Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: b8nShYa/IDM0AYDVfERJaFQ1knbiwTH7Xd0yYIiI03Y=
Subject key identifier: C7:A4:E7:D0:FA:5B:57:9A:A8:29:DF:03:D6:75:7C:FC:C0:12:34:6F
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 019D2704CC53B8FAAD26A4512E9C26DD9323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: 8qyFq0Jw2vV5jElWSS9BdEiMHZI.roa (hash: v/1+49rt+1xmD87nJbTdyd9Pwk6XUeag3Zc7Vhx+XuE=)
2: ENuqnzA3ruRTEDO8nV_unXXFG3s.roa (hash: jqM94Qjxb5BwlTK0O468kBtFYUuLS+gQcO3XoaFwmmI=)
3: roAOVMvnNsfrpVkf2GW7F0kGBAc.roa (hash: IkSo7h5qyB5UPtAZ0suaOuHLsEp0jVopR3VGK0uOiaE=)
4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: BHuXwOryHergIKytvOGFzeHdOho83Et+a+A05PJTlbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:cc:53:b8:fa:ad:26:a4:51:2e:9c:26:dd:93:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=c7a4e7d0fa5b579aa829df03d6757cfcc012346f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:db:ee:4b:2c:0b:14:15:3b:02:5e:bd:73:
96:34:91:a7:a9:25:24:06:a3:a4:f0:83:5c:5b:5a:
fc:9c:ce:1d:59:c7:07:63:3d:98:92:d5:2e:6f:be:
ad:ed:db:df:d5:27:4e:30:bf:f8:00:c0:96:47:db:
ec:2c:5b:b1:89:ad:79:9b:b9:9a:f7:23:d7:84:c8:
ce:6e:1b:72:65:0f:69:01:39:64:23:8f:6c:70:82:
63:43:57:42:b0:de:1c:6a:7a:7e:ee:c3:98:0c:5c:
00:ea:5d:51:07:09:2d:a9:26:c5:7f:35:e8:a3:12:
28:e0:8e:60:96:ca:48:7b:3c:bd:f0:00:53:50:5a:
68:06:7f:00:df:7c:13:d0:32:1c:2d:4f:bd:e0:c8:
e9:a0:e4:33:20:30:11:8f:83:2c:7d:35:77:7a:24:
ca:50:ec:82:3a:fe:16:e5:bf:17:47:64:38:cf:e1:
9b:27:88:34:8e:4f:e1:6c:98:11:dc:71:88:16:f6:
9e:a7:fc:e1:6c:dd:98:e6:6f:a3:e8:a6:45:c5:55:
b1:34:66:12:63:a4:8e:37:6c:c5:a0:21:fd:34:16:
26:09:91:bf:d4:c0:76:fd:74:94:5d:b8:36:bf:c9:
6e:5f:c7:49:3f:2f:13:ff:99:83:7e:44:e4:61:55:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A4:E7:D0:FA:5B:57:9A:A8:29:DF:03:D6:75:7C:FC:C0:12:34:6F
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3b:a9:3d:19:0e:14:8e:ed:50:fa:1b:db:79:50:d2:cc:7b:
2b:c8:00:b4:ea:0c:3e:4f:f8:02:fc:18:55:f1:4b:c0:a9:a6:
26:64:c0:bc:64:2f:0d:a2:ea:cc:43:ef:32:de:dd:1c:df:fb:
58:b8:a3:c7:de:3d:07:7b:b6:2a:46:98:8a:bf:0f:7d:18:e0:
83:2a:23:92:cb:26:5d:12:f2:b2:65:45:91:99:41:e0:43:24:
60:1b:ee:f3:d0:82:e9:6f:ad:df:bb:34:72:72:fb:cc:5e:70:
8a:f6:20:49:4f:9f:46:ee:37:fa:97:10:d2:9d:6d:c2:3e:88:
38:b7:bc:ae:37:82:e3:2b:f7:33:31:46:cc:b3:46:6a:3d:31:
f8:ac:fa:fd:91:69:26:2a:98:37:d2:b1:ed:d8:cc:01:e0:02:
d7:a2:ab:ff:9d:fa:b2:24:81:fb:d2:80:a4:b1:58:c5:16:25:
2e:56:25:c6:12:8e:02:2e:08:8b:52:8f:01:6b:8d:d1:ce:7d:
1e:72:94:e8:dc:af:5d:37:74:c0:5c:0c:ea:75:ab:27:7a:25:
f4:ab:38:84:6b:02:6e:64:09:6b:d9:cb:4e:ab:d2:1d:b5:11:
58:83:39:80:90:59:0c:ea:93:d2:f6:81:b0:00:c4:0d:b6:5a:
7e:46:52:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:54 2026 by rpki-client