Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
File: Y4zEB87_V7E7SUVfMMILdhx5ErU.mft (raw, json)
Hash identifier: ELRFOE4N6xIVHepoo1Lvw3CmqqaIV/ULl9it1TWHnkE=
Subject key identifier: 89:1E:66:40:B5:EE:E0:2F:C8:B0:79:88:32:EF:5F:F2:56:31:AD:62
Authority key identifier: 63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
Certificate issuer: /CN=638cc407ceff57b13b49455f30c20b761c7912b5
Certificate serial: 019D284E449400EE9CA384AF0AEAC9A8A910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
Manifest number: 0348
Signing time: Thu 26 Mar 2026 04:01:51 +0000
Manifest this update: Thu 26 Mar 2026 04:01:51 +0000
Manifest next update: Fri 27 Mar 2026 04:01:51 +0000
Files and hashes: 1: Y4zEB87_V7E7SUVfMMILdhx5ErU.crl (hash: PFKvhhvexdI6tDczevT5FISowNrGBAJfiTELPsDhprw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:44:94:00:ee:9c:a3:84:af:0a:ea:c9:a8:a9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638cc407ceff57b13b49455f30c20b761c7912b5
Validity
Not Before: Mar 26 04:01:51 2026 GMT
Not After : Mar 27 04:01:51 2026 GMT
Subject: CN=891e6640b5eee02fc8b0798832ef5ff25631ad62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:22:07:7a:83:b5:cb:f0:16:3c:f4:46:60:
5a:0d:c1:f1:70:86:f9:c7:12:44:0a:cd:7d:d8:b2:
45:e8:19:61:39:a5:5a:88:4d:d5:fe:09:50:a6:5a:
03:f0:be:de:62:0d:7f:29:41:f6:2b:98:20:a0:af:
6b:8c:df:7d:f4:6e:8e:00:af:a7:3f:48:10:0d:4f:
fd:af:56:06:50:bc:5d:16:2e:99:0f:6d:a7:0a:35:
24:57:03:b6:2a:d1:0f:85:08:8a:57:2b:27:5a:e6:
f9:4d:52:0e:8d:41:e8:8d:d4:6b:85:84:07:ef:3f:
26:98:9d:b3:c2:45:3c:46:6e:0f:e6:49:9c:d6:e8:
04:97:10:e1:f8:0e:3c:e2:23:8c:84:ad:fe:07:2d:
1f:ae:50:fb:00:a2:39:46:7b:44:90:67:79:74:87:
72:cd:69:f4:b6:f7:eb:80:b9:97:fb:ac:1e:a8:ed:
af:23:2e:ae:a1:1a:86:ad:73:d3:79:4d:9f:f1:fc:
dd:ff:ff:8d:98:ff:1d:63:fe:a5:c9:74:5f:9a:ee:
3e:da:52:6f:19:88:73:db:aa:dd:c0:f4:35:4e:98:
e0:ed:99:c9:ac:71:6f:00:89:b2:6a:01:e4:ea:f8:
12:4c:22:8e:04:9e:92:81:86:8d:36:2f:87:d6:10:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1E:66:40:B5:EE:E0:2F:C8:B0:79:88:32:EF:5F:F2:56:31:AD:62
X509v3 Authority Key Identifier:
keyid:63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e3:76:68:6f:d3:a8:e0:1e:20:6c:92:2c:82:3f:f3:07:12:
70:a6:8e:45:9c:b4:e0:a6:9b:25:1f:c7:f1:05:cf:97:d1:f0:
2f:53:a4:5f:bf:a9:c2:93:0f:38:66:e5:9e:b4:2a:96:ae:42:
