88:
7a:b4:dc:8c:b2:19:9d:0d:af:06:aa:ab:fd:d4:98:ee:b3:f0:
4c:d6:2a:97:28:05:91:06:45:89:d5:8a:01:3b:87:3d:24:22:
c5:6c:f1:5e:14:c9:d5:e0:f0:85:5e:60:44:73:78:90:03:74:
91:3f:0c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:22 2026 by rpki-client