Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: uu8b3rcj+xtZ96239FQwJh92caLQe4vYphPANcuF52o=
Subject key identifier: 6C:9E:72:25:C3:01:AF:01:50:03:1E:63:3A:A2:65:59:21:B1:59:CD
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 019D27DF9B6767D99DC1086E58B3E3928A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 02:00:58 +0000
Manifest this update: Thu 26 Mar 2026 02:00:58 +0000
Manifest next update: Fri 27 Mar 2026 02:00:58 +0000
Files and hashes: 1: DrwW4sKSqTZEXvxPzEr4f3uBsog.roa (hash: GYviIhAWt+rJxTgokFxh6w4GldBuIX4UFW6S+3JXsHk=)
2: P98wNmnJTHdJLeeJu4aYozQSfd0.roa (hash: KbHvAeiSMHCPMC0OSmiZKSqrSyacLzZFYJdIlBywl7g=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: gt+RlG/lFKffBEqkc6bEo1VnzFDDgf0Lz7C+EQ1dK6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:9b:67:67:d9:9d:c1:08:6e:58:b3:e3:92:8a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Mar 26 02:00:58 2026 GMT
Not After : Mar 27 02:00:58 2026 GMT
Subject: CN=6c9e7225c301af0150031e633aa2655921b159cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:2c:f9:c9:6f:fa:8f:b6:ca:17:a5:e0:63:
d3:db:4e:1d:32:0e:6e:fc:52:1b:61:64:89:64:f7:
a4:51:fc:c6:61:72:70:ed:5f:c6:2c:76:76:96:a0:
60:2c:86:3d:fb:1d:1d:8a:ea:b1:7f:4f:41:6f:d4:
89:bb:74:58:d1:64:a4:c5:65:87:b2:de:19:a2:67:
bb:69:32:6c:9d:cc:02:b4:bc:a5:67:6a:5d:ed:ad:
18:c1:2d:0e:10:33:54:90:d0:10:d2:11:25:f1:10:
4a:d7:76:57:46:9a:06:77:33:50:e6:d1:8a:57:4b:
0e:44:de:9c:ef:e3:c9:a7:12:d4:a0:dd:64:6c:00:
85:96:72:68:bf:cf:a6:74:41:40:c8:00:88:8b:7d:
32:48:25:f8:a5:1c:6e:f5:3a:09:dd:db:c0:b0:b4:
9c:ca:f8:b1:73:f8:37:bc:46:cb:ce:ad:2e:49:6e:
e9:5f:63:88:af:58:8e:01:aa:ce:17:c7:57:e9:ff:
fa:3a:9c:96:d9:24:d3:71:93:14:f8:6c:3b:75:00:
c3:65:2d:96:e9:59:8a:74:8c:57:fa:c9:3d:9f:10:
21:c5:73:0b:d5:95:26:bb:e9:f6:c6:f4:06:6d:e0:
cf:6f:3f:a5:ff:73:67:91:ae:a1:30:73:f5:08:80:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9E:72:25:C3:01:AF:01:50:03:1E:63:3A:A2:65:59:21:B1:59:CD
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:34:3d:ca:ae:8d:ad:c6:ed:04:07:82:82:b1:67:e4:10:36:
fc:b0:ec:12:26:92:f6:6a:36:5b:0c:c8:e4:48:e4:cb:91:a8:
70:1b:a2:e5:48:c4:52:77:7d:8d:02:ab:1c:69:57:23:d0:f7:
1c:b4:ee:03:d4:89:11:94:9a:0f:c8:b6:ee:76:b9:be:78:2e:
e5:2d:96:33:f4:8f:a3:74:27:c4:67:67:dc:71:3d:d3:41:34:
8c:9a:60:9f:82:45:0b:f2:9c:26:83:a1:89:43:6f:ee:09:3f:
46:44:79:6d:6c:93:fd:d8:67:10:4d:e3:14:42:08:36:19:12:
bb:5e:d9:d1:4c:a7:fe:07:5e:7a:31:2d:d0:e9:7b:88:f6:3e:
c0:77:e8:87:1b:3a:8c:05:1c:3a:fe:98:6e:dd:34:85:dc:3a:
dc:25:ed:f3:e3:60:0a:18:c3:72:da:12:75:eb:81:30:ca:d1:
70:27:25:80:5e:74:b4:96:ee:49:a8:8a:f4:c7:5e:c0:aa:2f:
9a:e3:95:1a:09:16:4f:1a:a3:c9:cf:b6:63:9f:d2:04:87:f8:
8f:fb:c1:08:c2:fc:00:86:e4:e9:3a:59:e3:fa:67:a7:a4:44:
90:27:a9:32:01:77:e4:26:41:8c:bd:b1:0f:3a:ee:bb:21:86:
7a:b2:4f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:14 2026 by rpki-client