Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
File: ymTavZvEZIX2qRY27edT2jjI82Q.mft (raw, json)
Hash identifier: e5XH5nWm3tecqw0KsuPMte0g8f9LzgSHHXQ6VjpyYsw=
Subject key identifier: 73:50:7B:4D:2B:66:BC:13:1F:16:74:E3:A0:A3:78:2D:CE:DC:57:60
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Certificate issuer: /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial: 019D25F134EB6E1425446060BBE5FA1A1672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:00:57 +0000
Manifest this update: Wed 25 Mar 2026 17:00:57 +0000
Manifest next update: Thu 26 Mar 2026 17:00:57 +0000
Files and hashes: 1: NkhNpoa7Mava_QXc8cJpKFD-6x0.roa (hash: NHb2sZxdiKyxH3v4fGC8EWYo7uPMfDDnkonpIAR9yAY=)
2: ymTavZvEZIX2qRY27edT2jjI82Q.crl (hash: 3cvqvsZBNOGTGYIwCEhcrnVFOoFm2c/9a+1XAq2hHeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:34:eb:6e:14:25:44:60:60:bb:e5:fa:1a:16:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Validity
Not Before: Mar 25 17:00:57 2026 GMT
Not After : Mar 26 17:00:57 2026 GMT
Subject: CN=73507b4d2b66bc131f1674e3a0a3782dcedc5760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:83:05:e0:30:5c:7b:0b:d0:b5:e3:e0:bb:
d5:98:aa:c6:bb:2c:e7:c0:5e:08:c6:d2:be:fa:b6:
5f:a3:e6:d6:4b:32:a8:b1:fa:9c:0d:d7:7b:ae:c1:
56:02:b6:f3:ce:a4:6f:ec:48:fe:a1:60:89:66:9e:
c4:de:d0:0d:41:e0:e2:d9:a2:7a:ed:9e:59:f9:eb:
64:72:2d:51:6a:1f:f4:9f:d2:61:d0:4a:43:dc:67:
99:a8:c2:5b:fd:9e:0c:a6:00:f2:23:83:b5:ba:3b:
6f:79:e8:57:79:7c:98:b7:96:4f:9a:29:07:ad:f2:
7a:7c:e2:bd:f8:0b:84:24:78:ea:f2:de:2a:61:92:
63:93:63:b2:75:4b:28:e5:f7:d4:a4:1f:13:32:38:
aa:93:30:19:25:2c:97:70:2f:ba:f9:51:17:1d:75:
e9:6c:b5:5c:e9:55:3d:d1:3c:26:9f:a4:25:cf:7c:
4c:78:c6:93:e3:4d:5f:2c:05:c2:77:fc:01:c4:57:
f3:ae:b3:9e:a3:1e:6a:3e:ee:6d:5e:02:a6:65:1b:
a1:44:f5:a2:fe:3b:f9:d5:6a:41:83:48:5e:a0:6f:
ef:38:05:96:7e:da:fd:1c:9c:18:a1:21:8d:7e:8c:
c9:66:76:cc:dd:e9:d5:b9:49:5c:3c:cc:f9:e2:af:
e0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:50:7B:4D:2B:66:BC:13:1F:16:74:E3:A0:A3:78:2D:CE:DC:57:60
X509v3 Authority Key Identifier:
keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:28:45:bd:66:67:05:81:59:d0:7f:a5:b8:75:68:24:37:3b:
3a:87:64:84:d1:da:51:ff:59:d7:cb:8f:75:e3:ad:55:8f:e9:
24:9f:07:0c:83:55:d7:53:75:05:e8:82:f7:1d:2e:73:33:bd:
18:f7:40:6f:b6:c4:66:33:93:c6:bf:9a:f7:3f:b7:10:03:19:
92:14:6d:26:f9:66:57:39:b9:c0:1b:4e:85:43:37:52:b3:e2:
0b:b3:76:f4:3f:25:00:2a:ab:03:c7:6b:9e:20:9a:87:65:2c:
43:fe:79:9e:51:75:f4:01:7d:20:fc:4f:da:4b:97:25:45:93:
cf:80:df:60:4c:4c:2e:64:77:15:19:fb:04:ba:dd:92:b3:aa:
09:18:02:09:09:5f:f0:23:c2:ad:c9:dd:75:b4:be:4e:83:e0:
6f:b2:fd:7b:1f:18:8b:c9:fb:06:86:44:65:8b:30:50:d1:70:
e6:6a:7d:cb:0d:6c:88:84:90:2a:ba:7f:b4:c5:70:ae:3c:fd:
9a:4b:50:20:71:22:9e:fc:92:e9:a5:3b:e9:47:74:f1:64:74:
18:1e:de:34:60:69:92:79:3b:cf:66:69:5d:64:db:8a:61:87:
15:60:a5:ff:f2:9e:3d:d3:67:7a:42:56:7d:23:8e:ab:d8:43:
3a:75:f6:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8TTrbhQlRGBgu+X6GhZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjRkYWJkOWJjNDY0ODVmNmE5MTYzNmVkZTc1M2RhMzhj
OGYzNjQwHhcNMjYwMzI1MTcwMDU3WhcNMjYwMzI2MTcwMDU3WjAzMTEwLwYDVQQD
Eyg3MzUwN2I0ZDJiNjZiYzEzMWYxNjc0ZTNhMGEzNzgyZGNlZGM1NzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5WDBeAwXHsL0LXj4LvVmKrGuyzn
wF4IxtK++rZfo+bWSzKosfqcDdd7rsFWArbzzqRv7Ej+oWCJZp7E3tANQeDi2aJ6
7Z5Z+etkci1Rah/0n9Jh0EpD3GeZqMJb/Z4MpgDyI4O1ujtveehXeXyYt5ZPmikH
rfJ6fOK9+AuEJHjq8t4qYZJjk2OydUso5ffUpB8TMjiqkzAZJSyXcC+6+VEXHXXp
bLVc6VU90Twmn6Qlz3xMeMaT401fLAXCd/wBxFfzrrOeox5qPu5tXgKmZRuhRPWi
/jv51WpBg0heoG/vOAWWftr9HJwYoSGNfozJZnbM3enVuUlcPMz54q/gTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNQe00rZrwTHxZ046CjeC3O3FdgMB8GA1UdIwQY
MBaAFMpk2r2bxGSF9qkWNu3nU9o4yPNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNDE4ODItYTQzNy00YWIzLWIzOGUt
NTAyOGMyNTliMjY3LzEveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yNDE4ODItYTQzNy00YWIzLWIzOGUtNTAyOGMyNTliMjY3
LzEveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyhFvWZn
BYFZ0H+luHVoJDc7OodkhNHaUf9Z18uPdeOtVY/pJJ8HDINV11N1BeiC9x0uczO9
GPdAb7bEZjOTxr+a9z+3EAMZkhRtJvlmVzm5wBtOhUM3UrPiC7N29D8lACqrA8dr
niCah2UsQ/55nlF19AF9IPxP2kuXJUWTz4DfYExMLmR3FRn7BLrdkrOqCRgCCQlf
8CPCrcnddbS+ToPgb7L9ex8Yi8n7BoZEZYswUNFw5mp9yw1siISQKrp/tMVwrjz9
mktQIHEinvyS6aU76Ud08WR0GB7eNGBpknk7z2ZpXWTbimGHFWCl//KePdNnekJW
fSOOq9hDOnX2ow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:16 2026 by rpki-client