3e:7e:70:2d:e9:79:c1:8d:20:12:a2:3f:89:3e:38:d4:f6:53:
61:b4:89:1a:61:40:64:2d:1d:b2:fd:1f:49:0b:c6:22:f5:06:
f7:2e:3f:91:b0:8f:32:26:c5:e7:f2:fc:d3:4d:05:ec:40:98:
a8:7f:3b:27:70:8d:4a:bb:4f:c7:78:c7:df:27:6e:cf:08:12:
16:28:68:0d:07:2b:b5:fa:00:0c:10:ac:34:56:cc:c4:27:06:
ef:80:57:08:7d:26:69:52:32:09:8f:11:30:30:32:8d:ec:a6:
48:16:64:3e:19:de:7a:30:e6:03:38:6b:2a:12:a4:fc:49:ad:
ca:c8:d6:4b:1d:68:f9:df:98:65:a5:26:66:17:b5:6f:ea:6a:
04:04:c4:d0:b4:e0:3a:b9:a4:2f:cb:4f:23:fb:46:38:4c:19:
0a:04:50:e2:79:7b:f3:ff:ae:b1:8f:68:50:c3:72:67:2c:79:
33:81:dd:8a:6f:d7:7b:cb:95:db:3f:6c:73:bf:48:0c:17:a8:
4d:1d:86:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTkSUAO6co4SvCurJqKkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOGNjNDA3Y2VmZjU3YjEzYjQ5NDU1ZjMwYzIwYjc2MWM3
OTEyYjUwHhcNMjYwMzI2MDQwMTUxWhcNMjYwMzI3MDQwMTUxWjAzMTEwLwYDVQQD
Eyg4OTFlNjY0MGI1ZWVlMDJmYzhiMDc5ODgzMmVmNWZmMjU2MzFhZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte8iB3qDtcvwFjz0RmBaDcHxcIb5
xxJECs192LJF6BlhOaVaiE3V/glQploD8L7eYg1/KUH2K5ggoK9rjN999G6OAK+n
P0gQDU/9r1YGULxdFi6ZD22nCjUkVwO2KtEPhQiKVysnWub5TVIOjUHojdRrhYQH
7z8mmJ2zwkU8Rm4P5kmc1ugElxDh+A484iOMhK3+By0frlD7AKI5RntEkGd5dIdy
zWn0tvfrgLmX+6weqO2vIy6uoRqGrXPTeU2f8fzd//+NmP8dY/6lyXRfmu4+2lJv
GYhz26rdwPQ1Tpjg7ZnJrHFvAImyagHk6vgSTCKOBJ6SgYaNNi+H1hDt2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkeZkC17uAvyLB5iDLvX/JWMa1iMB8GA1UdIwQY
MBaAFGOMxAfO/1exO0lFXzDCC3YceRK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTR6RUI4N19WN0U3U1VWZk1NSUxkaHg1RXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8wNWUzZjYtMTU5OC00YjRjLWI2MDMt
ZDhiYjc5MGMyZDA0LzEvWTR6RUI4N19WN0U3U1VWZk1NSUxkaHg1RXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8wNWUzZjYtMTU5OC00YjRjLWI2MDMtZDhiYjc5MGMyZDA0
LzEvWTR6RUI4N19WN0U3U1VWZk1NSUxkaHg1RXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+N2aG/T
qOAeIGySLII/8wcScKaORZy04KabJR/H8QXPl9HwL1OkX7+pwpMPOGblnrQqlq5C
Pn5wLel5wY0gEqI/iT441PZTYbSJGmFAZC0dsv0fSQvGIvUG9y4/kbCPMibF5/L8
000F7ECYqH87J3CNSrtPx3jH3yduzwgSFihoDQcrtfoADBCsNFbMxCcG74BXCH0m
aVIyCY8RMDAyjeymSBZkPhneejDmAzhrKhKk/EmtysjWSx1o+d+YZaUmZhe1b+pq
BATE0LTgOrmkL8tPI/tGOEwZCgRQ4nl78/+usY9oUMNyZyx5M4Hdim/Xe8uV2z9s
c79IDBeoTR2GuQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:22 2026 by rpki-client